729 Open source projects that are alternatives of or similar to Subscraper

The Web Application Hacker's Handbook - Extra Content

Wireshark Cheat Sheet

A curated list of awesome privilege escalation

Custom security distro for remote penetration testing

OSINT Swiss Army Knife

Domain availbility checker

用于记录内网渗透(域渗透)学习 :-)

Phishing Tool & Information Collector

红蓝对抗跨平台远控工具

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life

⌨️ Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases

[unmaintained] Post-exploitation tool

Search Google and download specific file types

A Phishing Dropper designed to Pentest.

Multiplatform payload dropper

a fast domain brute tool

GUI based offensive penetration testing tool (Open Source)

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

A simple, extensible C&C beaconing system.

A collection of useful Python hacking scripts for beginners

Statically-linked ssh server with reverse shell functionality for CTFs and such

Intelligence and Reconnaissance Package/Bundle installer.

Tool for catching and logging different types of requests.

A collection of personal scripts used in hacking excercises.

Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations

🥀 Search Engine Tookit，URL采集、Favicon哈希值查找真实IP、子域名查找

Suggests programs to run against services found during the enumeration phase of a Pentest

DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.

TechNowLogger is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

Selenium powered Python script to automate searching for vulnerable web apps.

Goca Scanner

Free advanced and modern Windows botnet with a nice and secure PHP panel.

PENIOT: Penetration Testing Tool for IoT

an easy pentesting tool.

A list of payload and bypass lists for penetration testing and red team infrastructure build.

A minimalist command line knowledge base manager

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

红/蓝队环境自动化部署工具

my oscp prep collection

📱 🐟 An app to remote control SocialFish.

Hakku Framework penetration testing

Passwords Recovery Tool

Pentest tool for antivirus evasion and running arbitrary payload on target Wintel host

Common password pattern generator using strings list

A very loud but fast recon scan and pentest template creator for use in CTF's/OSCP/Hackthebox...

Generates malicious LNK file payloads for data exfiltration

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

A ZigBee hacking toolkit by Bishop Fox

A collection of public offensive and defensive security related scripts for InfoSec students.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Offensive tools as Dockerfiles. Lightweight & Ready to go

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

Unsorted, raw, ugly & probably poorly usable tools for reversing, exploit and pentest

A collection of Ansible roles for automating infosec builds.

A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing installation. Provides access to a web based interface using WiFi in AP or Client mode. Will work with nearly all devices that contain a standard 5V Wiegand interface. Primary target group is 26-37bit HID Cards. Similar to the Tastic RFID Thief, Blekey, and ESPKey.

Bash script purposed for system enumeration, vulnerability identification and privilege escalation.

parse nmap files

Password-protected writeups of HTB platform (challenges and boxes) https://cesena.github.io/

NoneAge Blockchain Security Tutorial