739 Open source projects that are alternatives of or similar to Pocsuite3

protocol fuzzing toolkit

Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

my oscp prep collection

Penetration Testing and Hacking CTF's Swiss Army Knife with: Reverse Shell Handling - Encoding/Decoding - Encryption/Decryption - Cracking Hashes / Hashing

Simplifying Seccomp enforcement in containerized or non-containerized apps

Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Ransom0 is a open source ransomware made with Python, designed to find and encrypt user data.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

A binary analysis framework

Go-deliver is a payload delivery tool coded in Go.

A Subdomain Enumeration and Validation tool for Bug Bounty and Pentesters.

Common password pattern generator using strings list

small python3 tool to check common vulnerabilities in SMTP servers

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

📡 A python program to create a fake AP and sniff data.

Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.

Study Notes For Web Hacking / Web安全学习笔记

Red Teaming Tactics and Techniques

A note-taking macOS app for penetration-testers.

DNS-Discovery is a multithreaded subdomain bruteforcer.

OSSSM (awesome). Open source short-term secure messaging

A container repository for my public web hacks!

Awesome hacking is an awesome collection of hacking tools.

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io) and LOLBAS (https://github.com/LOLBAS-Project/LOLBAS)

An application to assist in the organization and prioritization of software security activities.

A PowerShell armoury for penetration testers or other random security guys

Webshell Manager

Human and machine readable web vulnerability testing format

Awesome Golang Security resources 🕶🔐

Adversary Simulation Framework

A simple dns resolver of dns-record and web-record log server for pentesting

Faster and more efficient stateless SYN scanner and banner grabber due to userland TCP/IP stack usage.

Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.

Telling tales on you for leaking secrets!

VOIP Security Audit Framework

Adds a customizable "Send to..."-context-menu to your BurpSuite.

🔐 Open Source Python Keylogger Collection

A Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface

A tool to hunt for publicly accessible DigitalOcean Spaces

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

A security monitoring solution for Kubernetes

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Fast Modular Web Interfaces Bruteforcer

A step-by-step walkthrough of CloudGoat 2.0 scenarios.

jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.

The ultimate WinRM shell for hacking/pentesting

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

Exporter is a Burp Suite extension to copy a request to the clipboard as multiple programming languages functions.

Linux enumeration tool for pentesting and CTFs with verbosity levels

A curated list of various bug bounty tools

Script to automate PUT HTTP method exploitation to get shell

snopf USB password token

DeepSea Phishing Gear