2609 Open source projects that are alternatives of or similar to Getaltname

TLS implementation in pure python, focused on interoperability testing

A simple and visual static web server with collaboration features.

🔒 Memorable site for testing clients against bad SSL configs.

Apache Guacamole installation bash script for RHEL 7 and CentOS 7 including options for Nginx, HTTPS, SSL, LDAP, Let's Encrypt certificates and more

Boilerplate code for setting up Nginx + Gunicorn + Flask + automated LetsEncrypt certificates (https) using docker-compose.

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

Applied offensive security with Rust - Early access - https://academy.kerkour.com/black-hat-rust?coupon=GITHUB

Sifter aims to be a fully loaded Op Centre for Pentesters

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

A curated list of awesome privilege escalation

Generate SSL certs easily for Spring Boot apps

Fast web fuzzer written in Go

Tool to communicate with RPC services and check misconfigurations on NFS shares

🔐 CLI tool to analyze, troubleshoot or inspect SSL certificates, requests or keys.

Automatically Launch Google Hacking Queries Against A Target Domain

This is a simple HTTP/HTTPS proxy server written in Java

🔐 A lightweight high level library for configuring a http client or server based on SSLContext or other properties such as TrustManager, KeyManager or Trusted Certificates to communicate over SSL TLS for one way authentication or two way authentication provided by the SSLFactory. Support for Java, Scala and Kotlin based clients with examples. Av…

Penetration Testing notes, resources and scripts

A MongoDB importer and API for Project Sonars DNS datasets

HostHunter a recon tool for discovering hostnames using OSINT techniques.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

TLS Redirection

多合一网站指纹扫描器，轻松获取网站的 IP / DNS 服务商 / 子域名 / HTTPS 证书 / WHOIS / 开发框架 / WAF 等信息

Check expiry dates of local and remote SSL certificates

Subdomain enumeration through various techniques

🦁 Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and search for config or backup files.

Gorsair hacks its way into remote docker containers that expose their APIs

Intelligence tool but without API key

A curated list of awesome OSCP resources

Scan for and exploit Consul agents

👶 BabySploit Beginner Pentesting Toolkit/Framework Written in Python 🐍

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

Certificate Authority management suite

A simple Terraform module to generate self-signed TLS certificates for private use

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞利用功能

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

Responsive Command and Control System

Automation for internal Windows Penetrationtest / AD-Security

Wi-Fi tools keep getting more and more accessible to beginners, and the Ehtools Framework is a framework of serious penetration tools that can be explored easily from within it. This powerful and simple tool can be used for everything from installing new add-ons to grabbing a WPA handshake in a matter of seconds. Plus, it's easy to install, set up, and utilize.

Bifrost C2. Open-source post-exploitation using Discord API

SMTP and IMAP checker / cracker for mailpass combolists with a user-friendly GUI, automated inbox test and many more features.

List of Security Archives Tools and software, generally for facilitate security & penetration research. Opening it up to everyone will facilitate a knowledge transfer. Hopefully the initial set will grow and expand.

FuckDPIv2 can fuck the Korean Government's internet censorship by fragmenting SSL ClientHello.

A Cloudflare resolver that works

Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer

small python3 tool to check common vulnerabilities in SMTP servers

Security program for recovering passwords and pen-testing servers, routers and IoT devices using brute-force password attacks.

Mock HTTP calls without coding. Designed specially for testing and testers.

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

CertCenter API Go Implementation

Up-to-date certificate store for Elixir.

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

wifi attacks suite

DNS over HTTPS client for use in the browser

渗透测试☞经验/思路/总结/想法/笔记