695 Open source projects that are alternatives of or similar to Tactical Exploitation

A repository of tools for pentesting of restricted and isolated environments.

👀 🖥️ Golang rewrite of eyes.sh. Let's you perform domain/IP address information gathering. Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?" 🔍 🕵️

🏴‍☠️ Information Gathering tool 🏴‍☠️ DNS / Subdomains / Ports / Directories enumeration

Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"

hydra

Pentest: Subdomains enumeration tool for penetration testers.

Hack the World using Termux

Directory Services Internals (DSInternals) PowerShell Module and Framework

WordPress pentest tool

Turn PuTTY into an SSH login bruteforcing tool.

Steganography brute-force utility to uncover hidden data inside files

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

Fully automated offensive security framework for reconnaissance and vulnerability scanning

DevBrute is a Password Brute Forcer, It can Brute Force almost all Social Media Accounts or Any Web Application.

Pentesting suite for Maltego based on data in a Metasploit database

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

Web path scanner

Automated Penetration Testing Framework

network reconnaissance toolkit

ANDRAX The first and unique Penetration Testing platform for Android smartphones

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

Penetration tests on SSH servers using brute force or dictionary attacks. Written in Python.

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

Tool Information Gathering Write By Python.

(l)user hunter using WinAPI calls only

📌 Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Hacking tools pack & backdoors generator.

A cross-platform python based utility for information gathering and penetration testing automation!

A collection of personal scripts used in hacking excercises.

The LAZY script will make your life easier, and of course faster.

Provides various Windows Server Active Directory (AD) security-focused reports.

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

brute force SSH public-key authentication

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

All in One Hacking Tool for Linux & Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

E-mails, subdomains and names Harvester - OSINT

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

Attack Surface Management Platform | Sn1perSecurity LLC

NetCat for Windows

metasploit-framework 图形界面 / 图形化内网渗透工具

Useful tools and scripts during Penetration Testing engagements

Penetration Testing notes, resources and scripts

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

In-depth Attack Surface Mapping and Asset Discovery

Information gathering tool - OSINT

Bloodhound for Blue and Purple Teams

JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)

The best way to scan for weak ssh passwords on your network

telegram group scraper tool. fetch all information about group members

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

Open Source Information Facebook

Dradis Framework: Colllaboration and reporting for IT Security teams

HostHunter a recon tool for discovering hostnames using OSINT techniques.