Top 584 pentesting open source projects

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

sqlscan

Quick SQL Scanner, Dorker, Webshell injector PHP

✭ 140

PHP framework sql fuzzy-search hacking penetration-testing sql-injection pentesting geektool pentest hacktoberfest pentest-tool scanner-web defacement dorking deface-tools

RedTeaming-Tactics-and-Techniques

Red Teaming Tactics and Techniques

✭ 2,991

powershell c C#pentesting offensive-security oscp redteaming redteam redteam-infrastructure

ptnotes

No description or website provided.

✭ 61

python HTML CSS javascript notes reporting pentesting

WPA2-FritzBox-Pswd-Wordlist-Generator

This Script will produce all of the WPA2 Passwords used by various Router companies aswell as Fritzbox. All of these Passwords will be 16 Numbers in length. So it could get a bit large.

✭ 22

perl python fritzbox password wordlist penetration-testing fritz-box pentesting wpa wpa2 wordlist-generator wpa2-handshake wpa2-cracking wordlists wpa2-wordlist

ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers.

✭ 326

python http tool ip pentesting headers bugbounty bypass

timeauth

Python Time Based Authentication Attack Tool

✭ 21

python framework pentesting timing-attacks authentication-attack

hackarsenaltoolkit

Hacking arsenal. This script download the latest tools, wordlists, releases and install common hacking tools

✭ 39

shell python github toolkit hacking toolset pentesting hacking-tool red-team hacking-tools red-teaming toolkit-builder pentesting-tools pentesting-resources

shellback

Reverse shell generator

✭ 22

python security reverse-shell pentesting security-tools oscp shells reverse-shells pentestmonkey reverse-shell-generator oscp-tools

h1-search

Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.

✭ 58

go HTML infosec pentesting bugbounty netsec hackerone pentest-tool

writeUp

My write-up on TryHackMe, HackTheBox, and CTF.

✭ 58

python c shell pentesting ctf writeup hackthebox-writeups tryhackme

hasherbasher

SQL injection via bruteforced MD5 hash reflection of random strings

✭ 40

go security sql-injection pentesting

credcheck

Credentials Checking Framework

✭ 50

python Makefile framework bug-bounty pentesting bugbounty bugcrowd pentest-scripts hackerone pentest-tool postexplotation postexploit

weakpass generator

generates weak passwords based on current date

✭ 36

python password bruteforce brute-force pentesting passwords pentest pentest-tool

inthewilddb

Hourly updated database of exploit and exploitation reports

✭ 127

python Dockerfile exploit hacking pentesting vulnerabilities cve exploitation vulnerability-management vulnerability-scanners blueteam security-tools cve-poc

xeca

PowerShell payload generator

✭ 103

powershell rust pentesting-windows penetration-testing pentesting ctf payload ctf-tools payload-generator payload-generation pentesting-tools

conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

✭ 772

Batchfile ioc guide cybersecurity ransomware infosec pentesting offensive-security cobalt-strike pentest-scripts mitigation ransomware-detection redteaming pentesting-tools

phisherprice

All In One Pentesting Tool For Recon & Auditing , Phone Number Lookup , Header , SSH Scan , SSL/TLS Scan & Much More.

✭ 38

shell data osint analysis cybersecurity infosec pentesting cracking bash-script cyber-security offsec pentest-tool swissarmyknife sslscanner pentesting-tools multifunctional sshscanner redteam-tools phonenumberlookup

baboossh

SSH spreading made easy for red teams in a hurry

✭ 54

python ssh pentesting

ActiveDirectoryEnumeration

Enumerate AD through LDAP with a collection of helpfull scripts being bundled

✭ 127

python active-directory enumeration activedirectory pentesting crack bloodhound-json-files bruteforce-enumeration

astam-correlator

Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple static/dynamic scans

✭ 22