pikpikcu

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

Language:PythonMIT1719 42 27

Exegol

Fully featured and community-driven hacking environment

Language:PythonGPL-3.01611 35 84

Web3Bugs

Demystifying Exploitable Bugs in Smart Contracts

Language:Solidity1442 31 20

asn

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server

Language:ShellMIT1198 33 46

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

Language:PythonNOASSERTION1195 17 208

dnscan

Language:PythonGPL-3.01087 35 21

HardHatC2

A C# Command & Control framework

Language:C#BSD-3-Clause923 17 14

ShadowClone

Unleash the power of cloud

Language:PythonApache-2.0650 10 45

Logsensor

A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

Language:PythonGPL-3.0454 10 4

Python-dsstore

A library for parsing .DS_Store files and extracting file names

Language:PythonMIT418 7 2

ntlmscan

scan for NTLM directories

Language:Python343 120

AdbNet

A tool that allows you to search for vulnerable android devices across the world and exploit them.

Language:Python342 6 5

artemis

ARTEMIS: Real-Time Detection and Automatic Mitigation for BGP Prefix Hijacking. This is the main ARTEMIS repository that composes artemis-frontend, artemis-backend, artemis-monitor and other needed containers.

Language:PythonBSD-3-Clause296 23 282

HEDnsExtractor

A suite for hunting suspicious targets, expose domains and phishing discovery

Language:GoGPL-3.0286 5 2

Log4j-RCE-Scanner

Remote command execution vulnerability scanner for Log4j.

Language:ShellGPL-3.0255 9 5

bounty-monitor

Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.

Language:PythonMIT217 8 1