467 Open source projects that are alternatives of or similar to Http Asynchronous Reverse Shell

🏴‍☠️ Information Gathering tool 🏴‍☠️ DNS / Subdomains / Ports / Directories enumeration

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

Micro-framework for rapid development of reusable security tools

Quiver is the tool to manage all of your tools for bug bounty hunting and penetration testing.

Web Pentesting Fuzz 字典,一个就够了。

My OSCP journey

This repository contains full code examples from the book Gray Hat C#

Human and machine readable web vulnerability testing format

🙃 Reverse Shell Cheat Sheet 🙃

Simple Server Side Request Forgery services enumeration tool.

THE ESP8266 HONEYPOT

An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.

Local file inclusion exploitation tool

Privilege Escalation Enumeration Script for Windows

A REST API security testing framework.

Adds a customizable "Send to..."-context-menu to your BurpSuite.

Next generation web scanner

BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

DNS Sub-domain brute forcer, in Python + gevent

IP Tools To quickly get information about IP Address's, Web Pages and DNS records.

Linux enumeration tool for pentesting and CTFs with verbosity levels

Linux privilege escalation checks (systemd, dbus, socket fun, etc)

Find web directories without bruteforce

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all.

无状态子域名爆破工具

Port scanning and domain utility.

Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

A repo with information about security of Ethereum Smart Contracts

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

Capstone: Keylogger Trojan

👶 BabySploit Beginner Pentesting Toolkit/Framework Written in Python 🐍

Functions that can be used to gain Reverse Shells with PowerShell

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

A fully automatic wifi deauther coded in Python

online port scan scraper

Create a VPS on Google Cloud Platform or Digital Ocean easily with Offensive Docker included to launch assessment to the targets.

C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.

Just another script for automatize boolean-based blind SQL injections. (Demo)

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

Quick utility to craft executables for pentesting and managing reverse shells

This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions

🦄🔒 Awesome list of secrets in environment variables 🖥️

Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities

🚀 Fast Port Scanner 🚀

Handbook of information collection for penetration testing and src

Responsive Command and Control System

Dradis Framework: Colllaboration and reporting for IT Security teams

Hershell is a simple TCP reverse shell written in Go.

CVE-2016-8610 (SSL Death Alert) PoC

fully automated pentesting tool

Wordlist for content(directory) bruteforce discovering with Burp or dirsearch

🔐 Docker Container for Penetration Testing & Security