1586 Open source projects that are alternatives of or similar to Vajra

Infoga - Email OSINT

Discover internet-wide misconfigurations while drinking coffee

All In One Pentesting Tool For Recon & Auditing , Phone Number Lookup , Header , SSH Scan , SSL/TLS Scan & Much More.

Unofficial WhatCMS API package

平常看到好的渗透hacking工具和多领域效率工具的集合

A fully automatic wifi deauther coded in Python

Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.

Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too!

DEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3

Collect OSINT from git repositories

An advanced and highly optimized Java library to build frameworks: it's useful for scanning class paths, generating classes at runtime, facilitating the use of reflection, scanning the filesystem, executing stringified source code and much more...

Ruby based reverse IP-lookup tool.

PowerShell SOCKS proxy with reverse proxy capabilities

A collection of useful links for Pentesters

A simple document scanner with OCR implemented using Python and OpenCV

A MongoDB importer and API for Project Sonars DNS datasets

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

GREP FOR OSINT is a set of very simple shell scripts that will help you quickly analyze a text or a folder with files for data useful for investigation (phone numbers, bank card numbers, URLs, emails and nicknames).

a shell script aim to automatically launch 50+ online web scanning tools in the Browsaer against a target domain in a 10 waves

PoC Command and Control Server. Interact with clients through a private web interface, add new users for team sharing and more.

SEC分布式资产扫描系统

CyberScan: Network's Forensics ToolKit

A pentesting tool inspired by mr robot and derived by zphisher

Android application for scanning and managing documents.

Maltego compilation of various assets, local transforms and helpful scripts

Just another script for automatize boolean-based blind SQL injections. (Demo)

Network Security Vulnerability Scanner

Search for Directory Traversal Vulnerabilities

Bluetooth ble beacon beamer and scanner for tracing corona virus infected person similar to Trace Together app

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

Good info about DeepWeb and OSINT

A comprehensive curated list of available Blockchain Bug Bounty Programs.

Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.

A docker container for openvas

个人笔记汇总

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

⛷ A collection of hacker scripts.

Quick utility to craft executables for pentesting and managing reverse shells

CMS auto detect and exploit.

集漏洞验证和任务运行的一个框架

Remote command execution vulnerability scanner for Log4j.

Bifrost C2. Open-source post-exploitation using Discord API

Dumain Bruteforcer - a fast and flexible domain bruteforcer

List of bug bounty and coordinated vulnerability disclosure programs of companies/organisations in Switzerland

一款监控端口变化的系统——beholder_scanner端

🦁 Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and search for config or backup files.

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

implement a full compiler based on c++ 11

Various scanner use cases using Firebase or HMS ML-Kit

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

🌒 Shell command obfuscation to avoid detection systems

💻 Netcat client and server modules written in pure Javascript for Node.js.

Hetty is an HTTP toolkit for security research.

Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).

Tool to generate smart and powerful wordlists

Scrape domain names from SSL certificates of arbitrary hosts

Web Services for Devices (WSD) tools and utilities for cross platform support

The Ultimate OSINT and Threat Hunting Framework

Pre-connection attacks, gaining access & post-connection attacks on WEP, WPA & WPA2. 🛰✔️

Contenido de herramientas OSINT con Docker. Tambien nos podes visitar en el canal de youtube (https://www.youtube.com/user/marcospr74/)