DirsearchWeb path scanner
Stars: ✭ 7,246 (+1105.66%)
vafVaf is a cross-platform very advanced and fast web fuzzer written in nim
Stars: ✭ 294 (-51.08%)
SifterSifter aims to be a fully loaded Op Centre for Pentesters
Stars: ✭ 403 (-32.95%)
HackerproAll in One Hacking Tool for Linux & Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog
Stars: ✭ 474 (-21.13%)
Afl UtilsUtilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization
Stars: ✭ 383 (-36.27%)
Cloud enumMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
Stars: ✭ 420 (-30.12%)
Slackor A Golang implant that uses Slack as a command and control server
Stars: ✭ 392 (-34.78%)
PayloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
Stars: ✭ 32,909 (+5375.71%)
Vulnerable AdCreate a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
Stars: ✭ 360 (-40.1%)
NetcatNetCat for Windows
Stars: ✭ 463 (-22.96%)
PyjfuzzPyJFuzz - Python JSON Fuzzer
Stars: ✭ 342 (-43.09%)
FfufFast web fuzzer written in Go
Stars: ✭ 5,687 (+846.26%)
DharmaGeneration-based, context-free grammar fuzzer.
Stars: ✭ 416 (-30.78%)
NishangNishang - Offensive PowerShell for red team, penetration testing and offensive security.
Stars: ✭ 5,943 (+888.85%)
StegcrackerSteganography brute-force utility to uncover hidden data inside files
Stars: ✭ 396 (-34.11%)
PrjxrayDocumenting the Xilinx 7-series bit-stream format.
Stars: ✭ 491 (-18.3%)
Cerberus一款功能强大的漏洞扫描器,子域名爆破使用aioDNS,asyncio异步快速扫描,覆盖目标全方位资产进行批量漏洞扫描,中间件信息收集,自动收集ip代理,探测Waf信息时自动使用来保护本机真实Ip,在本机Ip被Waf杀死后,自动切换代理Ip进行扫描,Waf信息收集(国内外100+款waf信息)包括安全狗,云锁,阿里云,云盾,腾讯云等,提供部分已知waf bypass 方案,中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等),支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能
Stars: ✭ 389 (-35.27%)
EchidnaEthereum smart contract fuzzer
Stars: ✭ 571 (-4.99%)
Infosec referenceAn Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Stars: ✭ 4,162 (+592.51%)
ChimeraChimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
Stars: ✭ 463 (-22.96%)
Hunter(l)user hunter using WinAPI calls only
Stars: ✭ 359 (-40.27%)
WhonowA "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Stars: ✭ 533 (-11.31%)
TlsfuzzerSSL and TLS protocol test suite and fuzzer
Stars: ✭ 335 (-44.26%)
Dradis CeDradis Framework: Colllaboration and reporting for IT Security teams
Stars: ✭ 443 (-26.29%)
FuzzapiFuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
Stars: ✭ 521 (-13.31%)
HosthunterHostHunter a recon tool for discovering hostnames using OSINT techniques.
Stars: ✭ 427 (-28.95%)
FunfuzzA collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.
Stars: ✭ 559 (-6.99%)
PwndocPentest Report Generator
Stars: ✭ 417 (-30.62%)
Linkedin2usernameOSINT Tool: Generate username lists for companies on LinkedIn
Stars: ✭ 504 (-16.14%)
PoweropsPowerShell Runspace Portable Post Exploitation Tool aimed at making Penetration Testing with PowerShell "easier"
Stars: ✭ 412 (-31.45%)
ArchstrikeAn Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.
Stars: ✭ 401 (-33.28%)
Commando VmComplete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution.
[email protected] Stars: ✭ 5,030 (+736.94%)
GhostwriterThe SpecterOps project management and reporting engine
Stars: ✭ 394 (-34.44%)
Easy hackHack the World using Termux
Stars: ✭ 549 (-8.65%)
NmapIdiomatic nmap library for go developers
Stars: ✭ 391 (-34.94%)
Iprotate burp extensionExtension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
Stars: ✭ 484 (-19.47%)
BusterAn advanced tool for email reconnaissance
Stars: ✭ 387 (-35.61%)
Scanners BoxA powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
Stars: ✭ 5,590 (+830.12%)
A Red Teamer DiariesRedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Stars: ✭ 382 (-36.44%)
Thc ArchiveAll releases of the security research group (a.k.a. hackers) The Hacker's Choice
Stars: ✭ 474 (-21.13%)
Vulnhub Ctf WriteupsThis cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles.
Stars: ✭ 368 (-38.77%)
ScantronA distributed nmap / masscan scanning framework complete with an API client for automation workflows
Stars: ✭ 542 (-9.82%)
SitadelWeb Application Security Scanner
Stars: ✭ 360 (-40.1%)
Sn1perAttack Surface Management Platform | Sn1perSecurity LLC
Stars: ✭ 4,897 (+714.81%)
Badkarmanetwork reconnaissance toolkit
Stars: ✭ 353 (-41.26%)
Damn Vulnerable Graphql ApplicationDamn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.
Stars: ✭ 567 (-5.66%)
Syzkallersyzkaller is an unsupervised coverage-guided kernel fuzzer
Stars: ✭ 3,841 (+539.1%)
PentestkitUseful tools and scripts during Penetration Testing engagements
Stars: ✭ 463 (-22.96%)
Awesome InfosecA curated list of awesome infosec courses and training resources.
Stars: ✭ 3,779 (+528.79%)
Jsfuzzcoverage guided fuzz testing for javascript
Stars: ✭ 532 (-11.48%)
KaboomA tool to automate penetration tests
Stars: ✭ 322 (-46.42%)
JusttryharderJustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)
Stars: ✭ 450 (-25.12%)
HashviewA web front-end for password cracking and analytics
Stars: ✭ 601 (+0%)
MonkeyInfection Monkey - An automated pentest tool
Stars: ✭ 5,572 (+827.12%)
Passphrase WordlistPassphrase wordlist and hashcat rules for offline cracking of long, complex passwords
Stars: ✭ 556 (-7.49%)