935 Open source projects that are alternatives of or similar to Pakuri

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

NIST Certified SCAP 1.2 toolkit

A collection of electronic hacker magazines carefully curated over the years from multiple sources

A static analysis security vulnerability scanner for Ruby on Rails applications

Infection vector that bypasses AV, IDS, and IPS. (For now...)

🔓Subdomain enumeration and information gathering tool

A collection of personal scripts used in hacking excercises.

Examples of Solidity security issues

Powershell script to setup windows port forwarding using native netsh client

Blind Attacking Framework

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

The Swiss Army knife for automated Web Application Testing

Awesome Node.js Security resources

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

🐶 A curated list of Web Security materials and resources.

👁 (s)AINT is a Spyware Generator for Windows systems written in Java. [Discontinued]

The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security.

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

The Offensive Manual Web Application Penetration Testing Framework.

OSINT Tool: Generate username lists for companies on LinkedIn

Security Tool to Look For Interesting Files in S3 Buckets

👻Stowaway -- Multi-hop Proxy Tool for pentesters

Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.

.git 泄漏利用工具，可还原历史版本

An MSBuildTask that checks for known vulnerabilities. Inspired by OWASP SafeNuGet.

Notes for taking the OSCP in 2097. Read in book form on GitBook

Security Evaluation of Dynamic Binary Instrumentation Engines

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

Chromium OS Universal Chroot Environment

Fast and powerful Swift string scanning made simple

S2E: A platform for multi-path program analysis with selective symbolic execution.

Scalable fuzzing infrastructure.

Discover Your Attack Surface!

This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell

Self contained htaccess shells and attacks

Discover hidden deepweb pages

Tools for Bug Hunting

Work in progress...

A vulnerable version of Rails that follows the OWASP Top 10

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

NetCat for Windows

My solutions to some CTF challenges and a list of interesting resources about pwning stuff

A compat library for Bluetooth Low Energy scanning on Android.

Writeup of CVE-2020-15906

RTAB-Map library and standalone application

Find exploits in local and online databases instantly

Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)

Remote exploitation framework written in Python

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码，帮助红队人员更方便快捷的从Web容器环境切换到C2环境进一步进行工作。

Hide your payload into .jpg file

Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)

A collection of various awesome lists for hackers, pentesters and security researchers

🌐Collate and develop network security, Hackers technical documentation and tools, code.

A list to discover work of red team tooling and methodology for penetration testing and security assessment

If you have any good suggestions or comments during the search process, please feedback some index experience in issues. Thank you for your participation.查阅过程中，如果有什么好的意见或建议，请在Issues反馈，感谢您的参与。

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy . Brutal is a toolkit to quickly create various payload,powershell attack , virus attack and launch listener for a Human Interface Device ( Payload Teensy )

Gorsair hacks its way into remote docker containers that expose their APIs

SSH man-in-the-middle tool