931 Open source projects that are alternatives of or similar to Jackhammer

Hourly updated database of exploit and exploitation reports

A Modular Framework for the Automated Vulnerability Analysis in IP-based Networks

Vulnerability assessment and penetration testing automation and reporting platform for teams.

network reconnaissance toolkit

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

Jxnet is a Java library for capturing and sending custom network packet buffers with no copies. Jxnet wraps a native packet capture library (libpcap/winpcap/npcap) via JNI (Java Native Interface).

Backend logic implementation for Vulnerability Management System

Scout - a Contactless Active Reconnaissance Tool

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Hand-crafted Frida examples

Application and Service Fingerprinting

Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.

Kali Intelligence Suite (KIS) shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by executing standard penetration testing tools. The collected data is internally stored in a structured manner to allow the fast identification and visualisation of the collected information.

Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance

Tools used for Penetration testing / Red Teaming

Tool for breaking into web applications.

Intentionally vulnerable Android application.

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

A curated list of vulnerable web applications.

Distributed filesystem scanner

A static analysis tool for security

🔎 Python framework to automatically discover and enumerate hosts from different back-end systems (Shodan, Censys)

A Binary Ninja plugin for vulnerability research.

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.

Hack the World using Termux

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

OSPd is a framework for vulnerability scanners which share the same communication protocol: OSP (Open Scanner Protocol)

SQL Injection Payload List

NERVE Continuous Vulnerability Scanner

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

Automated Security Testing For REST API's

Droidefense: Advance Android Malware Analysis Framework

🌔 Official Repository for DarkSpiritz Penetration Framework | Written in Python 🐍

Bandit is a tool designed to find common security issues in Python code.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)

Dradis Framework: Colllaboration and reporting for IT Security teams

A GitHub app to automatically review Python code style over Pull Requests

Security scanner coordinator

Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders

An analysis tool for Python that blurs the line between testing and type systems.

A distributed nmap / masscan scanning framework complete with an API client for automation workflows

A RuboCop extension focused on enforcing Rails best practices and coding conventions.

See where each character on the screen came from in code.

Golang security checker

Radare2 and Frida better together.

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

NodeJS Simple Network Scanner

A Collection of Secure Mobile Development Best Practices

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

Infection Monkey - An automated pentest tool

Soufflé is a variant of Datalog for tool designers crafting analyses in Horn clauses. Soufflé synthesizes a native parallel C++ program from a logic specification.

Secure Content Management for the Modern Web - "The sky is only the beginning"

🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)