638 Open source projects that are alternatives of or similar to Pompem

A cross-platform note-taking & target-tracking app for penetration testers.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

Open Source Tripwire®

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

A web front-end for password cracking and analytics

DeimosC2 is a Golang command and control framework for post-exploitation.

InQL - A Burp Extension for GraphQL Security Testing

Drone pentesting framework console

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

Attack surface mapping

🆕 The Multi-Tool Web Vulnerability Scanner.

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

kernel privilege escalation enumeration and exploitation framework

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

JAVA安全SDK及编码规范

A curated list of awesome test automation frameworks, tools, libraries, and software for different programming languages. Sponsored by http://sdclabs.com

Penetrum LLC opensource security tool list.

Security scanner coordinator

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

Simple script that checks a domain for email protections

Abusing Impersonation Privileges on Windows 10 and Server 2019

Read local Chrome cookies without root or decrypting

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

Golang security checker

📚Translate the distinct technical blogs. Please star or watch. Welcome to join me.

Enumeration sub domains(枚举子域名)

Public append-only ledger microservice built with Slim Framework

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/

r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems

Wi-Fi tools keep getting more and more accessible to beginners, and the Ehtools Framework is a framework of serious penetration tools that can be explored easily from within it. This powerful and simple tool can be used for everything from installing new add-ons to grabbing a WPA handshake in a matter of seconds. Plus, it's easy to install, set up, and utilize.

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

Convolutional neural network for analyzing pentest screenshots

Infection Monkey - An automated pentest tool

🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

kube-scan: Octarine k8s cluster risk assessment tool

EternalRocks worm

Most usable tools for iOS penetration testing

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

Enumerate and disable common sources of telemetry used by AV/EDR.

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

An Active Defense and EDR software to empower Blue Teams

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

🔒 Anti DDOS | Bash Script Project 🔒

Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.

Performing security tests inside your CI

a javascript static security analysis tool

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Web path scanner

Automate Pentest Tool

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能