penetration-testing-tools

There are 59 repositories under penetration-testing-tools topic.

urbanadventurer / WhatWeb
Next generation web scanner
application-security appsec hacking hacking-tools kali-linux network-security owasp penetration-test penetration-testing penetration-testing-tools pentest pentesting pentesting-tools recon ruby scanner security security-tools web web-hacking
Language:Ruby 6165
drk1wi / Modlishka
Modlishka. Reverse Proxy.
educational mitm penetration-testing-tools poc reverse-proxy security-tools
Language:Go 5206
cdk-team / CDK
📦 Make security testing of K8s, Docker, and Containerd easier.
blackhat cloud-native cloud-native-security container container-escape container-security docker exploits hacktools hitb k8s k8s-penetration-toolkit kernel-exploitation kubernetes kubernetes-security linux penetration penetration-testing-tools privilege-escalation vulnerabilities
Language:Go 4444
t3l3machus / Villain
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
c2 cybersecurity hacking hacking-tool offensive-security open-source penetration-testing penetration-testing-tools pentest pentesting readteaming redteam redteam-tools
Language:Python 4263
kelvinBen / AppInfoScanner
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
security python3 tools apk apk-dex android ipa scanner web-hacking security-tools hacking hacking-tool penetration-testing-tools penetration-test network-security
Language:Python 3461
cloudfox
BishopFox / cloudfox
Automating situational awareness for cloud penetration tests.
aws cloud cloud-security golang penetration-testing-tools security
Language:Go 2226
reverse_ssh
NHAS / reverse_ssh
SSH based reverse shell
conpty golang hacking penetration-testing-tools pentest pentesting proxy reverse-shell scp security-tools sftp shell ssh static-binary terminal tunnel
Language:Go 1268
x364e3ab6 / DudeSuite
DudeSuite Web Security Tools
0day 1day awvs dude dudesuite hacker hackertools hydra nday nmap packet penetration-testing-tools poc scan scanner-web sqlmap tools
1264
SSTImap
vladko312 / SSTImap
Automatic SSTI detection tool with interactive interface
information-security penetration-testing penetration-testing-tools pentest pentest-tool pentesting pentesting-tools python rce ssti
Language:Python 1251
cyberark / kubesploit
Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.
agent c2 command-and-control containers golang http2 kubernetes penetration-testing-framework penetration-testing-tools post-exploitation red-teams redteam-tools security security-tools
Language:Go 1206
Hackmanit / Web-Cache-Vulnerability-Scanner
Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).
vulnerability-scanners web-cache security-tools security-scanner security security-audit pentesting penetration-testing-tools penetration-testing bugbounty hacking scanner hacking-tool
Language:Go 1025
rhaidiz / broxy
An HTTP/HTTPS intercept proxy written in Go.
broxy go golang hacking http-interceptor http-proxy http-security interceptor penetration-testing penetration-testing-tools proxy qt-wrapper qt5-gui security wapt websecurity
Language:Go 1006
Fahrj / reverse-ssh
Statically-linked ssh server with reverse shell functionality for CTFs and such
backdoor conpty golang hacking penetration-testing penetration-testing-tools remote-admin-tool remote-shell reverse-shell security security-tools ssh terminal
Language:Go 1002
Esc4iCEscEsc / skanuvaty
Dangerously fast DNS/network/port scanner
penetration-testing penetration-testing-tools pentesting pentest dns dns-client subdomain-scanner subdomain-enumeration scanner rust rust-lang security security-tools cybersecurity osint-tool hacking-tools redteam redteam-tools
Language:Rust 922
jwt1399 / Sec-Tools
🍉一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能。
django penetration-testing-tools python3 scan-tool security-tools vulnerability-scanners
Language:Python 826
JustTryHarder
sinfulz / JustTryHarder
JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)
oscp testing penetration penetration-testing penetration-test penetration-test-framework penetration-testing-tools penetration-tests pentesting pentest pentest-tool pentest-scripts pentesting-windows pentesters pentesting-networks pentesting-tools pentest-tools pentest-environment hacktoberfest hacktoberfest-accepted
Language:Python 818
R0X4R / Garud
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
bugbounty bugbountytips bugbounty-tool reconnaissance subdomain-takeover golang bash-script penetration-testing penetration-testing-tools garud gf-patterns assetfinder vulnerability vulnerability-scanner
Language:Shell 797
pentagi
vxcontrol / pentagi
✨ Fully autonomous AI Agents system capable of performing complex penetration testing tasks
ai-agents ai-security-tool autonomous-agents golang graphql multi-agent-system penetration-testing-tools react security-automation security-testing security-tools anthropic gpt offensive-security open-source openai penetration-testing self-hosted
Language:Go 783
MattKeeley / Spoofy
Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
application-security appsec cybersecurity deliverability dmarc email-security emails infosec penetration-testing penetration-testing-tools pentesting python3 redteam security spf phishing python
Language:Python 726
Cgboal / SonarSearch
A rapid API for the Project Sonar dataset
subdomain enumeration bugbounty penetration-testing penetration-testing-tools dns sonar-api subdomain-enumeration osint osint-tool rapid7
Language:Go 656
EtherGhost
Marven11 / EtherGhost
新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell
awd ctf javascript penetration-testing penetration-testing-tools php php-webshell post-exploitation python webshell
Language:Python 655
hueristiq / xurlfind3r
A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.
osint penetration-testing penetration-testing-tools bug-bounty bug-bounty-tools ethical-hacking ethical-hacking-tools osint-tools red-teaming red-teaming-tools web-security contentdiscovery reconnaissance go golang
Language:Go 646
InfosecMatter / Minimalistic-offensive-security-tools
A repository of tools for pentesting of restricted and isolated environments.
login-automation powershell brute-force penetration-testing windows login-brute-force-attacks penetration-testing-tools security-automation restricted-environments security-audit smb active-directory portscanner port-scanner port-scanning portscan
Language:PowerShell 580
factionsecurity / faction
Pen Test Report Generation and Assessment Collaboration
application-security hacking penetration-testing penetration-testing-tools pentesting reporting security security-audit security-automation security-tools security-vulnerability security-report security-reporting
Language:Java 572
pentest
ZishanAdThandar / pentest
Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.
cheetsheet cybersecurity ethical-hacking hacking penetration-testing pentesting web-application-penetration-testing web-application-security whitehat-hacker activedirectory cyber-security cybersecurity-tool hacking-tool infosec penetration-testing-tools pentest powershell redteam redteaming security
Language:PHP 557
ByteSnipers / awesome-pentest-cheat-sheets
Collection of cheat sheets useful for pentesting
cheat-sheet penetration-testing penetration-testing-tools pentest pentest-cheat-sheets pentesting pentesting-resources cheat-sheet-pentest
513
redeye-framework / Redeye
Redeye is a tool intended to help you manage your data during a pentest operation
blueteam framework knowledge-base penetration-testing penetration-testing-tools redeye redteam
Language:JavaScript 466
Coalfire-Research / Slackor
A Golang implant that uses Slack as a command and control server
pentest golang python c2 penetration-testing penetration-testing-tools remote-admin-tool command-and-control red-team
Language:Python 461
itaymigdal / Nimbo-C2
Nimbo-C2 is yet another (simple and lightweight) C2 framework
c2 c2-framework command-and-control payload-generator penetration-testing-tools pentesting-tools rat red-team red-team-tools
Language:Nim 434
cervantes
CervantesSec / cervantes
Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.
hacking security collaboration collaboration-platform nessus penetration-testing penetration-testing-tools pentesting vulnerability vulnerability-management burpsuite collaborative nmap red-team red-teaming cve pentesters report reporting audit
Language:C# 422
helich0pper / Karkinos
Penetration Testing and Hacking CTF's Swiss Army Knife with: Reverse Shell Handling - Encoding/Decoding - Encryption/Decryption - Cracking Hashes / Hashing
encryption-decryption cracking-hashes hashing-algorithms reverse-shell encoder-decoder pentesting pentest-tools swiss-army-knife penetration-testing-tools ctf ctf-tools hacking-tools
Language:PHP 413
MS-WEB-BN / t14m4t
Automated brute-forcing attack tool.
bruteforce brute-force brute-force-attacks brute-force-attack brute-force-passwords hacking hacking-tool hacking-tools nmap thc-hydra penetration-test penetration-tests penetration-testing-tools wrapper
Language:Shell 413
mhmdiaa / second-order
Second-order subdomain takeover scanner
crawler crawling infosec mapping penetration-testing penetration-testing-tools pentesting recon reconnaissance security security-tools web-application-security wordlist wordlist-generator
Language:Go 408
SofianeHamlaoui / Pentest-Notes
Collection of Pentest Notes and Cheatsheets
sofianehamlaoui security security-tools security-audit cheatsheets offensive-security pentesting penetration-testing penetration-testing-tools
386
edoardottt / lit-bb-hack-tools
Little Bug Bounty & Hacking Tools⚔️
bugbounty hacking security-tools bug-bounty infosec bug-bounty-recon hacking-tool hacking-tools ctf-tools tools infosectools ctf-tool penetration-testing-tools cli cli-tool hacktoberfest
Language:Go 369
PalindromeLabs / STEWS
A Security Tool for Enumerating WebSockets
penetration-testing penetration-testing-tools security web-application-security websocket websocket-security websockets websockets-security
Language:Python 362