Defaultcreds Cheat SheetOne place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
Stars: ✭ 1,949 (+71.57%)
Ssrf TestingSSRF (Server Side Request Forgery) testing resources
Stars: ✭ 1,718 (+51.23%)
Deimosc2DeimosC2 is a Golang command and control framework for post-exploitation.
Stars: ✭ 423 (-62.76%)
Swifty🔑 Free Offline Password Manager
Stars: ✭ 496 (-56.34%)
KaboomA tool to automate penetration tests
Stars: ✭ 322 (-71.65%)
Black Hat RustApplied offensive security with Rust - Early access - https://academy.kerkour.com/black-hat-rust?coupon=GITHUB
Stars: ✭ 331 (-70.86%)
VajraVajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.
Stars: ✭ 269 (-76.32%)
Offensive DockerOffensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
Stars: ✭ 328 (-71.13%)
Pwncatpwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
Stars: ✭ 904 (-20.42%)
GoohakAutomatically Launch Google Hacking Queries Against A Target Domain
Stars: ✭ 432 (-61.97%)
Gitjacker🔪 Leak git repositories from misconfigured websites
Stars: ✭ 1,249 (+9.95%)
Passphrase WordlistPassphrase wordlist and hashcat rules for offline cracking of long, complex passwords
Stars: ✭ 556 (-51.06%)
KatanaA Python Tool For google Hacking
Stars: ✭ 355 (-68.75%)
TaipanWeb application vulnerability scanner
Stars: ✭ 359 (-68.4%)
AiodnsbrutePython 3.5+ DNS asynchronous brute force utility
Stars: ✭ 370 (-67.43%)
Evil WinrmThe ultimate WinRM shell for hacking/pentesting
Stars: ✭ 2,251 (+98.15%)
Impost3r👻Impost3r -- A linux password thief
Stars: ✭ 355 (-68.75%)
Rustscan🤖 The Modern Port Scanner 🤖
Stars: ✭ 5,218 (+359.33%)
NmapIdiomatic nmap library for go developers
Stars: ✭ 391 (-65.58%)
DorknetSelenium powered Python script to automate searching for vulnerable web apps.
Stars: ✭ 256 (-77.46%)
Vaultswiss army knife for hackers
Stars: ✭ 346 (-69.54%)
A Red Teamer DiariesRedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Stars: ✭ 382 (-66.37%)
ParadoxiaratParadoxiaRat : Native Windows Remote access Tool.
Stars: ✭ 395 (-65.23%)
Dr0p1t FrameworkA framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
Stars: ✭ 1,132 (-0.35%)
OtsecaOpen source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.
Stars: ✭ 416 (-63.38%)
PwndocPentest Report Generator
Stars: ✭ 417 (-63.29%)
Nmap Nse InfoBrowse and search through nmap's NSE scripts.
Stars: ✭ 54 (-95.25%)
KeyloggerA simple keylogger for Windows, Linux and Mac
Stars: ✭ 1,007 (-11.36%)
CovertutilsA framework for Backdoor development!
Stars: ✭ 424 (-62.68%)
MetabigorIntelligence tool but without API key
Stars: ✭ 424 (-62.68%)
Hackinghacker, ready for more of our story ! 🚀
Stars: ✭ 413 (-63.64%)
ChroniclePublic append-only ledger microservice built with Slim Framework
Stars: ✭ 429 (-62.24%)
Wahh extrasThe Web Application Hacker's Handbook - Extra Content
Stars: ✭ 428 (-62.32%)
Sudo killerA tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.
Stars: ✭ 1,073 (-5.55%)
FireelffireELF - Fileless Linux Malware Framework
Stars: ✭ 435 (-61.71%)
FfufFast web fuzzer written in Go
Stars: ✭ 5,687 (+400.62%)
Dns Rebind ToolkitA front-end JavaScript toolkit for creating DNS rebinding attacks.
Stars: ✭ 435 (-61.71%)
HershellHershell is a simple TCP reverse shell written in Go.
Stars: ✭ 442 (-61.09%)
CapillaryCapillary is a library to simplify the sending of end-to-end encrypted push messages from Java-based application servers to Android clients.
Stars: ✭ 445 (-60.83%)
Hacking Tools RepositoryA list of security/hacking tools that have been collected from the internet. Suggestions are welcomed.
Stars: ✭ 448 (-60.56%)
Dradis CeDradis Framework: Colllaboration and reporting for IT Security teams
Stars: ✭ 443 (-61%)
NullinuxInternal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.
Stars: ✭ 451 (-60.3%)
ReconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Stars: ✭ 974 (-14.26%)
DirbleFast directory scanning and scraping tool
Stars: ✭ 468 (-58.8%)
PentestkitUseful tools and scripts during Penetration Testing engagements
Stars: ✭ 463 (-59.24%)
GobyAttack surface mapping
Stars: ✭ 446 (-60.74%)
Swift KeyloggerKeylogger for mac written in Swift using HID
Stars: ✭ 995 (-12.41%)
DronesploitDrone pentesting framework console
Stars: ✭ 473 (-58.36%)
HackerproAll in One Hacking Tool for Linux & Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog
Stars: ✭ 474 (-58.27%)
Juice ShopOWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Stars: ✭ 6,270 (+451.94%)
Dictionary Of PentestingDictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
Stars: ✭ 492 (-56.69%)
ToxicAn ncurses-based Tox client (please make pull requests on the development fork: https://github.com/toktok/toxic)
Stars: ✭ 987 (-13.12%)
Eyes👀 🖥️ Golang rewrite of eyes.sh. Let's you perform domain/IP address information gathering. Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?" 🔍 🕵️
Stars: ✭ 38 (-96.65%)
ReconpiReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
Stars: ✭ 490 (-56.87%)
MxtractmXtract - Memory Extractor & Analyzer
Stars: ✭ 499 (-56.07%)