ring0lab

amass

In-depth attack surface mapping and asset discovery

yasuo

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

lets-chat

Self-hosted chat app for small teams

ARPER

ARPER is an arp cache poisoning tool, it sends spoofed address resolution protocol messages onto a local area network. It has the ability to arp-poison multiple-host systems.

fast_meterpreter

Responder-Windows

Responder Windows Version Beta

shellcodeexec

Script to execute in memory a sequence of opcodes

security-cheatsheets

A collection of cheatsheets for various infosec tools and topics.

Empire

Empire is a PowerShell and Python post-exploitation agent.

CredCrack

A fast and stealthy credential harvester

KrbCredExport

Exports Kerberos KrbCred Tickets for use in Mimikatz/Beacon from a Kerberos CCache File

NetRipper

NetRipper - Smart traffic sniffing for penetration testers

CrackMapExec

A swiss army knife for pentesting networks

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

pentest-tricks

Small scripts to assist in pentesting

autodane

Automatic Domain Admin and Network Exploitation toolkit

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

tilde_enum

Takes a URL and checks the system for the tilde enum vuln and then find the files.

kerberoast

ZackAttack

Unveiled at DEF CON 20, NTLM Relaying to ALL THE THINGS!

EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

BLEKey

A Bluetooth Low Energy device for interfacing with Wiegand

phishing-frenzy

Ruby on Rails Phishing Framework

impacket

Impacket is a collection of Python classes for working with network protocols.

dnscat2

hacker-scripts

Based on a true story

WhiteListEvasion

Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.

ike-scan

The IKE Scanner

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

heartbleed-poc

Test for SSL heartbeat vulnerability (CVE-2014-0160)