Gives you one-liners that aids in penetration testing operations, privilege escalation and more

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Wiegand data logger, replay device and micro door-controller

Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"

A fast web directory/file enumeration tool written in Rust

dnsub一款好用的子域名扫描工具

Python3 script to perform LDAP queries and enumerate users, groups, and computers from Windows Domains. Ldap_Search can also perform brute force/password spraying to identify valid accounts via LDAP.

SSRF (Server Side Request Forgery) testing resources

Powershell script to setup windows port forwarding using native netsh client

🔄 A collection of mitmproxy inline scripts

iOS/macOS/Linux Remote Administration Tool

foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV

unix SSH post-exploitation 1337 tool

This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs enabling attackers to read data they shouldn't be able to. This tool is originally based on Microsoft: https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

Set of tools to audit SIP based VoIP Systems

Venom - A Multi-hop Proxy for Penetration Testers

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Pentesting suite for Maltego based on data in a Metasploit database

RAT-el is an open source penetration test tool that allows you to take control of a windows machine. It works on the client-server model, the server sends commands and the client executes the commands and sends the result back to the server. The client is completely undetectable by anti-virus software.

Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux