shaggyz

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

mimikatz

A little tool to play with Windows security

impacket

Impacket is a collection of Python classes for working with network protocols.

dirsearch

Web path scanner

thc-hydra

hydra

nikto

Nikto web server scanner

exploitdb

The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb

how-to-exit-vim

Below are some simple methods for exiting vim.

wfuzz

Web application fuzzer

nerdcommenter

Vim plugin for intensely nerdy commenting powers

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

Windows-Exploit-Suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

krackattacks-scripts

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

ack.vim

Vim plugin for the Perl module / CLI script 'ack'

RED_HAWK

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

pycrypto

The Python Cryptography Toolkit

SILENTTRINITY

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

libnfc

Platform independent Near Field Communication (NFC) library

wordlist

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.

redsnarf

RedSnarf is a pen-testing / red-teaming tool for Windows environments

dnscan

redis-rogue-server

Redis(<=5.0.5) RCE

Shiba

Rich markdown live preview app with linter

pth-toolkit

Modified version of the passing-the-hash tool collection made to work straight out of the box

tomcatWarDeployer

Apache Tomcat auto WAR deployment & pwning penetration testing tool.

cpe

CPE: Common Platform Enumeration for Python

windows-kernel-exploits

Windows Kernel Exploits