GitHub topics: pentest

Repositories

yeswehack/pp-finder

PP-finder Help you find gadget for prototype pollution exploitation

Language: TypeScript - Size: 4.84 MB - Last synced at: 17 days ago - Pushed at: 9 months ago - Stars: 156 - Forks: 18

kitsec-labs/kitsec-core

Pentesting, made easy.

Language: Python - Size: 49.6 MB - Last synced at: 11 days ago - Pushed at: 11 months ago - Stars: 145 - Forks: 10

ra1nb0rn/search_vulns

Search for known vulnerabilities in software using software titles or a CPE 2.3 string

Language: Python - Size: 2.58 MB - Last synced at: 18 days ago - Pushed at: 18 days ago - Stars: 35 - Forks: 7

Correia-jpv/fucking-awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things. With repository stars⭐ and forks🍴

Size: 951 KB - Last synced at: 6 days ago - Pushed at: 19 days ago - Stars: 14 - Forks: 1

Correia-jpv/fucking-awesome-web-security

🐶 A curated list of Web Security materials and resources. With repository stars⭐ and forks🍴

Size: 692 KB - Last synced at: 6 days ago - Pushed at: 19 days ago - Stars: 17 - Forks: 2

Aftab700/API-Penetration-Testing

API Penetration Testing Notes

Size: 40 KB - Last synced at: 19 days ago - Pushed at: 19 days ago - Stars: 16 - Forks: 3

alphaSeclab/awesome-cyber-security Fork of fengjixuchui/awesome-cyber-security

[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.

Size: 3.49 MB - Last synced at: 8 days ago - Pushed at: over 5 years ago - Stars: 468 - Forks: 117

m0nad/Diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

Language: C - Size: 28.3 KB - Last synced at: 19 days ago - Pushed at: over 1 year ago - Stars: 1,979 - Forks: 450

noraj/haiti

:key: Hash type identifier (CLI & lib)

Language: Ruby - Size: 1.04 MB - Last synced at: 19 days ago - Pushed at: 23 days ago - Stars: 855 - Forks: 55

000pp/Apepe

📲 Enumerate app information through the APK file

Language: Python - Size: 44.9 KB - Last synced at: 20 days ago - Pushed at: 2 months ago - Stars: 122 - Forks: 20

m0rtem/CloudFail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

Language: Python - Size: 38.9 MB - Last synced at: 19 days ago - Pushed at: about 1 year ago - Stars: 2,338 - Forks: 486

fabaff/nix-security-box

Tool set for Information security professionals and all others

Language: Nix - Size: 480 KB - Last synced at: 21 days ago - Pushed at: 27 days ago - Stars: 293 - Forks: 21

Ascotbe/Kernelhub

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

Language: C - Size: 58.9 MB - Last synced at: 19 days ago - Pushed at: about 2 years ago - Stars: 2,979 - Forks: 666

fportantier/habu

Hacking Toolkit

Language: Python - Size: 1.71 MB - Last synced at: 11 days ago - Pushed at: over 1 year ago - Stars: 917 - Forks: 155

nixawk/pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Language: Python - Size: 30 MB - Last synced at: 20 days ago - Pushed at: over 1 year ago - Stars: 3,558 - Forks: 931

lcvvvv/kscan

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

Language: Go - Size: 80.4 MB - Last synced at: 20 days ago - Pushed at: over 1 year ago - Stars: 4,081 - Forks: 533

Kiosec/External-Enumeration

External enumeration methodology for external pentest

Size: 267 KB - Last synced at: 21 days ago - Pushed at: 21 days ago - Stars: 1 - Forks: 3

Kiosec/Windows-Exploitation

Audit and pentest methodologies for Windows including internal enumeration, privesc, lateral movement, etc.

Language: PowerShell - Size: 1010 KB - Last synced at: 21 days ago - Pushed at: 21 days ago - Stars: 9 - Forks: 4

Kiosec/Linux-Exploitation

Audit and pentest methodologies for Linux including internal enumeration, privesc, lateral movement, etc.

Size: 277 KB - Last synced at: 21 days ago - Pushed at: 21 days ago - Stars: 3 - Forks: 2

quentinhardy/odat

ODAT: Oracle Database Attacking Tool

Language: Python - Size: 1.5 MB - Last synced at: 19 days ago - Pushed at: 9 months ago - Stars: 1,660 - Forks: 349

foospidy/payloads

Git All the Payloads! A collection of web attack payloads.

Language: Shell - Size: 69.6 MB - Last synced at: 20 days ago - Pushed at: almost 2 years ago - Stars: 3,754 - Forks: 977

Mah1ndra/Mah1ndra.github.io

Blog for my writeups

Language: SCSS - Size: 59.4 MB - Last synced at: 21 days ago - Pushed at: 21 days ago - Stars: 0 - Forks: 0

t3l3machus/PowerShell-Obfuscation-Bible

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.

Size: 364 KB - Last synced at: 21 days ago - Pushed at: 10 months ago - Stars: 983 - Forks: 109

totekuh/reverse-shell-generator

A command-line reverse shell generator

Language: Python - Size: 68.4 KB - Last synced at: 19 days ago - Pushed at: almost 2 years ago - Stars: 1 - Forks: 0

hahwul/XSpear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

Language: Ruby - Size: 1.07 MB - Last synced at: 20 days ago - Pushed at: over 2 years ago - Stars: 1,267 - Forks: 232

rewardone/OSCPRepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

Language: C - Size: 681 MB - Last synced at: 19 days ago - Pushed at: almost 5 years ago - Stars: 2,512 - Forks: 732

bl4de/research

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

Language: JavaScript - Size: 27.6 MB - Last synced at: 7 days ago - Pushed at: 9 months ago - Stars: 198 - Forks: 47

nickvourd/Rocabella

Sniffing files generator

Language: Go - Size: 4.38 MB - Last synced at: 3 days ago - Pushed at: 2 months ago - Stars: 54 - Forks: 8

p0dalirius/LDAPmonitor

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

Language: C# - Size: 4.59 MB - Last synced at: 21 days ago - Pushed at: 11 months ago - Stars: 861 - Forks: 70

matro7sh/BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

Size: 8.89 MB - Last synced at: 20 days ago - Pushed at: about 1 month ago - Stars: 2,759 - Forks: 311

skerkour/black-hat-rust

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Language: Rust - Size: 2.07 MB - Last synced at: 22 days ago - Pushed at: 9 months ago - Stars: 4,021 - Forks: 404

R3dy/capsulecorp-pentest

Vagrant VirtualBox environment for conducting an internal network penetration test

Language: Ruby - Size: 2.63 MB - Last synced at: 21 days ago - Pushed at: almost 2 years ago - Stars: 881 - Forks: 164

mmaachado/sycp

Anotações realizadas durante a certificação SYCP

Language: Python - Size: 2.64 MB - Last synced at: 20 days ago - Pushed at: 6 months ago - Stars: 24 - Forks: 4

Puliczek/CVE-2021-21123-PoC-Google-Chrome

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123 and 5 more...

Language: HTML - Size: 77.1 KB - Last synced at: 8 days ago - Pushed at: about 4 years ago - Stars: 168 - Forks: 25

B34MR/evillyn

An EvilTwin wrapper with quality of life enhancements.

Language: Python - Size: 76.2 KB - Last synced at: 22 days ago - Pushed at: 22 days ago - Stars: 8 - Forks: 1

SySS-Research/smbcrawler

smbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares

Language: Python - Size: 1.1 MB - Last synced at: 21 days ago - Pushed at: about 1 month ago - Stars: 160 - Forks: 21

m8sec/subscraper

Subdomain and target enumeration tool built for offensive security testing

Language: Python - Size: 102 KB - Last synced at: 21 days ago - Pushed at: 11 months ago - Stars: 864 - Forks: 99

DrPython3/MailRipV3

SMTP and IMAP checker / cracker for mailpass combolists with a user-friendly GUI, automated inbox test and many more features.

Language: Python - Size: 82 KB - Last synced at: 7 days ago - Pushed at: over 3 years ago - Stars: 96 - Forks: 33

trmxvibs/hydra

Install Hydra in termux easily.

Language: Shell - Size: 26.4 KB - Last synced at: 22 days ago - Pushed at: 22 days ago - Stars: 1 - Forks: 0

cracker911181/Cracker-Tool

All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭

Language: Python - Size: 13.5 MB - Last synced at: 20 days ago - Pushed at: over 1 year ago - Stars: 763 - Forks: 91

the0cp/the0cp.github.io

Dev, Pentest, Programming

Language: HTML - Size: 32 MB - Last synced at: 22 days ago - Pushed at: 23 days ago - Stars: 6 - Forks: 0

afkfr0mkeyb0ard/PyScan

Fast TCP port scanner in Python

Language: Python - Size: 33.2 KB - Last synced at: 23 days ago - Pushed at: 23 days ago - Stars: 0 - Forks: 0

Ch0pin/medusa

Binary instrumentation framework based on FRIDA

Language: Python - Size: 51.2 MB - Last synced at: 22 days ago - Pushed at: about 1 month ago - Stars: 1,842 - Forks: 263

SecWiki/windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

Language: C - Size: 233 MB - Last synced at: 23 days ago - Pushed at: almost 4 years ago - Stars: 8,268 - Forks: 2,844

V-i-x-x/AMSI-BYPASS

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

Language: PowerShell - Size: 3.06 MB - Last synced at: 23 days ago - Pushed at: 23 days ago - Stars: 270 - Forks: 47

aaaguirrep/offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

Language: Dockerfile - Size: 543 KB - Last synced at: 3 days ago - Pushed at: about 3 years ago - Stars: 744 - Forks: 150

PicoTools/pico

C2 framework that allows you to connect your agents and listeners written in any programming language.

Language: Go - Size: 40.2 MB - Last synced at: 18 days ago - Pushed at: 23 days ago - Stars: 3 - Forks: 1

SpiderLabs/HostHunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

Language: Python - Size: 19.2 MB - Last synced at: 21 days ago - Pushed at: about 2 years ago - Stars: 1,113 - Forks: 190

mcnamee/huntkit

Docker - Ubuntu with a bunch of PenTesting tools and wordlists

Language: Shell - Size: 199 KB - Last synced at: 21 days ago - Pushed at: 2 months ago - Stars: 250 - Forks: 55

AdrianVollmer/PowerHub

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

Language: PowerShell - Size: 7.17 MB - Last synced at: 21 days ago - Pushed at: 29 days ago - Stars: 798 - Forks: 126

k8gege/K8CScan

K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

Language: Python - Size: 102 MB - Last synced at: 21 days ago - Pushed at: over 5 years ago - Stars: 1,274 - Forks: 340

1N3/Goohak

Automatically Launch Google Hacking Queries Against A Target Domain

Language: Shell - Size: 16.6 KB - Last synced at: 21 days ago - Pushed at: about 1 year ago - Stars: 724 - Forks: 182

chriskaliX/AD-Pentest-Notes

用于记录内网渗透(域渗透)学习 :-)

Size: 10.5 MB - Last synced at: 20 days ago - Pushed at: over 4 years ago - Stars: 1,156 - Forks: 113

noraj/flask-session-cookie-manager

:cookie: Flask Session Cookie Decoder/Encoder

Language: Python - Size: 40 KB - Last synced at: 20 days ago - Pushed at: 3 months ago - Stars: 682 - Forks: 92

quentinhardy/msdat

MSDAT: Microsoft SQL Database Attacking Tool

Language: Python - Size: 222 KB - Last synced at: 21 days ago - Pushed at: almost 2 years ago - Stars: 905 - Forks: 145

choupit0/MassVulScan

A fast network scanning tool to detect open ports and security vulnerabilities

Language: Shell - Size: 3.3 MB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 110 - Forks: 10

ieozfr/wordpress-sqli-scanner

EN: Automated WordPress SQL Injection vulnerability scanner and database dumper using Google Dorks, threading, proxy support, and sqlmap integration. TR: Google Dorklar, çoklu tarama ve proxy desteği ile WordPress SQL Injection zaafiyetlerini tespit eden ve veritabanı bilgilerini otomatik çeken Python aracı.

Language: Python - Size: 99.6 KB - Last synced at: 23 days ago - Pushed at: 29 days ago - Stars: 2 - Forks: 0

zh54321/SnafflerParser

Parses Snaffler output file and generate beautified outputs.

Language: PowerShell - Size: 2.99 MB - Last synced at: 24 days ago - Pushed at: 3 months ago - Stars: 90 - Forks: 6

sensepost/dwn

d(ockerp)wn - a docker pwn tool manager

Language: Python - Size: 157 KB - Last synced at: 20 days ago - Pushed at: almost 4 years ago - Stars: 156 - Forks: 22

ProcessusT/Venoma

Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution

Language: C++ - Size: 76.2 MB - Last synced at: 21 days ago - Pushed at: about 1 year ago - Stars: 174 - Forks: 36

redcode-labs/RedNix

Hackable NixOS container and devShells collection

Language: Nix - Size: 141 KB - Last synced at: 20 days ago - Pushed at: 5 months ago - Stars: 154 - Forks: 20

iknowjason/PurpleCloud

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-183b7df7a2f4

Language: Python - Size: 42.9 MB - Last synced at: 18 days ago - Pushed at: about 1 month ago - Stars: 564 - Forks: 96

matro7sh/Smersh

Smersh is a pentest oriented collaborative tool used to track the progress of your company's missions.

Language: TypeScript - Size: 18.4 MB - Last synced at: 24 days ago - Pushed at: 8 months ago - Stars: 218 - Forks: 33

ariary/fileless-xec

Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)

Language: Go - Size: 6.76 MB - Last synced at: 24 days ago - Pushed at: 10 months ago - Stars: 197 - Forks: 39

lucthienphong1120/AIO-Pentesting

All in one Pentest methodologies - Tools and commands | Where compiled all common materials for pentester

Language: PHP - Size: 49.9 MB - Last synced at: 11 days ago - Pushed at: about 1 month ago - Stars: 33 - Forks: 10

gquere/pwn_jenkins

Notes about attacking Jenkins servers

Language: Python - Size: 174 KB - Last synced at: 22 days ago - Pushed at: 10 months ago - Stars: 2,047 - Forks: 335

koutto/jok3r

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

Language: HTML - Size: 15.7 MB - Last synced at: 25 days ago - Pushed at: 11 months ago - Stars: 1,048 - Forks: 255

metlo-labs/metlo

Metlo is an open-source API security platform.

Language: TypeScript - Size: 8.85 MB - Last synced at: 22 days ago - Pushed at: 12 months ago - Stars: 1,639 - Forks: 93

vpxuser/proxy

中间人攻击代理工具，目前已实现端口复用HTTP、SOCKS5协议的透明代理，HTTP、TLS中间人攻击

Language: Go - Size: 61.5 MB - Last synced at: 25 days ago - Pushed at: 25 days ago - Stars: 17 - Forks: 5

khast3x/Redcloud

Automated Red Team Infrastructure deployement using Docker

Language: Python - Size: 81.1 KB - Last synced at: 25 days ago - Pushed at: over 2 years ago - Stars: 1,234 - Forks: 205

resurrecting-open-source-projects/dnsmap

Scan for subdomains using bruteforcing techniques

Language: C - Size: 174 KB - Last synced at: 10 days ago - Pushed at: 11 months ago - Stars: 45 - Forks: 7

anouarbensaad/vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

Language: Python - Size: 575 KB - Last synced at: 19 days ago - Pushed at: almost 2 years ago - Stars: 1,928 - Forks: 343

Drayko/Bot-Bounty

Python Script for Telegram Bot is specially built for pentest & bug bounty. It's like a telegram shell.

Language: Python - Size: 206 KB - Last synced at: 25 days ago - Pushed at: 25 days ago - Stars: 55 - Forks: 16

ariary/magnet

🧲 Hide data exfiltration in harmless looking executable

Language: Go - Size: 162 KB - Last synced at: 7 days ago - Pushed at: over 1 year ago - Stars: 5 - Forks: 0

BEND0US/falsecho

Advanced phishing tool for red team ops, browser-based data capture, and realistic login page emulation.

Language: JavaScript - Size: 192 KB - Last synced at: 26 days ago - Pushed at: about 1 month ago - Stars: 25 - Forks: 3

flavien-perier/dockerfile-sandbox-hack

Pentest environment accessible with SSH.

Language: Dockerfile - Size: 12.7 KB - Last synced at: 26 days ago - Pushed at: 26 days ago - Stars: 0 - Forks: 0

stanislav-web/OpenDoor

OWASP WEB Directory Scanner

Language: Python - Size: 9.03 MB - Last synced at: 19 days ago - Pushed at: 7 months ago - Stars: 899 - Forks: 185

flashnuke/mod-rootkit

Kernel-space x86_64 Linux rootkit leveraging kprobes and ftrace for syscall hooking (hiding entries and reverse shell backdoor)

Language: C - Size: 161 KB - Last synced at: 26 days ago - Pushed at: 26 days ago - Stars: 7 - Forks: 0

farinap5/bitmap4shell

A (quite) simple steganography algorithm to hide shellcodes within bitmap image.

Language: C - Size: 217 KB - Last synced at: 18 days ago - Pushed at: 12 months ago - Stars: 22 - Forks: 4

cddmp/enum4linux-ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

Language: Python - Size: 563 KB - Last synced at: 25 days ago - Pushed at: about 1 month ago - Stars: 1,290 - Forks: 127

ariary/DomXssFinder

Find sources and sinks in js code that could lead to DOM XSS 🔎💧🚰

Language: Shell - Size: 21.5 KB - Last synced at: 7 days ago - Pushed at: about 1 year ago - Stars: 22 - Forks: 4

dwisiswant0/findom-xss 📦

A fast DOM based XSS vulnerability scanner with simplicity.

Language: Shell - Size: 29.3 KB - Last synced at: 25 days ago - Pushed at: over 2 years ago - Stars: 787 - Forks: 111

al0ne/Vxscan

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

Language: Python - Size: 4.8 MB - Last synced at: 25 days ago - Pushed at: over 5 years ago - Stars: 1,749 - Forks: 442

UndeadSec/EvilURL

Generate unicode domains for IDN Homograph Attack and detect them.

Language: Python - Size: 1.17 MB - Last synced at: 24 days ago - Pushed at: about 3 years ago - Stars: 1,180 - Forks: 287

1N3/Findsploit

Find exploits in local and online databases instantly

Language: Shell - Size: 1.6 MB - Last synced at: 25 days ago - Pushed at: over 3 years ago - Stars: 1,721 - Forks: 330

thelikes/owncraft

offensive notes & resources

Size: 44.9 MB - Last synced at: 26 days ago - Pushed at: 26 days ago - Stars: 41 - Forks: 16

masatokinugawa/filterbypass

Browser's XSS Filter Bypass Cheat Sheet

Size: 0 Bytes - Last synced at: 24 days ago - Pushed at: almost 8 years ago - Stars: 1,129 - Forks: 211

TH3xACE/SUDO_KILLER

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

Language: Shell - Size: 4.71 MB - Last synced at: 22 days ago - Pushed at: 4 months ago - Stars: 2,297 - Forks: 257