369 Open source projects that are alternatives of or similar to Powerhub

[unmaintained] Post-exploitation tool

📌 Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

C2/post-exploitation framework

Sifter aims to be a fully loaded Op Centre for Pentesters

Bifrost C2. Open-source post-exploitation using Discord API

Extract subdomains from SSL certificates in HTTPS sites.

Open Redirect Payloads

cobaltstrike ms17-010 module and some other

Hacker101 CTF Writeup

A fully featured Windows backdoor that uses Gmail as a C&C server

Pentest Lab on OpenStack with Heat, Chef provisioning and Docker

An automated approach to performing recon for bug bounty hunting and penetration testing.

Network Pivoting Toolkit

红蓝对抗跨平台远控工具

A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

📱 objection - runtime mobile exploration

Next generation web scanner

Pentest Report Generator

Goca Scanner

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

Free advanced and modern Windows botnet with a nice and secure PHP panel.

Subdomain enumeration through various techniques

SS7 MAP (pen-)testing toolkit. DISCONTINUED REPO, please use: https://github.com/0xc0decafe/ss7MAPer/

Orc is a post-exploitation framework for Linux written in Bash

Selenium powered Python script to automate searching for vulnerable web apps.

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

A Golang implant that uses Slack as a command and control server

A tool to automate penetration tests

Tool for port forwarding & intranet proxy

A fast DOM based XSS vulnerability scanner with simplicity.

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

linux post-exploitation framework made by linux user

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

🔨 Manage your website via terminal

Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!

OSINT Swiss Army Knife

A (partial) Python rewriting of PowerSploit's PowerView

swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.

Jam all wifi clients/routers.

A framework for Backdoor development!

A tool to dump the login password from the current linux user

a fast domain brute tool

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

linux-kernel-exploits Linux平台提权漏洞集合

SIP-Based Audit and Attack Tool

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

Overlord - Red Teaming Infrastructure Automation

ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

Pentest/BugBounty progress control with scanning modules

😹 Tomcter is a python tool developed to bruteforce Apache Tomcat manager login with Apache Tomcat default credentials.

Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.

用于记录内网渗透(域渗透)学习 :-)

A collection of useful Python hacking scripts for beginners

This repository contains writeups for various CTFs I've participated in (Including Hack The Box).

Search for Unix binaries that can be exploited to bypass system security restrictions.

Applied offensive security with Rust - Early access - https://academy.kerkour.com/black-hat-rust?coupon=GITHUB

The Web Application Hacker's Handbook - Extra Content