penetration-testing-tools

There are 43 repositories under penetration-testing-tools topic.

urbanadventurer / WhatWeb
Next generation web scanner
security web scanner ruby penetration-testing kali-linux owasp penetration-testing-tools penetration-test hacking hacking-tools network-security recon appsec application-security pentesting pentesting-tools pentest web-hacking security-tools
Language:Ruby 5093
drk1wi / Modlishka
Modlishka. Reverse Proxy.
phishing penetration-testing-tools mitm reverse-proxy security-tools
Language:Go 4669
cdk-team / CDK
📦 Make security testing of K8s, Docker, and Containerd easier.
penetration penetration-testing-tools kubernetes docker hacktools k8s-penetration-toolkit k8s linux exploits cloud-native blackhat hitb cloud-native-security container container-escape container-security kernel-exploitation kubernetes-security privilege-escalation vulnerabilities
Language:Go 3626
t3l3machus / Villain
Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).
open-source pentest pentesting readteaming redteam-tools redteam cybersecurity offensive-security c2 hacking hacking-tool penetration-testing penetration-testing-tools
Language:Python 3561
kelvinBen / AppInfoScanner
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
security python3 tools apk apk-dex android ipa scanner web-hacking security-tools hacking hacking-tool penetration-testing-tools penetration-test network-security
Language:Python 2893
cloudfox
BishopFox / cloudfox
Automating situational awareness for cloud penetration tests.
aws cloud cloud-security golang penetration-testing-tools security
Language:Go 1787
cyberark / kubesploit
Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.
containers kubernetes penetration-testing-framework penetration-testing-tools redteam-tools security-tools security post-exploitation golang red-teams c2 http2 command-and-control agent
Language:Go 1077
rhaidiz / broxy
An HTTP/HTTPS intercept proxy written in Go.
wapt proxy interceptor broxy http-interceptor hacking security http-proxy qt5-gui golang websecurity http-security go qt-wrapper penetration-testing penetration-testing-tools
Language:Go 993
Fahrj / reverse-ssh
Statically-linked ssh server with reverse shell functionality for CTFs and such
backdoor conpty golang hacking penetration-testing penetration-testing-tools remote-admin-tool remote-shell reverse-shell security security-tools ssh terminal
Language:Go 871
Esc4iCEscEsc / skanuvaty
Dangerously fast DNS/network/port scanner
penetration-testing penetration-testing-tools pentesting pentest dns dns-client subdomain-scanner subdomain-enumeration scanner rust rust-lang security security-tools cybersecurity osint-tool hacking-tools redteam redteam-tools
Language:Rust 860
Hackmanit / Web-Cache-Vulnerability-Scanner
Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).
bugbounty hacking hacking-tool penetration-testing penetration-testing-tools pentesting scanner security security-audit security-scanner security-tools vulnerability-scanners web-cache
Language:Go 802
JustTryHarder
sinfulz / JustTryHarder
JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)
oscp testing penetration penetration-testing penetration-test penetration-test-framework penetration-testing-tools penetration-tests pentesting pentest pentest-tool pentest-scripts pentesting-windows pentesters pentesting-networks pentesting-tools pentest-tools pentest-environment hacktoberfest hacktoberfest-accepted
Language:Python 774
R0X4R / Garud
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
bugbounty bugbountytips bugbounty-tool reconnaissance subdomain-takeover golang bash-script penetration-testing penetration-testing-tools garud gf-patterns assetfinder vulnerability vulnerability-scanner
Language:Shell 750
SSTImap
vladko312 / SSTImap
Automatic SSTI detection tool with interactive interface
information-security penetration-testing penetration-testing-tools pentest pentest-tool pentesting pentesting-tools rce ssti python
Language:Python 640
Cgboal / SonarSearch
A rapid API for the Project Sonar dataset
subdomain enumeration bugbounty penetration-testing penetration-testing-tools dns sonar-api subdomain-enumeration osint osint-tool rapid7
Language:Go 634
x364e3ab6 / DudeSuite
Dude Suite Web 渗透测试工具
browser dude hacker packet penetration-testing-tools scan scanner-web gui hackertools hydra nmap tools sqlmap acunetix-api awvs awvs14 acunetix14 acunetix15 awvs15 dudesuite
610
jwt1399 / Sec-Tools
🍉一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能。
django penetration-testing-tools python3 scan-tool security-tools vulnerability-scanners
Language:Python 602
InfosecMatter / Minimalistic-offensive-security-tools
A repository of tools for pentesting of restricted and isolated environments.
login-automation powershell brute-force penetration-testing windows login-brute-force-attacks penetration-testing-tools security-automation restricted-environments security-audit smb active-directory portscanner port-scanner port-scanning portscan
Language:PowerShell 525
MattKeeley / Spoofy
Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
application-security appsec cybersecurity deliverability dmarc email-security emails infosec penetration-testing penetration-testing-tools pentesting python3 redteam security spf phishing python
Language:Python 525
hueristiq / xurlfind3r
A command-line interface (CLI) based passive URLs discovery utility. It is designed to efficiently identify known URLs of given domains by tapping into a multitude of curated online passive sources.
bug-bounty bug-bounty-tools contentdiscovery ethical-hacking ethical-hacking-tools go golang osint osint-tools penetration-testing penetration-testing-tools reconnaissance red-teaming red-teaming-tools web-security
Language:Go 520
Coalfire-Research / Slackor
A Golang implant that uses Slack as a command and control server
pentest golang python c2 penetration-testing penetration-testing-tools remote-admin-tool command-and-control red-team
Language:Python 452
redeye-framework / Redeye
Redeye is a tool intended to help you manage your data during a pentest operation
blueteam framework knowledge-base penetration-testing penetration-testing-tools redeye redteam
Language:JavaScript 451
helich0pper / Karkinos
Penetration Testing and Hacking CTF's Swiss Army Knife with: Reverse Shell Handling - Encoding/Decoding - Encryption/Decryption - Cracking Hashes / Hashing
encryption-decryption cracking-hashes hashing-algorithms reverse-shell encoder-decoder pentesting pentest-tools swiss-army-knife penetration-testing-tools ctf ctf-tools hacking-tools
Language:PHP 391
MS-WEB-BN / t14m4t
Automated brute-forcing attack tool.
bruteforce brute-force brute-force-attacks brute-force-attack brute-force-passwords hacking hacking-tool hacking-tools nmap thc-hydra penetration-test penetration-tests penetration-testing-tools wrapper
Language:Shell 381
mhmdiaa / second-order
Second-order subdomain takeover scanner
security security-tools wordlist wordlist-generator penetration-testing pentesting infosec recon reconnaissance mapping web-application-security penetration-testing-tools crawler crawling
Language:Go 359
berylliumsec / nebula
AI-Powered Ethical Hacking Assistant
ai crackmapexec ethical-hacking ethical-hacking-tools machine-learning nmap vulnerability-scanners zap metasploit nuclei penetration-testing penetration-testing-tools redteam-tools hacking hacking-tool
Language:Python 354
factionsecurity / faction
Pen Test Report Generation and Assessment Collaboration
application-security hacking penetration-testing penetration-testing-tools pentesting reporting security security-audit security-automation security-tools security-vulnerability
Language:JavaScript 352
SofianeHamlaoui / Pentest-Notes
Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)
cheatsheets offensive-security penetration-testing penetration-testing-tools pentesting security security-audit security-tools sofianehamlaoui
Language:XSLT 332
InfosecMatter / default-http-login-hunter
Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.
default-credentials default-password hacking-tool nmap nmap-scripts penetration-testing penetration-testing-tools security-audit security-automation
Language:Lua 311
cyberark / Evasor
A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies
bypass-applocker-policies full-automated penetration-testing-tools post-exploitation
Language:C# 309
edoardottt / lit-bb-hack-tools
Little Bug Bounty & Hacking Tools⚔️
bug-bounty bug-bounty-recon bugbounty cli cli-tool ctf-tool ctf-tools hacking hacking-tool hacking-tools hacktoberfest infosec infosectools penetration-testing-tools security-tools tools
Language:Go 304
itaymigdal / Nimbo-C2
Nimbo-C2 is yet another (simple and lightweight) C2 framework
c2 command-and-control pentesting-tools rat red-team red-team-tools c2-framework payload-generator penetration-testing-tools
Language:Nim 292
PalindromeLabs / STEWS
A Security Tool for Enumerating WebSockets
security websocket websockets penetration-testing web-application-security penetration-testing-tools websocket-security websockets-security
Language:Python 289
DontPanicO / jwtXploiter
A tool to test security of json web token
jku jwks x5u-injection jwt jwt-security jwt-cracker jwt-exploit security-tools pentesting pentest penetration-testing penetration-testing-tools security websecurity jsonwebtoken ctf ctf-tools pentest-tool pentesting-tools
Language:Python 258
cervantes
CervantesSec / cervantes
Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.
hacking security collaboration collaboration-platform nessus penetration-testing penetration-testing-tools pentesting vulnerability vulnerability-management burpsuite collaborative nmap red-team red-teaming cve pentesters report reporting audit
Language:C# 248
trickest / mksub
Generate tens of thousands of subdomain combinations in a matter of seconds
bugbounty bugbountytips enumeration infosec infosectools penetration-testing penetration-testing-tools pentesting pentesting-tools recon reconnaissance security security-tools subdomain subdomain-enumeration subdomain-finder subdomain-scanner
Language:Go 244