RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

✭ 251

python security hacking pentesting security-audit backdoor post-exploitation reverse-shell

Cc.py

Extracting URLs of a specific target based on the results of "commoncrawl.org"

✭ 250

python pentesting osint bugbounty

Mobileapp Pentest Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

✭ 3,051

pentesting android-application static-analysis ios-app mobile-app network-analysis dynamic-analysis reverse-engineers runtime-analysis

Physmem2profit

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

✭ 244

security windows pentesting red-team

Txtool

an easy pentesting tool.

✭ 246

python pentesting pentest-tool termux scanning

Scout

🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs

✭ 241

go security pentesting url fuzzer

Juice Shop Ctf

Capture-the-Flag (CTF) environment setup tools for OWASP Juice Shop

✭ 238

javascript hacktoberfest hacking pentesting ctf owasp application-security

Commix

Automated All-in-One OS Command Injection Exploitation Tool.

✭ 3,016

python pentesting detection exploitation vulnerability-scanner opensource bugbounty command-injection

Fracker

PHP function tracker

✭ 234

json pentesting analysis tracking function stacktrace

Leakscraper

LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.

✭ 227

python python3 pentesting osint redteam credentials leak

Filesensor

Dynamic file detection tool based on crawler 基于爬虫的动态敏感文件探测工具

✭ 227

python pentesting crawler fuzzing scrapy

Cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

✭ 2,775

go Dockerfile security hacking security-tools pentesting penetration-testing infosec hacking-tool rtsp netsec cctv cameras

Drozer

The Leading Security Assessment Framework for Android.

✭ 2,683

python java HTML c Batchfile Makefile android security mobile pentesting drozer mwr

Androtickler

Penetration testing and auditing toolkit for Android apps.

✭ 225

java android security pentesting auditing

Rogue

An extensible toolkit providing penetration testers an easy-to-use platform to deploy Access Points during penetration testing and red team engagements.

✭ 225

python pentesting wireless

Shellab

Linux and Windows shellcode enrichment utility

✭ 225

python shellcode pentesting exploitation

Aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

✭ 218

python security aws security-tools graph pentesting neo4j iam

Iot Pt

A Virtual environment for Pentesting IoT Devices

✭ 218

security-tools pentesting embedded hardware firmware radio

Darkspiritz

🌔 Official Repository for DarkSpiritz Penetration Framework | Written in Python 🐍

✭ 219

python pentesting penetration-testing pentest-tool penetration-testing-framework

Oscp Cheat Sheet

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder

✭ 216

security pentesting pentest cybersecurity oscp security-testing

Capsulecorp Pentest

Vagrant VirtualBox environment for conducting an internal network penetration test

✭ 214

hacking ansible pentesting penetration-testing pentest vagrant

Onelistforall

Rockyou for web fuzzing

✭ 213

shell hacking pentesting bugbounty fuzzing wordlist

Sharpattack

A simple wrapper for C# tools

✭ 211

dotnet pentesting

Lnkup

Generates malicious LNK file payloads for data exfiltration

✭ 205

python security windows pentesting penetration-testing microsoft usb payload

Decryptteamviewer

Enumerate and decrypt TeamViewer credentials from Windows registry

✭ 205

pentesting

O365recon

retrieve information via O365 with a valid cred

✭ 204

powershell hacking pentesting office365

Evil Ssdp

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

✭ 204

python hacking pentesting penetration-testing

Awesome Nmap Grep

✭ 203

pentesting nmap scan

Wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

✭ 3,873

shell Dockerfile security pentesting penetration-testing guide best-practices bugbounty owasp application-security hacktoberfest

Doxbox

web-based OSINT and reconaissance toolkit

✭ 202

python web flask pentesting

Hawkeye

Hawkeye filesystem analysis tool

✭ 202

go golang hacking pentesting infosec bug-bounty netsec

Fdsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

✭ 199

python security hacking security-tools pentesting penetration-testing fuzzing exploitation enumeration owasp oscp web-security

Betterbackdoor

A backdoor with a multitude of features.

✭ 195

java shell pentesting socket cybersecurity backdoor reverse-shell

Mosint

An automated e-mail OSINT tool

✭ 184

python automation hacking pentesting email osint mail social-media pwn

Hrshell

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

✭ 193

python security hacking flask pentesting penetration-testing https tls injection red-team post-exploitation metasploit oscp tornado reverse-shell

Cintruder

Captcha Intruder (CIntrud3r) is an automatic pentesting tool to bypass captchas.

✭ 192

python pentesting ocr captcha

Dns Persist

DNS-Persist is a post-exploitation agent which uses DNS for command and control.

✭ 191

pentesting redteam post-exploitation

Stegseek

⚡️ Worlds fastest steghide cracker, chewing through millions of passwords per second ⚡️

✭ 187

security pentesting ctf brute-force ctf-tools cracking steganography

Getjs

A tool to fastly get all javascript sources/files

✭ 190

javascript go hacktoberfest hacking parser pentesting bugbounty reconnaissance recon files extract

Webmap

A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing

✭ 188

python automation hacking pentesting penetration-testing hacking-tool nmap bruteforce report generation wordlist

Knary

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

✭ 187

go security-tools pentesting penetration-testing bugbounty discord-bot burpsuite ctf-tools offensive-security slackbot

Socialfish

Phishing Tool & Information Collector

✭ 2,522

python CSS HTML pentesting pentest phishing educational undead

Awesome Shodan Queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

✭ 2,758

security awesome awesome-list iot hacking cloud security-tools pentesting penetration-testing infosec internet-of-things security-scanner shodan dorks network-infrastructure shodan-dorks

Slurp

Evaluate the security of S3 buckets

✭ 183

go golang hacktoberfest security aws pentesting s3

Crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

✭ 182