Security Testing Libraries - Page 10

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

Python 578Updated: 2 y ago License: Permissive (MIT)

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

Python 578Updated: 2 y ago License: No License (No License)

EarlyBird is a sensitive data detection tool capable of scanning source code repositories for clear text password violations, PII, outdated cryptography methods, key files and more.

Go 577Updated: 2 y ago License: Permissive (Apache-2.0)

Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.

Python 576Updated: 3 y ago License: Permissive (MIT)

Hacking framework

Python 575Updated: 2 y ago License: No License (No License)

Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

C 575Updated: 2 y ago License: Proprietary (Proprietary)

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

C# 574Updated: 2 y ago License: Permissive (BSD-3-Clause)

Intranet penetration tools

PowerShell 574Updated: 3 y ago License: No License (No License)

Nekoclient infection detector

Java 571Updated: 2 y ago License: Permissive (MIT)

Python 3.5+ DNS asynchronous brute force utility

Python 570Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Tool Information Gathering Write By Python.

Python 569Updated: 2 y ago License: No License (No License)

Penetration Testing notes, resources and scripts

Python 569Updated: 2 y ago License: Permissive (MIT)

Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件

Java 569Updated: 2 y ago License: No License (No License)

Lightweight rootkit implemented by bash shell scripts v0.10

Shell 565Updated: 4 y ago License: No License (No License)

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

Rust 565Updated: 2 y ago License: Permissive (MIT)

Python 560Updated: 2 y ago License: No License (No License)

A collection of useful Python hacking scripts for beginners

Python 559Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

HTML 559Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

Java 557Updated: 2 y ago License: Permissive (MIT)

Python3 tool to perform password spraying using RDP

Python 556Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

Rust 556Updated: 2 y ago License: No License (No License)

EasyPen is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation

JavaScript 556Updated: 2 y ago License: No License (No License)

OSINT tool - gets data from services like shodan, censys etc. in one app

Python 554Updated: 2 y ago License: Permissive (MIT)

Vulnerabilities of Goby supported with exploitation.

Go 553Updated: 2 y ago License: No License (No License)

Finds unknown classes of injection vulnerabilities

Java 552Updated: 2 y ago License: Proprietary (Proprietary)

Advanced Web Shell

PHP 552Updated: 4 y ago License: Permissive (MIT)

Tools, scripts and tips useful during Penetration Testing engagements.

Shell 552Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

An Office365 User Attack Tool

Go 551Updated: 2 y ago License: Permissive (MIT)

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

Python 550Updated: 2 y ago License: Permissive (MIT)

Meltdown Exploit / Proof-of-concept / checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.

C++ 549Updated: 4 y ago License: Permissive (BSD-2-Clause)

PwnWiki - The notes section of the pentesters mind.

HTML 548Updated: 2 y ago License: Permissive (MIT)

👻Impost3r -- A linux password thief

C 546Updated: 2 y ago License: Permissive (MIT)

SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)

C 545Updated: 4 y ago License: No License (No License)

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

PHP 543Updated: 2 y ago License: Permissive (MIT)

PoC scripts demonstrating the BlueBorne vulnerabilities

Python 540Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

WeirdAAL (AWS Attack Library)

Python 538Updated: 3 y ago License: No License (No License)

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Ruby 537Updated: 2 y ago License: No License (No License)

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

Shell 536Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Everything needed for doing CTFs

HTML 536Updated: 2 y ago License: No License (No License)

ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.

Shell 536Updated: 4 y ago License: Permissive (MIT)

An agent that enforces guidelines for your GitHub repositories

JavaScript 533Updated: 2 y ago License: Proprietary (Proprietary)

🎯 PHP / ASP - Shell Backdoor List 🎯

PHP 527Updated: 2 y ago License: Permissive (MIT)

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.

Shell 526Updated: 2 y ago License: No License (No License)

Fake sshd that logs ip addresses, usernames, and passwords.

C 526Updated: 2 y ago License: Permissive (MIT)

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.

Shell 524Updated: 2 y ago License: No License (No License)

.git 泄漏利用工具，可还原历史版本

Python 523Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

Shell 523Updated: 2 y ago License: No License (No License)

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

Ruby 522Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

PHP 521Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Open Redirect Payloads

Shell 520Updated: 2 y ago License: No License (No License)