👀 🖥️ Golang rewrite of eyes.sh. Let's you perform domain/IP address information gathering. Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?" 🔍 🕵️

✭ 38

go pentesting penetration-testing pentest-tool reconnaissance information-gathering

Nettacker

Automated Penetration Testing Framework

✭ 982

python automation penetration-testing network-analysis vulnerability-scanners information-gathering bruteforce owasp penetration-testing-framework

Passhunt

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

✭ 961

python security penetration-testing cybersecurity password pentest-tool security-testing

Burp Suite Software Version Checks

Burp extension to passively scan for applications revealing software version numbers

✭ 29

java penetration-testing pentest burpsuite scanning burp-extensions burp-plugin

Broxy

An HTTP/HTTPS intercept proxy written in Go.

✭ 912

go golang security proxy hacking penetration-testing http-proxy interceptor websecurity

Androl4b

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

✭ 908

android reverse-engineering penetration-testing application-security mobile-security

Babysploit

👶 BabySploit Beginner Pentesting Toolkit/Framework Written in Python 🐍

✭ 883

python3 html pentesting tools penetration-testing pentest-tool toolkit beginner-friendly beginner kali penetration-testing-framework

Active Directory Exploitation Cheat Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

✭ 870

powershell security windows hacking pentesting penetration-testing infosec cheatsheet hacking-tool exploitation enumeration active-directory privilege-escalation

Hacktronian

Tools for Hacking

✭ 857

python script penetration-testing termux penetration-testing-framework

Ripv6

Random IPv6 - circumvents restrictive IP address-based filter and blocking rules

✭ 10

shell penetration-testing ipv6 vulnerability-scanners bypass evasion

Awesome Ethical Hacking Resources

🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.

✭ 933

hacking penetration-testing resources exploitation owasp hackers

Penetration Testing And Hacking

Collection of tips, tools and tutorials around infosec

✭ 25

penetration-testing virtualbox kali-linux

Changeme

A default credential scanner.

✭ 928

python security security-tools penetration-testing infosec security-scanner

Pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

✭ 904

shell pentesting penetration-testing pentest pentest-tool reverse-shell

Brutus

A Python-powered exploitation framework and botnet.

✭ 17

python penetration-testing malware hacking-tool trojan botnet exploitation-framework

Scripts

Scripts I use during pentest engagements.

✭ 834

python hacking tools penetration-testing

Awesome Oscp

A curated list of awesome OSCP resources

✭ 804

awesome-list pentesting penetration-testing pentest oscp offensive-security

Hacker Roadmap

📌 Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

✭ 7,752

hacking penetration-testing pentest hacking-tool exploitation vulnerabilities information-gathering roadmap post-exploitation frameworks web-hacking hacktools

Dsinternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

✭ 776

powershell penetration-testing security-audit active-directory passwords sam

Rapidscan

🆕 The Multi-Tool Web Vulnerability Scanner.

✭ 775

python security-tools penetration-testing scanner vulnerabilities reconnaissance vulnerability-scanners security-scanner kali-linux enumeration vulnerability-detection oscp offensive-security vulnerability-assessment vulnerability-scanner vulnerability-management penetration-testing-framework

Evillimiter

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

✭ 764

python linux security hacking networking security-tools pentesting penetration-testing hacking-tool pentest-tool

Vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

✭ 767

python security hacking security-tools penetration-testing scanner bugbounty hacking-tool security-audit ctf-tools oscp offensive-security

Interlace

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

✭ 760

python linux security hacking security-tools penetration-testing bugbounty hacking-tool multithreading thread enumeration oscp

Breaking And Pwning Apps And Servers Aws Azure Training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

✭ 749

css pentesting opensource free penetration-testing application-security

Awesome Web Security

🐶 A curated list of Web Security materials and resources.

✭ 6,623

security awesome awesome-list web list penetration-testing websecurity

Htshells

Self contained htaccess shells and attacks

✭ 708

shell security penetration-testing exploit apache webshell polyglot

Sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

✭ 699

python security hacking penetration-testing pentest reconnaissance information-gathering bug-bounty monitoring-tool certificate-transparency

Lockdoor Framework

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

✭ 677

python hacking pentesting penetration-testing cybersecurity hacking-tool pentest-tool redteam pentest-scripts

Brutal

Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy . Brutal is a toolkit to quickly create various payload,powershell attack , virus attack and launch listener for a Human Interface Device ( Payload Teensy )

✭ 678

arduino hacking penetration-testing arduino-library usb payload hacker teensy

Gorsair

Gorsair hacks its way into remote docker containers that expose their APIs

✭ 678

go docker security pentesting penetration-testing infosec nmap netsec

Dirsearch

Web path scanner

✭ 7,246

python HTML Dockerfile security hacking pentesting penetration-testing scanner infosec hacking-tool fuzzing fuzzer bug-bounty appsec wordlist enumeration bugbounty brute dirsearch pentest-tool

Thc Ipv6

IPv6 attack toolkit

✭ 673

c penetration-testing ipv6 man-in-the-middle

Swiftnessx

A cross-platform note-taking & target-tracking app for penetration testers.

✭ 673

javascript security-tools penetration-testing bug-bounty checklist electronjs

Phishing Frenzy

Ruby on Rails Phishing Framework

✭ 643

ruby rails hacking pentesting penetration-testing phishing

Powershell Rat

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

✭ 636

python powershell hacking pentesting penetration-testing hacking-tool trojan backdoor rat

Jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

✭ 633

java security penetration-testing static-code-analysis vulnerability-scanners security-scanner dynamic-analysis network-security application-security vulnerability-assessment mobile-security vulnerability-management penetration-testing-framework

Habu

Hacking Toolkit

✭ 635

python python3 linux windows hacking networking security-tools pentesting penetration-testing pentest security-audit pentest-tool network-analysis security-testing scapy

Digispark Scripts

USB Rubber Ducky type scripts written for the DigiSpark.

✭ 629

hacktoberfest penetration-testing usb scripts

Penetration Testing Tools

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

✭ 614

powershell testing hacking tools penetration-testing exploit scripts cheatsheets social-engineering

Dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

✭ 601

perl security penetration-testing fuzzer

Hashview

A web front-end for password cracking and analytics

✭ 601

css security-tools pentesting analytics penetration-testing distributed passwords hashcat password-cracking

Monkey

Infection Monkey - An automated pentest tool

✭ 5,572

python javascript typescript HCL shell SCSS security-tools penetration-testing security-automation infection-monkey

Tactical Exploitation

Modern tactical exploitation toolkit.

✭ 585

python penetration-testing information-gathering brute-force active-directory metasploit-framework

Damn Vulnerable Graphql Application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

✭ 567

javascript security graphql penetration-testing vulnerability exploitation

Passphrase Wordlist

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

✭ 556

python hacking pentesting penetration-testing infosec wordlist password-cracking

Nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

✭ 5,943

powershell ASP.NET security hacking penetration-testing infosec redteam red-team activedirectory nishang

Easy hack

Hack the World using Termux