Projects in Awesome Lists tagged with penetration-testing-tools

https://github.com/urbanadventurer/whatweb

Next generation web scanner

application-security appsec hacking hacking-tools kali-linux network-security owasp penetration-test penetration-testing penetration-testing-tools pentest pentesting pentesting-tools recon ruby scanner security security-tools web web-hacking

Last synced: 26 Sep 2024

https://github.com/urbanadventurer/WhatWeb

Next generation web scanner

application-security appsec hacking hacking-tools kali-linux network-security owasp penetration-test penetration-testing penetration-testing-tools pentest pentesting pentesting-tools recon ruby scanner security security-tools web web-hacking

Last synced: 30 Jul 2024

https://github.com/drk1wi/Modlishka

Modlishka. Reverse Proxy.

mitm penetration-testing-tools phishing reverse-proxy security-tools

Last synced: 01 Aug 2024

https://github.com/cdk-team/CDK

📦 Make security testing of K8s, Docker, and Containerd easier.

blackhat cloud-native cloud-native-security container container-escape container-security docker exploits hacktools hitb k8s k8s-penetration-toolkit kernel-exploitation kubernetes kubernetes-security linux penetration penetration-testing-tools privilege-escalation vulnerabilities

Last synced: 01 Aug 2024

https://github.com/Xyntax/CDK

📦 Make security testing of K8s, Docker, and Containerd easier.

blackhat cloud-native cloud-native-security container container-escape container-security docker exploits hacktools hitb k8s k8s-penetration-toolkit kernel-exploitation kubernetes kubernetes-security linux penetration penetration-testing-tools privilege-escalation vulnerabilities

Last synced: 04 Aug 2024

https://github.com/cdk-team/cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

blackhat cloud-native cloud-native-security container container-escape container-security docker exploits hacktools hitb k8s k8s-penetration-toolkit kernel-exploitation kubernetes kubernetes-security linux penetration penetration-testing-tools privilege-escalation vulnerabilities

Last synced: 27 Sep 2024

https://github.com/t3l3machus/Villain

Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

c2 cybersecurity hacking hacking-tool offensive-security open-source penetration-testing penetration-testing-tools pentest pentesting readteaming redteam redteam-tools

Last synced: 01 Aug 2024

https://github.com/kelvinben/appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

android apk apk-dex hacking hacking-tool ipa network-security penetration-test penetration-testing-tools python3 scanner security security-tools tools web-hacking

Last synced: 30 Sep 2024

https://github.com/kelvinBen/AppInfoScanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

android apk apk-dex hacking hacking-tool ipa network-security penetration-test penetration-testing-tools python3 scanner security security-tools tools web-hacking

Last synced: 04 Aug 2024

https://github.com/bishopfox/cloudfox

Automating situational awareness for cloud penetration tests.

aws cloud cloud-security golang penetration-testing-tools security

Last synced: 30 Sep 2024

https://github.com/BishopFox/CloudFox

Automating situational awareness for cloud penetration tests.

aws cloud cloud-security golang penetration-testing-tools security

Last synced: 03 Aug 2024

https://github.com/BishopFox/cloudfox

Automating situational awareness for cloud penetration tests.

aws cloud cloud-security golang penetration-testing-tools security

Last synced: 01 Aug 2024

https://github.com/cyberark/kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

agent c2 command-and-control containers golang http2 kubernetes penetration-testing-framework penetration-testing-tools post-exploitation red-teams redteam-tools security security-tools

Last synced: 26 Sep 2024

https://github.com/rhaidiz/broxy

An HTTP/HTTPS intercept proxy written in Go.

broxy go golang hacking http-interceptor http-proxy http-security interceptor penetration-testing penetration-testing-tools proxy qt-wrapper qt5-gui security wapt websecurity

Last synced: 01 Aug 2024

https://github.com/Fahrj/reverse-ssh

Statically-linked ssh server with reverse shell functionality for CTFs and such

backdoor conpty golang hacking penetration-testing penetration-testing-tools remote-admin-tool remote-shell reverse-shell security security-tools ssh terminal

Last synced: 01 Aug 2024

https://github.com/esc4icescesc/skanuvaty

Dangerously fast DNS/network/port scanner

cybersecurity dns dns-client hacking-tools osint-tool penetration-testing penetration-testing-tools pentest pentesting redteam redteam-tools rust rust-lang scanner security security-tools subdomain-enumeration subdomain-scanner

Last synced: 28 Sep 2024

https://github.com/Esc4iCEscEsc/skanuvaty

Dangerously fast DNS/network/port scanner

cybersecurity dns dns-client hacking-tools osint-tool penetration-testing penetration-testing-tools pentest pentesting redteam redteam-tools rust rust-lang scanner security security-tools subdomain-enumeration subdomain-scanner

Last synced: 01 Aug 2024

https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

bugbounty hacking hacking-tool penetration-testing penetration-testing-tools pentesting scanner security security-audit security-scanner security-tools vulnerability-scanners web-cache

Last synced: 01 Aug 2024

https://github.com/sinfulz/JustTryHarder

JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)

hacktoberfest hacktoberfest-accepted oscp penetration penetration-test penetration-test-framework penetration-testing penetration-testing-tools penetration-tests pentest pentest-environment pentest-scripts pentest-tool pentest-tools pentesters pentesting pentesting-networks pentesting-tools pentesting-windows testing

Last synced: 04 Aug 2024

https://github.com/r0x4r/garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

assetfinder bash-script bugbounty bugbounty-tool bugbountytips garud gf-patterns golang penetration-testing penetration-testing-tools reconnaissance subdomain-takeover vulnerability vulnerability-scanner

Last synced: 01 Oct 2024

https://github.com/R0X4R/Garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

assetfinder bash-script bugbounty bugbounty-tool bugbountytips garud gf-patterns golang penetration-testing penetration-testing-tools reconnaissance subdomain-takeover vulnerability vulnerability-scanner

Last synced: 01 Aug 2024

https://github.com/vladko312/SSTImap

Automatic SSTI detection tool with interactive interface

information-security penetration-testing penetration-testing-tools pentest pentest-tool pentesting pentesting-tools python rce ssti

Last synced: 01 Aug 2024

https://github.com/jwt1399/Sec-Tools

🍉一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能。

django penetration-testing-tools python3 scan-tool security-tools vulnerability-scanners

Last synced: 08 Aug 2024

https://github.com/x364e3ab6/DudeSuite

Dude Suite Web 渗透测试工具

acunetix-api acunetix14 acunetix15 awvs awvs14 awvs15 browser dude dudesuite gui hacker hackertools hydra nmap packet penetration-testing-tools scan scanner-web sqlmap tools

Last synced: 10 Sep 2024

https://github.com/Cgboal/SonarSearch

A rapid API for the Project Sonar dataset

bugbounty dns enumeration osint osint-tool penetration-testing penetration-testing-tools rapid7 sonar-api subdomain subdomain-enumeration

Last synced: 02 Aug 2024

https://github.com/MattKeeley/Spoofy

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

application-security appsec cybersecurity deliverability dmarc email-security emails infosec penetration-testing penetration-testing-tools pentesting phishing python python3 redteam security spf

Last synced: 01 Aug 2024

https://github.com/InfosecMatter/Minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

active-directory brute-force login-automation login-brute-force-attacks penetration-testing penetration-testing-tools port-scanner port-scanning portscan portscanner powershell restricted-environments security-audit security-automation smb windows

Last synced: 02 Aug 2024

https://github.com/hueristiq/hqurlfind3r

A command-line interface (CLI) based passive URLs discovery utility. It is designed to efficiently identify known URLs of given domains by tapping into a multitude of curated online passive sources.

bug-bounty bug-bounty-tools contentdiscovery ethical-hacking ethical-hacking-tools go golang osint osint-tools penetration-testing penetration-testing-tools reconnaissance red-teaming red-teaming-tools web-security

Last synced: 25 Aug 2024

https://github.com/hueristiq/xurlfind3r

A command-line interface (CLI) based passive URLs discovery utility. It is designed to efficiently identify known URLs of given domains by tapping into a multitude of curated online passive sources.

bug-bounty bug-bounty-tools contentdiscovery ethical-hacking ethical-hacking-tools go golang osint osint-tools penetration-testing penetration-testing-tools reconnaissance red-teaming red-teaming-tools web-security

Last synced: 01 Aug 2024

https://github.com/Coalfire-Research/Slackor

A Golang implant that uses Slack as a command and control server

c2 command-and-control golang penetration-testing penetration-testing-tools pentest python red-team remote-admin-tool

Last synced: 31 Jul 2024

https://github.com/MS-WEB-BN/t14m4t

Automated brute-forcing attack tool.

brute-force brute-force-attack brute-force-attacks brute-force-passwords bruteforce hacking hacking-tool hacking-tools nmap penetration-test penetration-testing-tools penetration-tests thc-hydra wrapper

Last synced: 04 Aug 2024

https://github.com/mhmdiaa/second-order

Second-order subdomain takeover scanner

crawler crawling infosec mapping penetration-testing penetration-testing-tools pentesting recon reconnaissance security security-tools web-application-security wordlist wordlist-generator

Last synced: 01 Aug 2024

https://github.com/SofianeHamlaoui/Pentest-Notes

Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)

cheatsheets offensive-security penetration-testing penetration-testing-tools pentesting security security-audit security-tools sofianehamlaoui

Last synced: 04 Aug 2024

https://github.com/itaymigdal/Nimbo-C2

Nimbo-C2 is yet another (simple and lightweight) C2 framework

c2 c2-framework command-and-control payload-generator penetration-testing-tools pentesting-tools rat red-team red-team-tools

Last synced: 01 Aug 2024

https://github.com/edoardottt/lit-bb-hack-tools

Little Bug Bounty & Hacking Tools⚔️

bug-bounty bug-bounty-recon bugbounty cli cli-tool ctf-tool ctf-tools hacking hacking-tool hacking-tools hacktoberfest infosec infosectools penetration-testing-tools security-tools tools

Last synced: 04 Aug 2024

https://github.com/cyberark/Evasor

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

bypass-applocker-policies full-automated penetration-testing-tools post-exploitation

Last synced: 04 Aug 2024

https://github.com/PalindromeLabs/STEWS

A Security Tool for Enumerating WebSockets

penetration-testing penetration-testing-tools security web-application-security websocket websocket-security websockets websockets-security

Last synced: 03 Aug 2024

https://github.com/CervantesSec/cervantes

Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.

audit burpsuite collaboration collaboration-platform collaborative cve hacking nessus nmap penetration-testing penetration-testing-tools pentesters pentesting red-team red-teaming report reporting security vulnerability vulnerability-management

Last synced: 04 Aug 2024

https://github.com/DontPanicO/jwtXploiter

A tool to test security of json web token

ctf ctf-tools jku jsonwebtoken jwks jwt jwt-cracker jwt-exploit jwt-security penetration-testing penetration-testing-tools pentest pentest-tool pentesting pentesting-tools security security-tools websecurity x5u-injection

Last synced: 04 Aug 2024

https://github.com/trickest/mksub

Generate tens of thousands of subdomain combinations in a matter of seconds

bugbounty bugbountytips enumeration infosec infosectools penetration-testing penetration-testing-tools pentesting pentesting-tools recon reconnaissance security security-tools subdomain subdomain-enumeration subdomain-finder subdomain-scanner

Last synced: 04 Aug 2024

https://github.com/shadow-workers/shadow-workers

Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)

c2 penetration-testing-tools proxy service-worker xss-exploitation

Last synced: 01 Aug 2024

https://github.com/Stratus-Security/Subdominator

The Internets #1 Subdomain Takeover Tool

bug-bounty infosec penetration-testing penetration-testing-tools pentesting security subdomain subdomain-takeover

Last synced: 26 Sep 2024

https://github.com/putsi/privatecollaborator

A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate

bugbounty burp burpsuite burpsuitepro collaborator penetration-testing penetration-testing-tools

Last synced: 03 Aug 2024

https://github.com/iomoath/SharpStrike

A Post exploitation tool written in C# uses either CIM or WMI to query remote systems.

cybersecurity penetration-testing penetration-testing-tools redteam-tools redteaming winrm wmi wsman

Last synced: 04 Aug 2024

https://github.com/yakuza8/peniot

PENIOT: Penetration Testing Tool for IoT

amqp ble coap hacking hacking-tools iot iot-hacking mqtt penetration-testing penetration-testing-framework penetration-testing-tools python python2-7 security security-attacks

Last synced: 04 Aug 2024

https://github.com/trickest/dsieve

Filter and enrich a list of subdomains by level

bugbounty enumeration infosec infosectools penetration-testing penetration-testing-tools pentesting pentesting-tools security subdomain subdomain-enumeration subdomain-finder subdomain-scanner

Last synced: 03 Aug 2024

https://github.com/MichaelDim02/Narthex

Modular personalized dictionary generator.

c dictionary dictionary-attack hacking password-attack password-cracking password-recovery penetration-testing penetration-testing-tools shell shell-script unix

Last synced: 04 Aug 2024

https://github.com/softrams/bulwark

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

angular application-security appsec blue-team bugbounty express nodejs penetration-testing-tools pentesting red-team security-tool security-tools typeorm typescript vulnerability-assessment vulnerability-management vulnerability-report vulnerability-research webappsec

Last synced: 04 Aug 2024

https://github.com/InfosecHouse/InfosecHouse

Tools & Resources for Cyber Security Operations

bugbounty bugbounty-tool defensive-security hacking incident-response infosec infosec-reference infosectools offensive-security penetration-testing-tools pentest-tools resources

Last synced: 02 Aug 2024

https://github.com/trickest/mkpath

Make URL path combinations using a wordlist

bugbountytips directory-bruteforce enumeration fuzzing penetration-testing penetration-testing-tools pentesting pentesting-tools recon reconnaissance security webappsecurity

Last synced: 04 Aug 2024

https://github.com/Viralmaniar/XposedOrNot

XposedOrNot (XoN) tool is to search an aggregated repository of xposed passwords comprising of ~850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security.

breach-compilation credentials-gathering intelligence-gathering osint osinttool password-breach password-leak penetration-testing-tools recon reconnaissance

Last synced: 04 Aug 2024

https://github.com/mhmdiaa/chronos

Wayback Machine OSINT Framework

infosec mapping penetration-testing penetration-testing-tools pentesting recon reconnaissance security security-tools wayback-machine web-application-security wordlist wordlist-generator wordlists

Last synced: 01 Aug 2024

https://github.com/iomoath/SharpSpray

Active Directory password spraying tool. Auto fetches user list and avoids potential lockouts.

penetration-testing penetration-testing-tools

Last synced: 04 Aug 2024

https://github.com/The-Z-Labs/bof-launcher

Beacon Object File (BOF) launcher - library for executing BOF files in C/C++/Zig applications

adversarial-attacks beacon beaconobjectfile bof cobalt cobalt-strike coff cybersecurity elf execution in-memory penetration-testing-tools post-exploitation red-team security-tools

Last synced: 01 Aug 2024

https://github.com/kostas-pa/LFITester

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

bugbounty crawler cybersecurity enumeration exploitation fuzzing hacking lfi lfi-detection lfi-exploitation lfi-vulnerability penetration-testing penetration-testing-tools pentest-tool pentesting python web-hacking webhacking

Last synced: 04 Aug 2024

https://github.com/hueristiq/xcrawl3r

A command-line interface (CLI) based utility to recursively crawl webpages. It is designed to systematically browse webpages' URLs and follow links to discover linked webpages' URLs.

bug-bounty bug-bounty-tools contentdiscovery crawler ethical-hacking ethical-hacking-tools go golang penetration-testing penetration-testing-tools reconnaissance red-teaming red-teaming-tools web-security

Last synced: 02 Aug 2024

https://github.com/i5nipe/nipejs

Simplify your life with leak detection in JavaScript. NipeJS streamlines the use of regex, making it effortless to uncover potential leaks.

bug-bounty bugbounty bugbounty-tool infosec penetration-testing-tools pentesting

Last synced: 04 Aug 2024

https://github.com/1N3/AttackSurfaceManagement

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

attack-surface attacksurface automated bugbounty bugbounty-platform bugbounty-tool cybersecurity hacking-tool hacking-tools osint penetration-testing penetration-testing-framework penetration-testing-tools reconnaissance redteam-tools vulnerability-management vulnerability-scanners

Last synced: 04 Aug 2024

https://github.com/himazawa/bento

Bento Toolkit is a minimal fedora-based container for penetration tests and CTF with the sweet addition of GUI applications.

ctf ctf-tools docker minimal penetration penetration-testing-tools security-vulnerability

Last synced: 04 Aug 2024

https://github.com/dotnetrussell/minerinthemiddle

This application was created as a POC for how to scan your local network traffic for HTTP requests and then inject various javascript cryptocurrency miners into the response payloads

bug-bounty bugbounty hacking hacking-tool info-sec information-security infosec infosectools injection miner monero penetration-testing penetration-testing-tools python red-team

Last synced: 26 Sep 2024

https://github.com/gnothiseautonlw/burp-shell-fwd-lfi

A Burp Suite plugin/extension that offers a shell in Burp. Both useful for OS Command injection and LFI exploration

burp-extensions burp-plugin burpsuite burpsuite-extender penetration-testing penetration-testing-tools pentesting security security-tools

Last synced: 04 Aug 2024

https://github.com/IngoKl/HTTPUploadExfil

A simple HTTP server for delivering and exfiltrating files/data during, for example, CTFs.

ctf ctf-tools golang http http-server oscp-tools penetration-testing-tools pentest-tool pentesting security-tools

Last synced: 04 Aug 2024

https://github.com/jonaslejon/lolcrawler

Headless web crawler for bugbounty and penetration-testing/redteaming

bugbounty crawler docker penetration-testing penetration-testing-tools redteam redteam-tools redteaming

Last synced: 04 Aug 2024

https://github.com/netlas-io/netlas-scripts

Several scripts are based on the Netlas.io search engine. They will allow you to carry out the reconnaissance phase before the pen test in a semi-automatic mode: collect all the domains and IP addresses associated with the target and save the responses received after contacting these hosts in HTML format. Over time, new scripts will appear here.

netlas osint penetration-testing-tools security-tools

Last synced: 01 Aug 2024