staticeffect

PowerShell

PowerShell for every system!

mimikatz

A little tool to play with Windows security

WebFundamentals

Former git repo for WebFundamentals on developers.google.com

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

zaproxy

The ZAP core project

oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

ModSecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

tbhm

The Bug Hunters Methodology

payloads

Git All the Payloads! A collection of web attack payloads.

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

sslyze

Fast and powerful SSL/TLS scanning library.

dnsrecon

DNS Enumeration Script

warberry

WarBerryPi - Tactical Exploitation

ModSecurity-nginx

ModSecurity v3 Nginx Connector

OWASP-Testing-Checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

fuzzer-test-suite

Set of tests for fuzzing engines

onetwopunch

Use unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.

Halcyon-IDE

First IDE for Nmap Script (NSE) Development.

ikeforce

Nmap-Tools

SpiderLabs shared Nmap Tools

powershell_scripts

Powershell Scripts

bag-of-holding

An application to assist in the organization and prioritization of software security activities.

dnsmap

fork of http://code.google.com/p/dnsmap/source/checkout

NSE

Some works on Nmap Scripts (NSE)

BurpNotesExtension

Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.

TarPyt

A web spider's worst nightmare.

Burp-Importer

Burp Suite Importer - Connect to multiple web servers while populating the sitemap.

rockspider

Creates the initial scope of files and directories/folders of a web site for Spiders/Robots/Crawlers