1170 Open source projects that are alternatives of or similar to Hacking Security Ebooks

Ruby on Rails Phishing Framework

Scripts I use during pentest engagements.

📌 Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

An HTTP/HTTPS intercept proxy written in Go.

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs enabling attackers to read data they shouldn't be able to. This tool is originally based on Microsoft: https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

🔪 Leak git repositories from misconfigured websites

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.

Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]

A collection of various awesome lists for hackers, pentesters and security researchers

Content for hackingthe.cloud

A collection of personal scripts used in hacking excercises.

Hacking Toolkit

Don't let buffer overflows overflow your mind

Study Notes For Web Hacking / Web安全学习笔记

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised. Portia performs privilege escalation as well as lateral movement automatically in the network

Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer

Awesome Vulnerable Applications

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.

ANDRAX The first and unique Penetration Testing platform for Android smartphones

A collection of hacking / penetration testing resources to make you better!

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Rubyfu, where Ruby goes evil!

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

《Python3 标准库》电子书和配套代码 "The Python Standard Library by Example" ebook and source code 一本又厚又全的讲解Python3标准库的书籍（1000多页）适合当作字典参考或者闲暇时慢慢阅读。

《数据结构（Python语言描述）》"Fundamentals of Python:Data Structures" 电子书和配套代码

A collections of FREE ebooks

Comic Book Reader in the Browser

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

🆕 The Multi-Tool Web Vulnerability Scanner.

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.

💣 Impulse Denial-of-service ToolKit

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

onex is a hacking tool installer and package manager for hackers. Onex is a library of all hacking tools for Termux and other Linux distributions. onex can install any third party tool or any hacking tool for you.

Information Security Library

Kali Intelligence Suite (KIS) shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by executing standard penetration testing tools. The collected data is internally stored in a structured manner to allow the fast identification and visualisation of the collected information.

Opening the door, one reverse shell at a time

All in One Termux Os..!! (New)

Entropy Toolkit is a set of tools to provide Netwave and GoAhead IP webcams attacks. Entropy Toolkit is a powerful toolkit for webcams penetration testing.

Mouse Framework is an iOS and macOS post-exploitation framework that gives you a command line session with extra functionality between you and a target machine using only a simple Mouse payload. Mouse gives you the power and convenience of uploading and downloading files, tab completion, taking pictures, location tracking, shell command execution, escalating privileges, password retrieval, and much more.

Advanced and easy to use penetration testing framework 💣🔎

Tool-X is a kali linux hacking Tool installer. Tool-X developed for termux and other Linux based systems. using Tool-X you can install almost 370+ hacking tools in termux app and other linux based distributions.

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

Educação é um direito de todos

⚓ 我的游戏程序员生涯的读书笔记合辑。你可以把它看作一个加强版的Blog。涉及图形学、实时渲染、编程实践、GPU编程、设计模式、软件工程等内容。Keep Reading , Keep Writing , Keep Coding.

A Docker container for remote penetration testing.

Captive wifi hotspot bypass tool for Linux

pdf,txt,djvu, various useful books

📚 Overview 🔒 Tooling 🔒 Process 🔒 Physical 🔒 People 📚

An audiobook 🎧 📔 app made using Flutter

The LAZY script will make your life easier, and of course faster.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

Web Penetration Testing with Kali Linux - Third Edition, published by Packt

Notes from OSCP, CTF, security adventures, etc...

Kali Live Build Scripts