943 Open source projects that are alternatives of or similar to Jsshell

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

pentest framework

😈 Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!

Tool for automating customized attacks against web applications. Fully made in C language with pthreads, it has fast performance.

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

The Lost Nintendo DS Television Output, brought back to life

XSS HTTP Inject0r is a proof of concept tool that shows how XSS (Cross Site Scripting) flags can be exploited easily. It is written in HTML + Javascript + PHP and released under GPLv3.

Audit tool to find common vulnerabilities in PHP source code

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

NSA Hacking Tool Recreation UnitedRake

Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

Extraction of iMessage Data via XSS

Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".

A python based tool for exploiting and managing Android devices via ADB

An interactive multi-user web JS shell

hack tools

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Source code for Hacker101.com - a free online web and mobile security class.

Using open Adb ports we can exploit a Andriod Device

Asynchronous Python implementation of SlowLoris DoS attack

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

A container repository for my public web hacks!

my oscp prep collection

Mouse Framework is an iOS and macOS post-exploitation framework that gives you a command line session with extra functionality between you and a target machine using only a simple Mouse payload. Mouse gives you the power and convenience of uploading and downloading files, tab completion, taking pictures, location tracking, shell command execution, escalating privileges, password retrieval, and much more.

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

CTF竞赛权威指南

cve-2019-0604 SharePoint RCE exploit

Wordpress 🔥 Joomla 🔥 Drupal 🔥 OsCommerce 🔥 Prestashop 🔥 Opencart 🔥

Git All the Payloads! A collection of web attack payloads.

Powerful dork searcher and vulnerability scanner for windows platform

Collection of quality safety articles. Awesome articles.

A collection of android Exploits and Hacks

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

Web Application Security Scanner Framework

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Powerfull XSS Scanning and Parameter analysis tool&gem

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Notes about attacking Jenkins servers

Ladon Network Penetration Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

200 TOOLS BY 0XID4FF0X FOR TERMUX

A collection of hacking / penetration testing resources to make you better!

Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.

A list of resources for those interested in getting started in bug bounties

Hacking tools

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

A social experiment

M3m0 Tool ⚔️ Website Vulnerability Scanner & Auto Exploiter

Entropy Toolkit is a set of tools to provide Netwave and GoAhead IP webcams attacks. Entropy Toolkit is a powerful toolkit for webcams penetration testing.

generate and search pattern string for exploit development

Social media & camera hacking & whatsapp virus & SMS bombing

All in One Termux Os..!! (New)

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

Auto IP or Domain Attack Tool ( #1 )