1155 Open source projects that are alternatives of or similar to Wahh_extras

Collection of quality safety articles. Awesome articles.

Free advanced and modern Windows botnet with a nice and secure PHP panel.

hacker, ready for more of our story ! 🚀

A list of payload and bypass lists for penetration testing and red team infrastructure build.

Quickly analyze and reverse engineer Android packages

A curated list of awesome privilege escalation

Container with all the list of useful tools/commands while hacking and pentesting Kubernetes Clusters

Enine boyuna siber güvenlik

Offensive tools as Dockerfiles. Lightweight & Ready to go

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Wordpress 🔥 Joomla 🔥 Drupal 🔥 OsCommerce 🔥 Prestashop 🔥 Opencart 🔥

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

Pop shells like a master.

cve-2019-0604 SharePoint RCE exploit

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.

Fast Modular Web Interfaces Bruteforcer

The ultimate WinRM shell for hacking/pentesting

scan for NTLM directories

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

Dorks for shodan.io. Some basic shodan dorks collected from publicly available data.

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

Vagrant VirtualBox environment for conducting an internal network penetration test

Git All the Payloads! A collection of web attack payloads.

Phonia Toolkit is one of the most advanced toolkits to scan phone numbers using only free resources. The goal is to first gather standard information such as country, area, carrier and line type on any international phone numbers with a very good accuracy.

Hacker101 CTF Writeup

Quack Toolkit is a set of tools to provide denial of service attacks. Quack Toolkit includes SMS attack tool, HTTP attack tool and many other attack tools.

平常看到好的渗透hacking工具和多领域效率工具的集合

Black Worm Offical Repo

Burp Bounty profiles compilation, feel free to contribute!

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built into the Techinical Specific Document, or will be checked in the Security testing phases.

Set of tools to audit SIP based VoIP Systems

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

Entropy Toolkit is a set of tools to provide Netwave and GoAhead IP webcams attacks. Entropy Toolkit is a powerful toolkit for webcams penetration testing.

Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer

200 TOOLS BY 0XID4FF0X FOR TERMUX

M3m0 Tool ⚔️ Website Vulnerability Scanner & Auto Exploiter

🔺 Red Team Hardware Toolkit 🔺

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised. Portia performs privilege escalation as well as lateral movement automatically in the network

📕 Both personal and public notes for EC-Council's CEHv10 312-50, because its thousands of pages/slides of boredom, and a braindump to many

Information about my experiences on ethical hacking 💀

Project transferred to: https://github.com/taielab/awesome-hacking-lists

安全编排与自动化响应平台

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

Mouse Framework is an iOS and macOS post-exploitation framework that gives you a command line session with extra functionality between you and a target machine using only a simple Mouse payload. Mouse gives you the power and convenience of uploading and downloading files, tab completion, taking pictures, location tracking, shell command execution, escalating privileges, password retrieval, and much more.

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

安全、可靠、简单、免费的企业级蜜罐

The linux choice collection tools

The all-in-one Red Team extension for Web Pentester 🛠

Next generation web scanner

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

Framework for building Windows malware, written in C++

渗透测试☞经验/思路/总结/想法/笔记

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

pentest framework

TechNowLogger is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info

my oscp prep collection

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p