All Categories → Security → penetration-testing

Top 371 penetration-testing open source projects

The LAZY script will make your life easier, and of course faster.

Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.

✭ 245

javascript python security django penetration-testing

Ary

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

✭ 241

automation penetration-testing pentest vulnerability xss vulnerability-scanners poc

Wifi Dumper

This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi penetration testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements.

✭ 242

python penetration-testing

Icg Autoexploiterbot

Wordpress 🔥 Joomla 🔥 Drupal 🔥 OsCommerce 🔥 Prestashop 🔥 Opencart 🔥

✭ 242

wordpress hacking penetration-testing exploit hacking-tool hacker joomla vulnerability-scanner

Rubyfu

Rubyfu, where Ruby goes evil!

✭ 228

ruby css hacking book penetration-testing red-team network-security

Armor

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

✭ 228

shell macos encryption osx penetration-testing encoding kali-linux openssl payload attack information-security antivirus kali antivirus-evasion

Cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

✭ 2,775

go Dockerfile security hacking security-tools pentesting penetration-testing infosec hacking-tool rtsp netsec cctv cameras

Command Mobile Penetration Testing Cheatsheet

Mobile penetration testing android & iOS command cheatsheet

✭ 221

android ios mobile penetration-testing cheatsheet apk frida ipa mobile-security

Darkspiritz

🌔 Official Repository for DarkSpiritz Penetration Framework | Written in Python 🐍

✭ 219

python pentesting penetration-testing pentest-tool penetration-testing-framework

Serpentine

C++/Win32/Boost Windows RAT (Remote Administration Tool) with a multiplatform Java/Spring RESTful C2 server and Go, C++/Qt5 frontends

✭ 216

penetration-testing malware redteam trojan rat virus

Werdlists

⌨️ Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases

✭ 216

html awesome-list open-source security-tools penetration-testing computer-science test-automation regular-expression threat-hunting environment-variables information-security dynamic-analysis

Tigershark

Bilingual PhishingKit. TigerShark intergrates a vast array of various phishing tools and frameworks, from C2 servers, backdoors and delivery methods in multiple scripting languages in order to suit whatever your deployment needs may be.

✭ 212

shell penetration-testing pentest-tool exploitation phishing exploitation-framework

Capsulecorp Pentest

Vagrant VirtualBox environment for conducting an internal network penetration test

✭ 214

hacking ansible pentesting penetration-testing pentest vagrant

Dart

DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.

✭ 207

python dart penetration-testing offline documentation-tool red-team documentation-generator

Hakkuframework

Hakku Framework penetration testing

✭ 205

python linux penetration-testing

Lnkup

Generates malicious LNK file payloads for data exfiltration

✭ 205

python security windows pentesting penetration-testing microsoft usb payload

Evil Ssdp

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

✭ 204

python hacking pentesting penetration-testing

Wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

✭ 3,873

shell Dockerfile security pentesting penetration-testing guide best-practices bugbounty owasp application-security hacktoberfest

Awesome Pentest Cheat Sheets

Collection of the cheat sheets useful for pentesting

✭ 2,566

security awesome penetration-testing pentest cheatsheet security-cheat-sheets pentest-cheat-sheets

Discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

✭ 2,548

powershell shell HTML python CSS penetration-testing osint reconnaissance recon kali-linux information-gathering nmap red-team metasploit scanning payload-generator

Fdsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

✭ 199

python security hacking security-tools pentesting penetration-testing fuzzing exploitation enumeration owasp oscp web-security

Hrshell

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

✭ 193

python security hacking flask pentesting penetration-testing https tls injection red-team post-exploitation metasploit oscp tornado reverse-shell

Awesome Bbht

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.

✭ 190

shell hacking security-tools penetration-testing bugbounty hacking-tool exploitation reconnaissance recon bug-bounty

3klcon

Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.

✭ 189

python penetration-testing bugbounty face reconnaissance recon vps penetration-testing-framework

Webmap

A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing

✭ 188

python automation hacking pentesting penetration-testing hacking-tool nmap bruteforce report generation wordlist

Knary

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

✭ 187

go security-tools pentesting penetration-testing bugbounty discord-bot burpsuite ctf-tools offensive-security slackbot

Andrax Mobile Pentest

ANDRAX The first and unique Penetration Testing platform for Android smartphones

✭ 394

c hacking penetration-testing metasploit-framework

Awesome Shodan Queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

✭ 2,758

security awesome awesome-list iot hacking cloud security-tools pentesting penetration-testing infosec internet-of-things security-scanner shodan dorks network-infrastructure shodan-dorks

Garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

✭ 183

shell golang penetration-testing bugbounty bash-script reconnaissance

Crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

✭ 182

security makefile hacking security-tools pentesting penetration-testing infosec bugbounty hacking-tool security-audit enumeration offensive-security security-vulnerability

Nndefaccts

nnposter's alternate fingerprint dataset for Nmap script http-default-accounts

✭ 180

lua penetration-testing security-audit nmap

Awesome Vulnerable Apps

Awesome Vulnerable Applications

✭ 180

security awesome awesome-list hacking penetration-testing bugbounty bug

Arp Spoofer

A pure-Python ARP Cache Poisoning (a.k.a "ARP Spoofing") tool

✭ 180

python penetration-testing network-programming

Blackhat Python Book

Code from Blackhat Python book

✭ 178

python python3 security pentesting penetration-testing security-automation

Tcpproxy

Intercepting TCP proxy to modify raw TCP streams using modules on incoming or outgoing traffic

✭ 176

python reverse-engineering penetration-testing

Sensitivefilescan

✭ 174

python hack security crawler penetration-testing vulnerability-detection

Recsech

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

✭ 173

security-tools tools dns penetration-testing scanner research hacking-tool security-audit reconnaissance recon security-vulnerability websecurity

Docker Security Images

🔐 Docker Container for Penetration Testing & Security

✭ 172

docker devops pentesting penetration-testing pentest infosec cybersecurity container pentest-tool devsecops

Rapidpayload

Framework RapidPayload - Metasploit Payload Generator | Crypter FUD AntiVirus Evasion

✭ 174

python python3 android windows mac apple penetration-testing kali-linux ngrok penetration-testing-framework antivirus-evasion

Remote Desktop Caching

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.

✭ 171

python hacking penetration-testing redteam forensics blueteam

Smogcloud

Find cloud assets that no one wants exposed 🔎 ☁️

✭ 168

go aws cloud security-tools penetration-testing infosec api-documentation blueteam

Pe Linux

Linux Privilege Escalation Tool By WazeHell

✭ 168

shell bash linux penetration-testing analysis privilege-escalation

Zap Cli

A simple tool for interacting with OWASP ZAP from the commandline.

✭ 166

python security pentesting penetration-testing security-audit owasp

Oscp Pentest Methodologies

备考 OSCP 的各种干货资料/渗透测试干货资料

✭ 166

c pentesting penetration-testing ctf cybersecurity pentest-tool redteam post-exploitation oscp websecurity

Hydrafw

HydraFW official firmware for HydraBus/HydraNFC for researcher, hackers, students, embedded software developers or anyone interested in debugging/hacking/developing/penetration testing

✭ 165

c hacking learning penetration-testing research debugging firmware educational

Pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

✭ 2,451

python security aws penetration-testing aws-security

Minesweeper

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

✭ 162

python bitcoin hacking cryptocurrency security-tools penetration-testing bugbounty hacking-tool security-audit security-scanner burpsuite web-security blacklist burp-extensions burp-plugin

Darkside

Tool Information Gathering & social engineering Write By [Python,JS,PHP]

✭ 159

javascript python js hack security penetration-testing pentest-tool

Penetrationtesting Notes

Penetration Testing Notes and Playbook (PTP)

✭ 155

shell penetration-testing

Portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised. Portia performs privilege escalation as well as lateral movement automatically in the network

✭ 154

python powershell hacking penetration-testing pentest

Phpvuln

Audit tool to find common vulnerabilities in PHP source code

✭ 146

python hacking penetration-testing vulnerability xss audit owasp sql-injection sqli

Dnsmorph

Domain name permutation engine written in Go

✭ 148

go golang dns penetration-testing pentest-tool phishing threat-intelligence threatintel domains

Fuse

A penetration testing tool for finding file upload bugs (NDSS 2020)