penetration-testing-tools

There are 47 repositories under penetration-testing-tools topic.

urbanadventurer / WhatWeb
Next generation web scanner
security web scanner ruby penetration-testing kali-linux owasp penetration-testing-tools penetration-test hacking hacking-tools network-security recon appsec application-security pentesting pentesting-tools pentest web-hacking security-tools
Language:Ruby 5340
drk1wi / Modlishka
Modlishka. Reverse Proxy.
phishing penetration-testing-tools mitm reverse-proxy security-tools
Language:Go 4745
cdk-team / CDK
📦 Make security testing of K8s, Docker, and Containerd easier.
penetration penetration-testing-tools kubernetes docker hacktools k8s-penetration-toolkit k8s linux exploits cloud-native blackhat hitb cloud-native-security container container-escape container-security kernel-exploitation kubernetes-security privilege-escalation vulnerabilities
Language:Go 3770
t3l3machus / Villain
Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
open-source pentest pentesting readteaming redteam-tools redteam cybersecurity offensive-security c2 hacking hacking-tool penetration-testing penetration-testing-tools
Language:Python 3645
kelvinBen / AppInfoScanner
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
android apk apk-dex hacking hacking-tool ipa network-security penetration-test penetration-testing-tools python3 scanner security security-tools tools web-hacking
Language:Python 3051
cloudfox
BishopFox / cloudfox
Automating situational awareness for cloud penetration tests.
aws cloud cloud-security golang penetration-testing-tools security
Language:Go 1857
cyberark / kubesploit
Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.
containers kubernetes penetration-testing-framework penetration-testing-tools redteam-tools security-tools security post-exploitation golang red-teams c2 http2 command-and-control agent
Language:Go 1089
rhaidiz / broxy
An HTTP/HTTPS intercept proxy written in Go.
wapt proxy interceptor broxy http-interceptor hacking security http-proxy qt5-gui golang websecurity http-security go qt-wrapper penetration-testing penetration-testing-tools
Language:Go 999
Fahrj / reverse-ssh
Statically-linked ssh server with reverse shell functionality for CTFs and such
backdoor conpty golang hacking penetration-testing penetration-testing-tools remote-admin-tool remote-shell reverse-shell security security-tools ssh terminal
Language:Go 898
reverse_ssh
NHAS / reverse_ssh
SSH based reverse shell
reverse-shell ssh golang scp proxy shell pentesting sftp tunnel hacking pentest static-binary conpty penetration-testing-tools security-tools terminal
Language:Go 876
Esc4iCEscEsc / skanuvaty
Dangerously fast DNS/network/port scanner
penetration-testing penetration-testing-tools pentesting pentest dns dns-client subdomain-scanner subdomain-enumeration scanner rust rust-lang security security-tools cybersecurity osint-tool hacking-tools redteam redteam-tools
Language:Rust 872
Hackmanit / Web-Cache-Vulnerability-Scanner
Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).
bugbounty hacking hacking-tool penetration-testing penetration-testing-tools pentesting scanner security security-audit security-scanner security-tools vulnerability-scanners web-cache
Language:Go 828
JustTryHarder
sinfulz / JustTryHarder
JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)
oscp testing penetration penetration-testing penetration-test penetration-test-framework penetration-testing-tools penetration-tests pentesting pentest pentest-tool pentest-scripts pentesting-windows pentesters pentesting-networks pentesting-tools pentest-tools pentest-environment hacktoberfest hacktoberfest-accepted
Language:Python 785
R0X4R / Garud
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
bugbounty bugbountytips bugbounty-tool reconnaissance subdomain-takeover golang bash-script penetration-testing penetration-testing-tools garud gf-patterns assetfinder vulnerability vulnerability-scanner
Language:Shell 763
SSTImap
vladko312 / SSTImap
Automatic SSTI detection tool with interactive interface
information-security penetration-testing penetration-testing-tools pentest pentest-tool pentesting pentesting-tools rce ssti python
Language:Python 715
jwt1399 / Sec-Tools
🍉一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能。
django penetration-testing-tools python3 scan-tool security-tools vulnerability-scanners
Language:Python 664
x364e3ab6 / DudeSuite
Dude Suite Web 渗透测试工具
browser dude hacker packet penetration-testing-tools scan scanner-web gui hackertools hydra nmap tools sqlmap acunetix-api awvs awvs14 acunetix14 acunetix15 awvs15 dudesuite
650
Cgboal / SonarSearch
A rapid API for the Project Sonar dataset
subdomain enumeration bugbounty penetration-testing penetration-testing-tools dns sonar-api subdomain-enumeration osint osint-tool rapid7
Language:Go 639
MattKeeley / Spoofy
Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
application-security appsec cybersecurity deliverability dmarc email-security emails infosec penetration-testing penetration-testing-tools pentesting phishing python python3 redteam security spf
Language:Python 597
hueristiq / xurlfind3r
A command-line interface (CLI) based passive URLs discovery utility. It is designed to efficiently identify known URLs of given domains by tapping into a multitude of curated online passive sources.
osint penetration-testing penetration-testing-tools bug-bounty bug-bounty-tools ethical-hacking ethical-hacking-tools osint-tools red-teaming red-teaming-tools web-security contentdiscovery reconnaissance go golang
Language:Go 538
InfosecMatter / Minimalistic-offensive-security-tools
A repository of tools for pentesting of restricted and isolated environments.
login-automation powershell brute-force penetration-testing windows login-brute-force-attacks penetration-testing-tools security-automation restricted-environments security-audit smb active-directory portscanner port-scanner port-scanning portscan
Language:PowerShell 534
Coalfire-Research / Slackor
A Golang implant that uses Slack as a command and control server
pentest golang python c2 penetration-testing penetration-testing-tools remote-admin-tool command-and-control red-team
Language:Python 458
redeye-framework / Redeye
Redeye is a tool intended to help you manage your data during a pentest operation
blueteam framework knowledge-base penetration-testing penetration-testing-tools redeye redteam
Language:JavaScript 458
berylliumsec / nebula
AI-Powered Ethical Hacking Assistant
ai crackmapexec ethical-hacking ethical-hacking-tools machine-learning nmap vulnerability-scanners zap metasploit nuclei penetration-testing penetration-testing-tools redteam-tools hacking hacking-tool
Language:Python 403
helich0pper / Karkinos
Penetration Testing and Hacking CTF's Swiss Army Knife with: Reverse Shell Handling - Encoding/Decoding - Encryption/Decryption - Cracking Hashes / Hashing
encryption-decryption cracking-hashes hashing-algorithms reverse-shell encoder-decoder pentesting pentest-tools swiss-army-knife penetration-testing-tools ctf ctf-tools hacking-tools
Language:PHP 391
factionsecurity / faction
Pen Test Report Generation and Assessment Collaboration
application-security hacking penetration-testing penetration-testing-tools pentesting reporting security security-audit security-automation security-tools security-vulnerability
Language:JavaScript 388
MS-WEB-BN / t14m4t
Automated brute-forcing attack tool.
bruteforce brute-force brute-force-attacks brute-force-attack brute-force-passwords hacking hacking-tool hacking-tools nmap thc-hydra penetration-test penetration-tests penetration-testing-tools wrapper
Language:Shell 382
mhmdiaa / second-order
Second-order subdomain takeover scanner
security security-tools wordlist wordlist-generator penetration-testing pentesting infosec recon reconnaissance mapping web-application-security penetration-testing-tools crawler crawling
Language:Go 369
SofianeHamlaoui / Pentest-Notes
Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)
sofianehamlaoui security security-tools security-audit cheatsheets offensive-security pentesting penetration-testing penetration-testing-tools
Language:XSLT 336
itaymigdal / Nimbo-C2
Nimbo-C2 is yet another (simple and lightweight) C2 framework
c2 command-and-control pentesting-tools rat red-team red-team-tools c2-framework payload-generator penetration-testing-tools
Language:Nim 322
ByteSnipers / awesome-pentest-cheat-sheets
Collection of cheat sheets useful for pentesting
cheat-sheet cheat-sheet-pentest penetration-testing penetration-testing-tools pentest pentest-cheat-sheets pentesting pentesting-resources
316
edoardottt / lit-bb-hack-tools
Little Bug Bounty & Hacking Tools⚔️
bug-bounty bug-bounty-recon bugbounty cli cli-tool ctf-tool ctf-tools hacking hacking-tool hacking-tools hacktoberfest infosec infosectools penetration-testing-tools security-tools tools
Language:Go 316
InfosecMatter / default-http-login-hunter
Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.
default-credentials default-password hacking-tool nmap nmap-scripts penetration-testing penetration-testing-tools security-audit security-automation
Language:Lua 314
cyberark / Evasor
A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies
bypass-applocker-policies full-automated penetration-testing-tools post-exploitation
Language:C# 310
PalindromeLabs / STEWS
A Security Tool for Enumerating WebSockets
penetration-testing penetration-testing-tools security web-application-security websocket websocket-security websockets websockets-security
Language:Python 306
cervantes
CervantesSec / cervantes
Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.
hacking security collaboration collaboration-platform nessus penetration-testing penetration-testing-tools pentesting vulnerability vulnerability-management burpsuite collaborative nmap red-team red-teaming cve pentesters report reporting audit
Language:C# 267