An open API service indexing awesome lists of open source software.

https://github.com/rainyroot/pentesting

Collection of Python pentesting scripts and HTB machine writeups. Port scanning, banner grabbing, directory brute-forcing, subdomain enumeration, FTP brute-forcing, PCAP analysis and more.
https://github.com/rainyroot/pentesting

banner-grabber brute-force ctf directory-bruteforce ethical-hacking ftp hackthebox htb infosec learning network-security open-source pcap pentesting port-scanner python scripts security subdomain-enumeration writeup

Last synced: 29 days ago
JSON representation

Collection of Python pentesting scripts and HTB machine writeups. Port scanning, banner grabbing, directory brute-forcing, subdomain enumeration, FTP brute-forcing, PCAP analysis and more.

Awesome Lists containing this project

README

          

# PenTesting

A collection of Python pentesting scripts and HackTheBox machine writeups built during my security learning journey.

---

## Scripts

### Learning Projects

| Script | Description |
|---|---|
| `banner_grabber.py` | Connects to a host/port and grabs the service banner |
| `dir_brute_forcer.py` | Directory and file brute-forcer for web targets |
| `port_scanner.py` | TCP port scanner with service detection |
| `pw_brute_forcer_ftp.py` | FTP login brute-forcer with wordlist support |
| `subdomain_enumerator.py` | Subdomain enumeration via DNS resolution |

### Network Analysis

| Script | Description |
|---|---|
| `pcap_url_extracting.py` | Extracts HTTP URLs from `.pcap` capture files |
| `scan.py` | Network scan helper |

---

## HTB Writeups

Step-by-step walkthroughs for retired HackTheBox machines.

| Machine | File |
|---|---|
| Cap | `Writeups/cap.txt` |
| Devel | `Writeups/devel.txt` |
| Dog | `Writeups/dog.txt` |
| Jerry | `Writeups/jerry.txt` |
| Sau | `Writeups/sau.txt` |
| Titanic | `Writeups/titanic.txt` |
| Underpass | `Writeups/underpass.txt` |

---

## Disclaimer

All scripts and writeups are for educational purposes only. Only use against systems you own or have explicit written permission to test.