1114 Open source projects that are alternatives of or similar to Red Teaming Toolkit

my oscp prep collection

Monitoring GitHub for sensitive data shared publicly

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡

🦄🔒 Awesome list of secrets in environment variables 🖥️

Quickly analyze and reverse engineer Android packages

A permutation generation tool written in golang

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

Set of tools to audit SIP based VoIP Systems

Study Notes For Web Hacking / Web安全学习笔记

The ultimate WinRM shell for hacking/pentesting

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

🦁 Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and search for config or backup files.

Linux Rootkits (4.x Kernel)

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.

Just Another Linux Enumeration Script: A Bash script for locally enumerating a compromised Linux box

A high performance offensive security tool for reconnaissance and vulnerability scanning

Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with a kidnap. Umbrella has best practice guides in over 40 topics in multiple languages. Used daily by people working in high risk countries - journalists, activists, diplomats, business travelers etc.

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

Offensive tools as Dockerfiles. Lightweight & Ready to go

A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing

Dradis Framework: Colllaboration and reporting for IT Security teams

一款信息泄漏利用工具，适用于.git/.svn源代码泄漏和.DS_Store泄漏

Linux privilege escalation checks (systemd, dbus, socket fun, etc)

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

Fast Modular Web Interfaces Bruteforcer

🤖 The Modern Port Scanner 🤖

Capture-the-Flag (CTF) environment setup tools for OWASP Juice Shop

Rubyfu, where Ruby goes evil!

A simple remote tool in C#.

This repo will contain some basic pentest/RT commands.

Fast web fuzzer written in Go

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Python 3.5+ DNS asynchronous brute force utility

Simple Keylogger with smtp to send emails on your account using python works on linux and Windows

Dorothy is a tool to test security monitoring and detection for Okta environments

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Automated Adversary Emulation Platform

locate and attack Lync/Skype for Business

Selenium powered Python script to automate searching for vulnerable web apps.

Port scanning and domain utility.

IP Tools To quickly get information about IP Address's, Web Pages and DNS records.

Ronin is a Ruby platform for vulnerability research and exploit development. Ronin allows for the rapid development and distribution of code, Exploits or Payloads, Scanners, etc, via Repositories.

A bash script for recon and DOS attacks

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

🎯 XML External Entity (XXE) Injection Payload List

Hetty is an HTTP toolkit for security research.

Next generation web scanner

A collected list of awesome security talks

A front-end JavaScript toolkit for creating DNS rebinding attacks.

Extract subdomains from SSL certificates in HTTPS sites.

This is a multi-use bash script for Linux systems to audit wireless networks.

OSINT

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

👻 A LAN dropbox chatbot controllable via Telegram

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

swiss army knife for hackers