1131 Open source projects that are alternatives of or similar to Phonesploit

A python based tool for exploiting and managing Android devices via ADB

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.

NSA Hacking Tool Recreation UnitedRake

Mouse Framework is an iOS and macOS post-exploitation framework that gives you a command line session with extra functionality between you and a target machine using only a simple Mouse payload. Mouse gives you the power and convenience of uploading and downloading files, tab completion, taking pictures, location tracking, shell command execution, escalating privileges, password retrieval, and much more.

Notes about attacking Jenkins servers

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

pentest framework

M3m0 Tool ⚔️ Website Vulnerability Scanner & Auto Exploiter

A collection of hacking / penetration testing resources to make you better!

An Advanced Tool For Complete Apk-Modding In Termux ...

Your journey to master Android™ Shell begins here

A collection of android Exploits and Hacks

The Lost Nintendo DS Television Output, brought back to life

Extract endpoints from APK files

Ladon Network Penetration Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

JSshell - JavaScript reverse/remote shell

Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

🛠 Tools and scripts to manipulate Android APKs

Cross platform Sideloader for Quest standalone headset

A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side

Quickly analyze and reverse engineer Android packages

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

😈 Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!

Really quickly build APKs on handheld device (smartphone or tablet) in Amazon, Android, Chromebook and Windows📲 See https://buildapks.github.io/docsBuildAPKs/setup to start building APKs.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

A tool for remote ADB exploitation in Python3 for all Machines.

Asynchronous Python implementation of SlowLoris DoS attack

Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".

cve-2019-0604 SharePoint RCE exploit

A social experiment

my oscp prep collection

Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]

200 TOOLS BY 0XID4FF0X FOR TERMUX

Entropy Toolkit is a set of tools to provide Netwave and GoAhead IP webcams attacks. Entropy Toolkit is a powerful toolkit for webcams penetration testing.

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

A tool that enables advanced features through adb installing and uninstalling apps like wildcards and multi device support. Useful if you want to clean your test device from all company apks or install a lot of apks in one go. Written in Java so it should run on your platform.

Wordpress 🔥 Joomla 🔥 Drupal 🔥 OsCommerce 🔥 Prestashop 🔥 Opencart 🔥

CTF竞赛权威指南

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

hack tools

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

jSQL Injection is a Java application for automatic SQL database injection.

A list of resources for those interested in getting started in bug bounties

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

手机乐园第三方Android客户端，采用单Activity多Fragment架构，支持全局滑动返回，实现手机乐园各种基本功能，支持登录、浏览、下载、发布动态、夜间模式等功能

Scripts I use during pentest engagements.

记录自己编写、修改的部分工具

因为ehviewer近一年多没更新了，所以想copy过来试着更新下

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Tools, tips, tricks, and more for exploring ICS Security.

一步到位反编译apk工具(onekey decompile apk)

Rise of the Triad source port to SDL2, Android and WinRT