relay-starter-kit💥 Monorepo template (seed project) pre-configured with GraphQL API, PostgreSQL, React, Relay, Material UI.
Stars: ✭ 3,513 (+198.72%)
Collection DocumentCollection of quality safety articles. Awesome articles.
Stars: ✭ 1,387 (+17.94%)
cupCUP - Cloudflare (DNS) Updater Program
Stars: ✭ 30 (-97.45%)
SocialfishPhishing Tool & Information Collector
Stars: ✭ 2,522 (+114.46%)
SsrfmapAutomatic SSRF fuzzer and exploitation tool
Stars: ✭ 1,344 (+14.29%)
PhirauteeA proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell and does not require any third-party libraries. This tool steals the information, holds an organisation’s data to hostage for payments or permanently encrypts/deletes the organisation data.
Stars: ✭ 96 (-91.84%)
Poet[unmaintained] Post-exploitation tool
Stars: ✭ 184 (-84.35%)
RobustpentestmacroThis is a rich-featured Visual Basic macro code for use during Penetration Testing assignments, implementing various advanced post-exploitation techniques.
Stars: ✭ 95 (-91.92%)
ObsidianSailboatNmap and NSE command line wrapper in the style of Metasploit
Stars: ✭ 36 (-96.94%)
Cve 2019 0604cve-2019-0604 SharePoint RCE exploit
Stars: ✭ 91 (-92.26%)
PacketwhisperPacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
Stars: ✭ 405 (-65.56%)
Trackray溯光 (TrackRay) 3 beta⚡渗透测试框架(资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap)
Stars: ✭ 1,295 (+10.12%)
ss-v2ray-dockerDeprecated: please use https://hub.docker.com/r/mazy/ss-xray
Stars: ✭ 28 (-97.62%)
Vxscanpython3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
Stars: ✭ 1,244 (+5.78%)
PerunPerun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架
Stars: ✭ 773 (-34.27%)
Burp Bounty ProfilesBurp Bounty profiles compilation, feel free to contribute!
Stars: ✭ 76 (-93.54%)
UmbrellaA Phishing Dropper designed to Pentest.
Stars: ✭ 180 (-84.69%)
LscriptThe LAZY script will make your life easier, and of course faster.
Stars: ✭ 3,056 (+159.86%)
Censys Subdomain Finder⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
Stars: ✭ 402 (-65.82%)
SamuraiwtfThe main SamuraiWTF collaborative distro repo.
Stars: ✭ 243 (-79.34%)
sheet.spacet.meQuickly turn a Google Sheets spreadsheet into a public, CDN-backed JSON endpoint.
Stars: ✭ 52 (-95.58%)
Anevicon🔥 A high-performant UDP load generator, written in Rust
Stars: ✭ 243 (-79.34%)
CrosslinkedLinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping
Stars: ✭ 223 (-81.04%)
dwnd(ockerp)wn - a docker pwn tool manager
Stars: ✭ 154 (-86.9%)
TigersharkBilingual PhishingKit. TigerShark intergrates a vast array of various phishing tools and frameworks, from C2 servers, backdoors and delivery methods in multiple scripting languages in order to suit whatever your deployment needs may be.
Stars: ✭ 212 (-81.97%)
GdogA fully featured Windows backdoor that uses Gmail as a C&C server
Stars: ✭ 399 (-66.07%)
Hack ToolsThe all-in-one Red Team extension for Web Pentester 🛠
Stars: ✭ 2,750 (+133.84%)
log4j-detectorLog4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too!
Stars: ✭ 622 (-47.11%)
RaccoonA high performance offensive security tool for reconnaissance and vulnerability scanning
Stars: ✭ 2,312 (+96.6%)
naturalFastest Framework for NodeJS. Written in pure ES6+
Stars: ✭ 30 (-97.45%)
Attiny85RubberDucky like payloads for DigiSpark Attiny85
Stars: ✭ 169 (-85.63%)
Substats📈📉 Shhhh...we're counting your subscribers!
Stars: ✭ 396 (-66.33%)
EnumdbRelational database brute force and post exploitation tool for MySQL and MSSQL
Stars: ✭ 167 (-85.8%)
cloudflare-ddns-updaterDynamic DNS (DDNS) service based on Cloudflare! Access your home network remotely via a custom domain name without a static IP! Written in pure BASH~
Stars: ✭ 434 (-63.1%)
DarksideTool Information Gathering & social engineering Write By [Python,JS,PHP]
Stars: ✭ 159 (-86.48%)
CloudcheckChecks using a test string if a Cloudflare DNS bypass is possible using CloudFail.
Stars: ✭ 41 (-96.51%)
AirmasterUse ExpiredDomains.net and BlueCoat to find useful domains for red team.
Stars: ✭ 150 (-87.24%)
GurpBurp Commander written in Go
Stars: ✭ 56 (-95.24%)
DnsmorphDomain name permutation engine written in Go
Stars: ✭ 148 (-87.41%)
Ss7maperSS7 MAP (pen-)testing toolkit. DISCONTINUED REPO, please use: https://github.com/0xc0decafe/ss7MAPer/
Stars: ✭ 394 (-66.5%)
GitmailsAn information gathering tool to collect git commit emails in version control host services
Stars: ✭ 142 (-87.93%)
ubnt-cloudflaredInstall Cloudflare's DNS proxy on UBNT gateways
Stars: ✭ 22 (-98.13%)
PakuriPenetration test Achieve Knowledge Unite Rapid Interface
Stars: ✭ 125 (-89.37%)
ChashellChashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.
Stars: ✭ 742 (-36.9%)
FlareSolverrSharpFlareSolverr .Net / Proxy server to bypass Cloudflare protection
Stars: ✭ 62 (-94.73%)
Hexoplusplus🎁基于CloudFlareWorker的无服务器Hexo后端,目标:解决静态博客所有痛点[文章编辑、图片上传、博主活跃信息统计、博主说说、Twikoo加强版、阅读量统计【尚未完成】]
Stars: ✭ 72 (-93.88%)
GirshAutomatically spawn a reverse shell fully interactive for Linux or Windows victim
Stars: ✭ 66 (-94.39%)
Nim SmbexecSMBExec implementation in Nim - SMBv2 using NTLM Authentication with Pass-The-Hash technique
Stars: ✭ 59 (-94.98%)
LexiconManipulate DNS records on various DNS providers in a standardized way.
Stars: ✭ 1,028 (-12.59%)
Awesome OscpA curated list of awesome OSCP resources
Stars: ✭ 804 (-31.63%)
HershellHershell is a simple TCP reverse shell written in Go.
Stars: ✭ 442 (-62.41%)
Behold3r👻Behold3r -- 收集指定网站的子域名,并可监控指定网站的子域名更新情况,发送变更报告至指定邮箱
Stars: ✭ 29 (-97.53%)
EnigmaMultiplatform payload dropper
Stars: ✭ 180 (-84.69%)