1146 Open source projects that are alternatives of or similar to Vailyn

Next generation web scanner

An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

👻Stowaway -- Multi-hop Proxy Tool for pentesters

The Offensive Manual Web Application Penetration Testing Framework.

OWASP Joomla Vulnerability Scanner Project

The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security.

🐞 Primitive Erlang Security Tool

📚 VoidHack CTF write-ups

MSDAT: Microsoft SQL Database Attacking Tool

USB Rubber Ducky type scripts written for the DigiSpark.

A Python implementation that facilitates finding timeless timing attack vulnerabilities.

GitBook: OSCP RoadMap

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

Detect hidden files and text in images

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Easy automated vulnerability scanning, reporting and analysis

Security Tool to Look For Interesting Files in S3 Buckets

Attify OS - Distro for pentesting IoT devices

Abusing Impersonation Privileges on Windows 10 and Server 2019

An extensible application for penetration testers and software developers to decode/encode data into various formats.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

A Powerful Subdomain Takeover Tool

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

Empire HTTP(S) C2 redirector setup script

DotDotPwn - The Directory Traversal Fuzzer

mosquito - Automating reconnaissance and brute force attacks

Robber is open source tool for finding executables prone to DLL hijacking

BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.

Fast CORS misconfiguration vulnerabilities scanner🍻

A portable console aimed at making pentesting with PowerShell a little easier.

Burp被动扫描流量转发插件

The best Hacking and PenTesting tools installer on the world

Infection Monkey - An automated pentest tool

Modern tactical exploitation toolkit.

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

A Python3 based single-file subdomain enumerator

A documentation about how to hack Minecraft servers

CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.

An IDA Pro plugin to examine the glibc heap, focused on exploit development

A simple keylogger for Windows, Linux and Mac

🔨 A modern multiple reverse shell sessions manager wrote in go

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. If you have any doubt, ping me at https://twitter.com/IndiShell1046 :)

Automate Pentest Tool

Hack the World using Termux

DNS Sub-domain brute forcer, in Python + gevent

Advanced Web Shell

Automatic SSRF fuzzer and exploitation tool

Tools for Bug Hunting

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Scripts to automate some part of Security/Vulnerability Assessment

Exploit code for CVE-2016-9066

A distributed nmap / masscan scanning framework complete with an API client for automation workflows

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

A tool for scanning registery key permissions. Find where non-admins can create symbolic links.

C2/post-exploitation framework

Subdomain Takeover tool written in Go