2661 Open source projects that are alternatives of or similar to Archstrike

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

Hacking Toolkit

Useful tools and scripts during Penetration Testing engagements

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

Ruby on Rails Phishing Framework

一款信息泄漏利用工具，适用于.git/.svn源代码泄漏和.DS_Store泄漏

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Next generation web scanner

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

All in One Hacking Tool for Linux & Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog

Idiomatic nmap library for go developers

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

Web Application Security Scanner Framework

Scripts I use during pentest engagements.

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer

Study Notes For Web Hacking / Web安全学习笔记

Automated NoSQL database enumeration and web application exploitation tool.

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

Penetration Testing notes, resources and scripts

OSINT Tool: Generate username lists for companies on LinkedIn

HostHunter a recon tool for discovering hostnames using OSINT techniques.

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

Web path scanner

A simple tool for interacting with OWASP ZAP from the commandline.

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

🔪 Leak git repositories from misconfigured websites

The best Hacking and PenTesting tools installer on the world

Powerful Visual Subdomain Enumeration at the Click of a Mouse

Highly optimized inference engine for Binarized Neural Networks

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

Set of tools to audit SIP based VoIP Systems

🏴‍☠️ Information Gathering tool 🏴‍☠️ DNS / Subdomains / Ports / Directories enumeration

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

my oscp prep collection

Quiver is the tool to manage all of your tools for bug bounty hunting and penetration testing.

A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing

Container with all the list of useful tools/commands while hacking and pentesting Kubernetes Clusters

Cameradar hacks its way into RTSP videosurveillance cameras

Vagrant VirtualBox environment for conducting an internal network penetration test

network reconnaissance toolkit

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

👶 BabySploit Beginner Pentesting Toolkit/Framework Written in Python 🐍

Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Script for creating custom OS images for single-board computers

MOVED TO: https://github.com/cirosantilli/linux-kernel-module-cheat#userland-assembly SEE README. ARMv7 and ARMv8 assembly userland minimal examples tutorial. Runnable asserts on x86 hosts with QEMU user mode or natively on ARM targets. Nice GDB step debug setup. Tested on Ubuntu 18.04 host and Raspberry Pi 2 and 3 targets.