Top 584 pentesting open source projects

A tool to abuse Exchange services

✭ 1,684

go Makefile pentesting exchange mapi shells

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

✭ 1,949

Jupyter Notebook python pentesting pentest infosec cheatsheet bugbounty cybersecurity blueteam exploit offensive-security default-password credentials-gathering

Sippts

Set of tools to audit SIP based VoIP Systems

✭ 116

perl hacking security-tools pentesting pentest hacking-tool security-audit pentest-tool voip sip asterisk

Karkinos

Penetration Testing and Hacking CTF's Swiss Army Knife with: Reverse Shell Handling - Encoding/Decoding - Encryption/Decryption - Cracking Hashes / Hashing

✭ 115

pentesting ctf ctf-tools reverse-shell encoder-decoder

Scilla

🏴‍☠️ Information Gathering tool 🏴‍☠️ DNS / Subdomains / Ports / Directories enumeration

✭ 116

go security hacking network security-tools pentesting penetration-testing hacking-tool reconnaissance recon information-gathering information-retrieval enumeration ctf-tools subdomain-scanner

Mitmap

📡 A python program to create a fake AP and sniff data.

✭ 1,526

python hacking pentesting infosec wifi kali-linux wireless mitm access-point fake-ap

Explo

Human and machine readable web vulnerability testing format

✭ 114

python security automation pentesting web-security

Shuriken

Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.

✭ 114

python pentesting detection exploitation xss web-security

Burp Send To

Adds a customizable "Send to..."-context-menu to your BurpSuite.

✭ 114

java hacking pentesting extension burpsuite

Arissploit

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

✭ 114

python database pentesting vulnerability exploitation vulnerabilities vulnerability-scanners exploits vulnerability-detection vulnerability-scanner metasploit-framework exploitation-framework

Linux Smart Enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

✭ 1,956

shell hacking pentesting oscp privilege-escalation ctfs privesc hackthebox linux-enumeration

Bulwark

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

✭ 113

typescript nodejs angular express security-tools pentesting bugbounty red-team appsec application-security vulnerability-assessment vulnerability-management

Bella

Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻

✭ 112

python macos pentesting data-mining post-exploitation

Docker offensive elk

Elasticsearch for Offensive Security

✭ 112

python docker elasticsearch docker-compose pentesting kibana nmap elk-stack

Ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

✭ 1,535

python hacking pentesting information-gathering certificate-transparency certificate-transparency-logs

Embedos

EmbedOS - Embedded security testing virtual machine

✭ 108

iot security-tools pentesting embedded hardware firmware

Information Security Tasks

This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions

✭ 108

html pentesting osint malware-analysis redteam forensics incident-response compliance information-security blueteam steganography auditing

Ansvif

A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.

✭ 107

pentesting exploit fuzzing vulnerability fuzzer fuzz-testing

Oscp Prep

my oscp prep collection

✭ 105

python linux windows web hacking pentesting webapp penetration-testing scanner exploit osint cheatsheet application recon tips oscp buffer methodology

Hacker Container

Container with all the list of useful tools/commands while hacking and pentesting Kubernetes Clusters

✭ 105

docker security kubernetes dockerfile hacking security-tools pentesting tools pentest infosec container kubernetes-cluster

Subtake

Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.

✭ 104

go golang security pentesting infosec bug-bounty subdomain

Ransom0

Ransom0 is a open source ransomware made with Python, designed to find and encrypt user data.

✭ 105

python python3 sql pentesting ransomware virus

Active Directory Exploitation Cheat Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

✭ 1,392

security windows hacking pentesting penetration-testing cheatsheet hacking-tool exploitation enumeration attack active-directory cheat privilege-escalation activedirectory

Go Deliver

Go-deliver is a payload delivery tool coded in Go.

✭ 103

go pentesting payload red-team

Smtptester

small python3 tool to check common vulnerabilities in SMTP servers

✭ 102

python pentesting smtp relay pentest-scripts

Vailyn

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

✭ 103

python security pentesting penetration-testing pentest-tool exploitation vulnerability-scanners vulnerability-detection rce vulnerability-assessment websecurity

Burp Paramalyzer

Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.

✭ 102

java pentesting

Security Scripts

A collection of public offensive and defensive security related scripts for InfoSec students.

✭ 101

python bash security-tools pentesting penetration-testing

Hackvault

A container repository for my public web hacks!

✭ 1,364

javascript pentesting exploit regex tracking fuzzing xss reconnaissance web-security payloads

Web Brutator

Fast Modular Web Interfaces Bruteforcer

✭ 97

python hacking cms pentesting pentest hacking-tool bruteforce brute-force

Attacking Cloudgoat2

A step-by-step walkthrough of CloudGoat 2.0 scenarios.

✭ 97

aws documentation pentesting walkthrough

Put2win

Script to automate PUT HTTP method exploitation to get shell

✭ 96

shell bash pentesting

Deepsea

DeepSea Phishing Gear

✭ 96

go pentesting redteam phishing

Resource files

mosquito - Automating reconnaissance and brute force attacks

✭ 95

ruby pentesting redteam

Swurg

Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).

✭ 94

java json parser pentesting swagger yaml openapi restful-api openapi3 burpsuite burp-extensions openapi-specification burp-plugin

Flask Unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

✭ 90

python security security-tools pentesting penetration-testing ctf bruteforce ctf-tools

Winpwn

Automation for internal Windows Penetrationtest / AD-Security

✭ 1,303

powershell automation pentesting pentest-tool redteam exploitation recon privilege-escalation

Katzkatz

Python3 script to parse txt files containing Mimikatz output

✭ 91

python automation pentesting passwords

Eyes.sh

Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"

✭ 89

shell pentesting penetration-testing pentest-tool information-gathering

Acamar

A Python3 based single-file subdomain enumerator

✭ 89

python pentesting bugbounty subdomain

Pentest Notes

Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)

✭ 89

security security-tools pentesting penetration-testing security-audit offensive-security cheatsheets

Reverse Shell

Reverse Shell as a Service

✭ 1,281

javascript microservice pentesting exploit vulnerability reverse-shell

Watf Bank

WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS

✭ 87

c android ios security pentesting mobile-app

Blackrat

BlackRAT - Java Based Remote Administrator Tool

✭ 87

java hack linux macos windows hacking pentesting rat

Thoron

Thoron Framework is a Linux post-exploitation framework that exploits Linux TCP vulnerability to provide a shell-like connection. Thoron Framework has the ability to create simple payloads to provide Linux TCP attack.

✭ 87

ruby linux pentesting exploit vulnerability linux-kernel vulnerabilities kali-linux remote-control backdoor rat post-exploitation reverse-shell

Git pentesting toolkit

Exploit pack for pentesters and ethical hackers.

✭ 86

shell pentesting tools

Pentesting toolkit

🏴‍☠️ Tools for pentesting, CTFs & wargames. 🏴‍☠️

✭ 1,268

c linux hacking reverse-engineering network cryptography pentesting infosec ctf vulnerabilities forensics post-exploitation web-security steganography

Thecollective

The Collective. A repo for a collection of red-team projects found mostly on Github.

✭ 85

python shell pentesting penetration-testing cybersecurity redteam red-team offensive-security

Zynix Fusion

zynix-Fusion is a framework that aims to centralize, standardizeand simplify the use of various security tools for pentest professionals.zynix-Fusion (old name: Linux evil toolkit) has few simple commands, one of which is theinit function that allows you to define a target, and thus use all the toolswithout typing anything else.

✭ 84

ruby linux security hacking pentesting tmux offensive-security

Gitjacker

🔪 Leak git repositories from misconfigured websites

✭ 1,249

go git hacking pentesting penetration-testing red-team

Cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

✭ 1,239

python python3 database pentesting scanner pentest tor cloudflare recon bruteforce ip

Pentesting Cookbook

A set of recipes useful in pentesting and red teaming scenarios

✭ 82

powershell security security-tools pentesting cheatsheet redteam

Prismatica

Responsive Command and Control System

✭ 81

html pentesting infosec cybersecurity exploitation exploitation-framework

Venom

Venom - A Multi-hop Proxy for Penetration Testers

✭ 1,228

go golang security proxy pentesting ctf pentest-tool redteam tunnel socks5

Deathstar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

✭ 1,221

python security pentesting active-directory

Decoder Plus Plus

An extensible application for penetration testers and software developers to decode/encode data into various formats.

✭ 79

python pentesting decoder pyqt5 burpsuite

Ldap search

Python3 script to perform LDAP queries and enumerate users, groups, and computers from Windows Domains. Ldap_Search can also perform brute force/password spraying to identify valid accounts via LDAP.

✭ 78

python pentesting pentest-tool redteam ldap enumeration

Githacktools

The best Hacking and PenTesting tools installer on the world

✭ 78

python python3 hacking pentesting tools installer

Rsf

The Robot Security Framework (RSF), Robot Security Framework (RSF), a standardized methodology to perform security assessments in robotics.

✭ 76

security framework pentesting robotics penetration-testing cybersecurity

Subjack

Subdomain Takeover tool written in Go

✭ 1,194

go golang security pentesting infosec bugbounty bug-bounty subdomain

121-180 of 584 pentesting projects