There are 64 repositories under pentest-scripts topic.
iOS/macOS/Linux Remote Administration Tool
🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping
平常看到好的渗透hacking工具和多领域效率工具的集合
Leaked pentesting manuals given to Conti ransomware crooks
JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)
OffSec OSINT Pentest/RedTeam Tools
A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network
Search for Directory Traversal Vulnerabilities
WiFi Penetration Testing Guide
A tool to automate penetration tests
Extract subdomains from SSL certificates in HTTPS sites.
POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞, 对功能进行强化以及脚本进行分类添加,自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC
Automate Active Directory Enumeration
Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments
GitLab CE/EE Preauth RCE using ExifTool
small python3 tool to check common vulnerabilities in SMTP servers
WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.
Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
smartrecon is a powerful shell script to automate the recon and finding common vulnerabilities for bug hunter
Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP querying, Kerberos ticket analysis, SMB enumeration, and exploitation of known vulnerabilities like Zerologon and PetitPotam.
An automated wrapper script for patching iOS applications (IPA files) and work on non-jailbroken device
EZEA (EaZy Enum Automator), made for OSCP. This tool uses bash to automate most of the enumeration proces
Script samples from the book Pentesting Azure Applications (2018, No Starch Press)
Contained is all my reference material for my OSCP / Red Teaming. Designed to be a one stop shop for code, guides, command syntax, and high level strategy. One simple clone and you have access to some of the most popular tools used for pentesting.
Simple Karma Attack
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Penetration Testing in Cybersecurity.
wifi attacks suite
[ Blazing Fast Web Fuzzer in Rust ]