All Categories → Security → pentesting

Top 584 pentesting open source projects

Lyncsmash

locate and attack Lync/Skype for Business

✭ 258

python hacking pentesting brute-force

Dorknet

Selenium powered Python script to automate searching for vulnerable web apps.

✭ 256

python proxy pentesting selenium osint pentest infosec web-app

Pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

✭ 2,213

python assembly Roff security pentesting security-tools

Spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Sn1per

Attack Surface Management Platform | Sn1perSecurity LLC

Rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

HOUDINI

Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all.

✭ 791

typescript javascript CSS HTML docker tools hacking cheatsheet webapp pentesting docker-images

docker-osmedeus

Docker image for Osmedeus, a fully automated offensive security tool for reconnaissance and vulnerability scanning

✭ 78

Dockerfile docker security pentesting

QuickScan

Port scanning and domain utility.

✭ 26

python dns osint infosec pentesting port-scanner whois-lookup dns-resolver

Red-Team-Essentials

This repo will contain some basic pentest/RT commands.

✭ 22

powershell cybersecurity pentesting red-team red-team-engagement

ShonyDanza

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

sub404

A python tool to check subdomain takeover vulnerability

✭ 205

python Dockerfile subdomain bug-bounty pentesting bugbounty vulnerability-scanner subdomain-takeover takeover-subdomain bugbounty-tool sub404

JWTweak

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

✭ 85

python automation jwt authentication authorization jwt-tokens application-security pentesting bugbounty appsec vulnerability-assessment jwt-algorithm security-enthusiasts

NewNtdllBypassInlineHook CSharp

Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.

✭ 35

C#pentesting pentest bypass bypass-antivirus shellcode-loader redteam filemapping bypass-edr

linux-rootkits-red-blue-teams

Linux Rootkits (4.x Kernel)

✭ 56

c Makefile linux iot security rootkit hacking pentesting red-team blue-team

wifi-deauther

A fully automatic wifi deauther coded in Python

✭ 25

python linux ubuntu wifi crash cybersecurity deauth pentesting killer kali-linux wifi-security kali deauthentication-attack kali-scripts deauther wifi-killer wifi-deauth wifi-deauther

PowerProxy

PowerShell SOCKS proxy with reverse proxy capabilities

✭ 29

powershell python network proxy pentesting

offensive-docker-vps

Create a VPS on Google Cloud Platform or Digital Ocean easily with Offensive Docker included to launch assessment to the targets.

✭ 66

HCL HTML Dockerfile digitalocean terraform gcp vps digital-ocean pentesting pentest pentest-tool pentesting-tools

Elliot

A pentesting tool inspired by mr robot and derived by zphisher

✭ 23

HTML CSS terminal phishing hacking penetration-testing pentesting phishing-attacks ethicalhacking ethical-hacking-tools zphisher

SQLbit

Just another script for automatize boolean-based blind SQL injections. (Demo)

✭ 30

python sql sql-injection pentesting

Raven-Storm

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

EvilUSB

Quick utility to craft executables for pentesting and managing reverse shells

✭ 33

python windows usb pentesting automatization

WiFi-Project

Pre-connection attacks, gaining access & post-connection attacks on WEP, WPA & WPA2. 🛰✔️

✭ 22

python security hacking wifi forensics cybersecurity pentesting

awesome-list-of-secrets-in-environment-variables

🦄🔒 Awesome list of secrets in environment variables 🖥️

✭ 538

security exploit log4j cybersecurity poc pentesting writeups bugbounty red-team blue-team security-writeups cve-2021-44228 bugbounttips

CVE-2020-0688-Scanner

Quick tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method.

✭ 38

C#microsoft exchange pentesting cve-2020-0688

xssmap

Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities

✭ 107

python PHP javascript shell security attack xss pentesting xss-scanner security-scanner security-automation security-tools reflected-xss-vulnerabilities

Deep-Inside

Command line tool that allows you to explore IoT devices by using Shodan API.

✭ 22

python linux iot shodan scanner hacking internet-of-things penetration-testing pentesting command-line-tool hacking-tool shodan-api shodan-cli penetration-testing-tools

avain

A Modular Framework for the Automated Vulnerability Analysis in IP-based Networks

✭ 56

python C++shell modular framework hacking extensible pentesting mit-license pentest netsec vulnerability-detection vulnerability-identification network-security itsecurity vulnerability-analysis vulnerability-scanner penetration-testing-framework

quick-recon.py

Do some quick reconnaissance on a domain-based web-application

✭ 13

python osint pentesting bugbounty reconnaissance

CTF-Writeups

Repository of my CTF writeups

✭ 25

python cybersecurity ctf-writeups pentesting vulnhub ctf-challenges hackthebox cybersec tryhackme

FacebookBug

Facebook Write-ups, PoC, and exploitation codes:

✭ 28

facebook hacking pentesting webapplicationhacking

vulnerabilities

List of every possible vulnerabilities in computer security.

✭ 14

security hacking xss penetration-testing sql-injection csrf pentesting vulnerabilities hacktoberfest inclusion unintended-data-leakage

server

Hashtopolis - A Hashcat wrapper for distributed hashcracking

✭ 954

PHP HTML javascript CSS shell TeX distributed-computing hash distributed pentesting passwords hashes cracking hashcat hashlist hashtopussy hashtopolis

SecurityExplained

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.

✭ 301

learning hacking pentesting bugbounty appsecurity

juice-shop-ctf

Capture-the-Flag (CTF) environment setup tools for OWASP Juice Shop supporting CTFd, FBCTF and RootTheBox

security-study-tutorial

Summary of online learning materials

✭ 73

checklist apt fuzzing awesome-list pager pentesting web-security-research security-tutorial

Brutus

Botnet targeting Windows machines written entirely in Python & open source security project.

✭ 37

python cli open-source security botnet hacking exploits attacker penetration pentesting hacking-tool it-security ethical-hacking security-tools hacking-tools brutus

YAPS

Yet Another PHP Shell - The most complete PHP reverse shell

✭ 35

PHP backdoor reverse-shell exploit hacking netcat web-shell penetration-testing rat pentesting bugbounty pentest ctf-tools netcat-reverse pentest-tool webhacking reverse-tcp pentest-script cve-2021-4034

SimpleKeylogger

Simple Keylogger with smtp to send emails on your account using python works on linux and Windows

✭ 32

python windows linux email hacking infosec keylogger pentesting hacking-tool

RecoverPy

🙈 Interactively find and recover deleted or 👉 overwritten 👈 files from your terminal

✭ 189

python search macos linux cli console files data terminal tui cybersecurity pentesting recovery search-interface grep unix-command

HackingAllTheThings

My documentation and tools for learn ethical hacking.

✭ 66

python c C#powershell C++shell security exploit hacking pentesting oscp exploit-development hacking-tools oscp-tools oscp-prep oscp-engagements

black-hat-python3-code

🏴‍☠️ tools (py3 version) of Black Hat Python book 🏴‍☠️

✭ 51

python tcp proxy udp hacking sniffer blackhat pentesting hacking-tool black-hat hacking-tools hacking-code black-hat-python hackingtools blackhat-python blackhat2020

link

link is a command and control framework written in rust

✭ 345

rust shell penetration-testing pentesting payload red-team c2 command-and-control implant

aquatone

A Tool for Domain Flyovers

✭ 43

javascript go HTML security osint hacking penetration-testing bug-bounty infosec pentesting bugbounty pentest appsec hacking-tool security-tools reconnaissance

LiteOTP

Multi OTP Spam Amp/Paralell threads

✭ 50

PHP Dockerfile android package spam multi-platform libraries clean-code php-applications stress-testing penetration-testing cli-app pentesting geektool pentest spammer otp-applications geeks pentest-tool spamsms

ekolabs

EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference

✭ 47

networking pentesting security-vulnerability scanning webapps webappsec security-tools

pinky

pinky - The PHP mini RAT (Remote Administration Tool)

✭ 59

PHP rat pentesting

AndroidSecNotes

An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentesters, reverse engineer, and redteamers.

✭ 140

android security adb notes hacking pentesting bugbounty androidsecurity

Pentesting

Misc. Public Reports of Penetration Testing and Security Audits.

✭ 24