Top 584 pentesting open source projects

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

✭ 378

python security pentesting scanner infosec security-audit vulnerability-scanners exploits vulnerability-detection vulnerability-assessment

Raasnet

Open-Source Ransomware As A Service for Linux, MacOS and Windows

✭ 371

python python3 linux macos windows open-source demo pentesting encryption research payload ransomware

Infosec reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

Rustscan

🤖 The Modern Port Scanner 🤖

✭ 5,218

rust Dockerfile shell hacktoberfest docker security hacking networking security-tools pentesting nmap scanning port

Aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

✭ 370

python security async security-tools pentesting dns osint recon enumeration brute-force red-team subdomain resolver

Rdpassspray

Python3 tool to perform password spraying using RDP

✭ 368

python pentesting pentest-tool rdp

Open Redirect Payloads

✭ 361

shell pentesting pentest pentest-tool payloads

Ridrelay

Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.

✭ 359

python pentesting activedirectory

Oscp Human Guide

My own OSCP guide

✭ 358

hacking pentesting oscp offensive-security

Impost3r

👻Impost3r -- A linux password thief

✭ 355

c security-tools pentesting pentest-tool redteam fake keylogger sudo

Cobalt strike extension kit

Attempting to be an all in one repo for others' userful aggressor scripts as well as things we've found useful during Red Team Operations.

✭ 345

powershell pentesting redteam

Vault

swiss army knife for hackers

✭ 346

python security hacking networking pentesting crawler sqlite scanner osint hacking-tool fuzzing scrapy information-gathering vault offensive-security port-scanner

Docker Onion Nmap

Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.

✭ 345

shell docker security pentesting scanner tor recon nmap

Sqli Hunter

SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

✭ 340

ruby pentesting detection exploitation sql-injection vulnerability-scanner

Suid3num

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

✭ 342

python pentesting pentest exploitation oscp privilege-escalation

Ttps

Tactics, Techniques, and Procedures

✭ 335

python python3 powershell bash linux security windows pentesting redteam

Black Hat Rust

Applied offensive security with Rust - Early access - https://academy.kerkour.com/black-hat-rust?coupon=GITHUB

✭ 331

rust security pentesting pentest audit red-team bug-bounty offensive-security beacon

Citadel

Collection of pentesting scripts

✭ 333

shell pentesting pentest-scripts

Dnslivery

Easy files and payloads delivery over DNS

✭ 332

python pentesting dns download

Offensive Docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

✭ 328

dockerfile hacking pentesting pentest bugbounty ctf-tools bug-bounty

Langhost

👻 A LAN dropbox chatbot controllable via Telegram

✭ 324

python hacking pentesting telegram chatbot dropbox network-monitoring

Reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals & bug-hunters

✭ 322

vue security-tools pentesting recon

Osint tips

OSINT

✭ 322

hacking network pentesting osint bugbounty redteam reconnaissance nmap

Kaboom

A tool to automate penetration tests

✭ 322

shell pentesting penetration-testing pentest pentest-tool hydra pentest-scripts

Getaltname

Extract subdomains from SSL certificates in HTTPS sites.

✭ 320

python tool pentesting dns https pentest infosec ssl pentest-tool information-retrieval subdomain discovery certificates ssl-certificates ssl-certificate pentest-scripts

Injuredandroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

✭ 317

kotlin android flutter pentesting ctf android-studio apk vulnerabilities webview bug-bounty security-testing android-security

Airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

✭ 3,830

shell Dockerfile linux security hacking pentesting enterprise wireless sniffing aircrack handshake denial-of-service wps sslstrip evil-twin pixie-dust wep 5ghz wpa-wpa2 pmkid

Vajra

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

✭ 269

javascript hacking pentesting scanner osint pentest-tool recon information-gathering bug-bounty

Webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

✭ 311

go security pentesting enumeration

Findom Xss

A fast DOM based XSS vulnerability scanner with simplicity.

✭ 310

shell pentesting pentest bugbounty xss

Hackerenv

✭ 309

shell pentesting pentest hacking-tool pentest-tool vulnerability-scanners kali-linux vulnerability-assessment pentest-scripts

Hetty

Hetty is an HTTP toolkit for security research.

✭ 3,596

go typescript CSS http proxy pentesting infosec bugbounty mitm

Fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

✭ 4,013

python pentesting password fuzzing fuzzer directory fuzz-testing username wfuzz paramter

Badintent

Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite

✭ 303

java android pentesting burp-extensions mobile-security

Gray hat csharp code

This repository contains full code examples from the book Gray Hat C#

✭ 301

security dotnet automation pentesting xamarin redteam mono payload metasploit fuzzer sql-injection blueteam

Ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

✭ 300

python docker kubernetes aws cloud google pentesting k8s pentest cybersecurity gcp amazon

Wirespy

Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).

✭ 293

shell monitoring pentesting wifi wireless mitm honeypot wifi-security man-in-the-middle

Esp8266 honeypot

THE ESP8266 HONEYPOT

✭ 295

python python3 micropython pentesting

Cheatsheet God

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

Pentmenu

A bash script for recon and DOS attacks

✭ 288

shell pentesting red-team dos

Susanoo

A REST API security testing framework.

✭ 287

python security rest-api security-tools pentesting pentest-tool

Rshijack

tcp connection hijacker, rust rewrite of shijack

✭ 288

rust network pentesting tcp

Whatweb

Next generation web scanner

Xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

✭ 3,131

python Less javascript HTML shell Dockerfile security pentesting scanner infosec security-audit vulnerability-scanners exploits vulnerability-detection vulnerability-assessment

Pentest Book

✭ 266

security hacking pentesting wiki oscp

Faraday

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.