Top 584 pentesting open source projects

SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.

✭ 123

python sqli bug-bounty pentesting bugbounty evasion bughunting burp-plugin burpsuite payload-generator sqlinjection burp-extensions burpsuite-pro pentesting-tools

XENA

XENA is the managed remote administration platform for botnet creation & development powered by blockchain and machine learning. Aiming to provide an ecosystem which serves the bot herders. Favoring secrecy and resiliency over performance. It's micro-service oriented allowing for specialization and lower footprint. Join the community of the ulti…

✭ 127

typescript go C++Vue python shell machine-learning remote-control botnet blockchain adonisjs xena iot-platform pentesting post-exploitation nuxtjs remote-access red-team remote-admin-tool gpt-2 gpt-3

bWAPP

bWAPP latest modified for PHP7

✭ 30

PHP javascript CSS python HTML c owasp pentesting security-vulnerability owasp-top-10 bwapp

psak

The Pentester's Swiss Army Knife

✭ 28

python pentesting kali-linux psak

RPCScan

Tool to communicate with RPC services and check misconfigurations on NFS shares

✭ 53

python nfs rpc pentesting pentest nfs-client pentest-tool

TIWAP

Totally Insecure Web Application Project (TIWAP)

✭ 137

HTML python training flask security web mongodb hacking penetration-testing infosec sqlite3 pentesting tiwap

xmlrpc-bruteforcer

Multi-threaded XMLRPC brute forcer using amplification attacks targeting WordPress installations prior to version 4.4.

✭ 71

python Dockerfile wordpress bruteforce pentesting xmlrpc-interface xmlrpc-bruteforcer multicall bruteforce-amplification-attack

bst

Binary String Toolkit (BST). Quickly and easily convert binary strings for all your exploit development needs. 😎

✭ 25

c Makefile hexadecimal pentesting binary-strings exploit-development

pentest-tools

General stuff for pentesting - password cracking, phishing, automation, Kali, etc.

✭ 52

python shell Mask hacking penetration-testing pentesting

offensive-infrastructure

Offensive Infrastructure with Modern Technologies

✭ 88

shell HCL Dockerfile docker ansible devops consul docker-compose vault terraform pentesting nomad ansible-roles hashistack

needle-agent

The iOS Agent for the Needle Security Assessment Framework

✭ 36

objective c shell perl ruby security ios mobile needle pentesting

cybersecurity-career-path

Cybersecurity Career Path

✭ 335

roadmap pentesting digital-forensics cybersecurity-career-path cyber-threat-analyst

TripleS

Extracting Syscall Stub, Modernized

✭ 51

C#windows pentesting syscall av-evasion red-teaming

BabyMux

pentesting tool for noob hackers.Runs on linux and termux

✭ 50

python hacking pentesting termux kali-linux mobilehacks noobhacking scriptkiddie

WPCracker

WordPress pentest tool

✭ 34

C#windows linux wordpress security attack penetration-testing brute-force-attacks brute-force pentesting console-application wordpress-site hacking-tool user-enumeration

tor-rootkit

A Python 3 standalone Windows 10 / Linux Rootkit using Tor.

✭ 142

python Dockerfile security reverse-shell rootkit tor windows-10 rat pentesting hidden-services pentesting-python remote-administration-tool python3-rootkit tor-expert-bundle

wifibang

wifi attacks suite

✭ 56

shell pentesting aircrack-ng-suite wifi-security pentest-scripts wifi-password security-tools pentest-tool

awesome-ddos-tools

Collection of several DDos tools.

packer-kali linux

This is a repository that will be used to help create a process of a new kali vagrant box for hashicorp each week.

✭ 36

shell python HCL ruby vagrant automation packer pentesting kali-linux homelab kalilinux redops kali-box pentestlab

Lucifer

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life

ptp

Pentester's Tools Parser (PTP) provides an unified way to retrieve the information from all (final goal) automated pentesting tools and assign an automated ranking for each finding.

✭ 28

python owasp pentesting vulne owtf

Athena

Test your Security Skills, and Clean Code Development as a Pythonist, Hacker & Warrior 🥷🏻

✭ 43

python HTML javascript linux flask security athena hacking owasp vulnerability sqlite3 pentesting

A simple, extensible C&C beaconing system.

✭ 93

go hacking penetration-testing pentesting security-tools command-and-control implants

PXXTF

Framework For Exploring kernel vulnerabilities, network vulnerabilities ✨

✭ 23

python shell perl ruby PHP XSLT linux security scanner hacking penetration-testing exploits pentesting pentest exploitation

censys-recon-ng

recon-ng modules for Censys

✭ 29

python shell osint cybersecurity penetration-testing pentesting threat-hunting threatintel recon-ng threat-intelligence censys-api osinttool osint-reconnaissance recon-ng-modules

wifi-pentesting-guide

WiFi Penetration Testing Guide

✭ 105

python shell wifi pentesting wifi-network offensive-security wifi-security pentest-scripts wifi-hacking pentesting-tools offensivesecurity

pwn-pulse

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

✭ 126

shell exploit penetration-testing infosec pentesting cve red-team pentest-scripts security-tools

pitch

The initial conversation slides and menu of scenarios

✭ 37

security documentation hacking infosec pentesting redteaming

Raspberry-Pi-Zero-Rubber-Ducky-Duckberry-Pi

A £10 Rubber Ducky USB HID! A USB device which emulates a keyboard and automates key entry.

✭ 207

raspberry-pi rubber-ducky hacking pentesting hak5 rubberduck raspberry-pi-zero rubberducky duckberry duckberry-pi duck-berry rubber-duck

Jiraffe

One stop place for exploiting Jira instances in your proximity

✭ 157

python security jira infosec pentesting exploitation redteam security-tool jira-instances

dontgo403

Tool to bypass 40X response codes.

✭ 457

go pentesting ctf bugbounty websec waf-bypass

huntkit

Docker - Ubuntu with a bunch of PenTesting tools and wordlists

✭ 51

shell Dockerfile docker penetration-testing pentesting pentest

Quebec Wordlist

A useful wordlist made from French Canadian leaked passwords!

✭ 50

pentesting hashcat wordlists johntheripper

boxer

Boxer: A fast directory bruteforce tool written in Python with concurrency.

✭ 15

python directory hacking bruteforce penetration-testing pentesting bugbounty hacking-tool

pentest-reports

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

✭ 111

HTML TeX SCSS python javascript ruby Makefile security penetration-testing infosec pentesting hacktoberfest oscp-prep pentest-report pentest-reports

webrecon

Automated Web Recon Shell Scripts

✭ 48

shell security tools penetration-testing pentesting recon bash-script reconnaissance penetration-testing-tools

burp-piper-custom-scripts

Custom scripts for the PIPER Burp extensions.

✭ 85

python shell web pentesting burpsuite piper

ftpknocker

🔑 ftpknocker is a multi-threaded scanner for finding anonymous FTP servers

✭ 38

python security ftp anonymity pentesting pentest-tool ftp-protocol

Kali-TX

Customized Kali Linux - Ansible playbook

✭ 54

python shell ansible ansible-playbook automation collection tools pentesting red-team

DNSExplorer

Bash script that automates the enumeration of domains and DNS servers in the active information gathering.

✭ 33

shell dns penetration-testing pentesting offensive-security ethical-hacking

py3webfuzz

A Python3 module to assist in fuzzing web applications

✭ 54

python java HTML shell ColdFusion ASP.NET security web fuzzing pentesting

github-endpoints

Find endpoints on GitHub.

✭ 118

go github urls pentesting bugbounty security-tools endpoints

rustpad

Multi-threaded Padding Oracle attacks against any service. Written in Rust.

✭ 75

rust cli cryptography web tui infosec pentesting padding-oracle-attacks pentesting-tools

wingkalabs

Wingkalabs (Linux) Wingkalabs es una máquina Virtual Linux intencionalmente vulnerable. Esta máquina virtual se puede utilizar para realizar entrenamientos de seguridad, probar herramientas de seguridad y practicar técnicas comunes de pruebas de penetración.

✭ 16

linux virtual-machine linux-kernel injection hacking pentesting ubuntu1404 vulnerable-application sistemas-operativos

evilredis

Script for doing evil stuff to Redis servers (for educational purposes only).

✭ 71

javascript HTML redis security pentesting

longtongue

Customized Password/Passphrase List inputting Target Info

✭ 61

python security password-generator hacking password wordlist passphrase pentesting wordlist-generator passphrase-generator hacking-tool social-engineering-attacks security-tools social-engineering wordlists password-list wordlistgeneration

PeekABoo

PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. Note: Remote desktop is disabled by default on all Windows operating systems.

✭ 120