Security Testing Libraries - Page 4

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

Python 1714Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

HTTPLeaks - All possible ways, a website can leak HTTP requests

HTML 1708Updated: 2 y ago License: Permissive (BSD-2-Clause)

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

Python 1697Updated: 2 y ago License: Permissive (MIT)

Subdomain Takeover tool written in Go

Go 1696Updated: 2 y ago License: Permissive (Apache-2.0)

A Security Tool for Bug Bounty, Pentest and Red Teaming.

Go 1693Updated: 2 y ago License: Permissive (MIT)

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

C# 1691Updated: 2 y ago License: No License (No License)

Extract credentials from lsass remotely

Python 1684Updated: 2 y ago License: Permissive (MIT)

Reverse Shell as a Service

JavaScript 1680Updated: 2 y ago License: Permissive (MIT)

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883

Python 1673Updated: 2 y ago License: No License (No License)

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

Python 1652Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Notes about attacking Jenkins servers

Python 1642Updated: 2 y ago License: No License (No License)

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

Shell 1641Updated: 2 y ago License: Permissive (MIT)

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

Python 1639Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

The goal of this repository is to document the most common techniques to bypass AppLocker.

PowerShell 1636Updated: 2 y ago License: No License (No License)

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

Python 1626Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

Python 1622Updated: 4 y ago License: No License (No License)

The Offensive Manual Web Application Penetration Testing Framework.

Python 1621Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

Shell 1599Updated: 2 y ago License: Permissive (MIT)

Pentest Report Generator

JavaScript 1595Updated: 2 y ago License: Permissive (MIT)

SharpSploit is a .NET post-exploitation library written in C#

C# 1591Updated: 2 y ago License: Permissive (BSD-3-Clause)

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

Go 1585Updated: 2 y ago License: Permissive (Apache-2.0)

Reconnaissance Swiss Army Knife

Python 1565Updated: 2 y ago License: Permissive (Apache-2.0)

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Shell 1565Updated: 2 y ago License: No License (No License)

Test tool for CVE-2020-1472

Python 1562Updated: 2 y ago License: Permissive (MIT)

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

Python 1561Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Tool for Active Directory Certificate Services enumeration and abuse

Python 1546Updated: 2 y ago License: Permissive (MIT)

Automated hacking tool that will find leaked databases with 97.1% accurate to grab mail + password together from recent uploads from https://pastebin.com. Bruteforce support for spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts

Shell 1534Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Network Infrastructure Penetration Testing Tool

Python 1524Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Single-file PHP shell

PHP 1502Updated: 2 y ago License: Permissive (WTFPL)

SMBMap is a handy SMB enumeration tool

Python 1496Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

AntiVirus Evasion Tool

Shell 1494Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

🔪 :octocat: Leak git repositories from misconfigured websites

Go 1490Updated: 2 y ago License: Permissive (Unlicense)

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Python 1485Updated: 2 y ago License: Permissive (MIT)

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

PowerShell 1484Updated: 2 y ago License: Permissive (MIT)

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Python 1479Updated: 2 y ago License: Permissive (MIT)

Unified repository for different Metasploit Framework payloads

C 1476Updated: 2 y ago License: Proprietary (Proprietary)

Undetectable Windows Payload Generation

Python 1473Updated: 2 y ago License: Permissive (Apache-2.0)

Kippo - SSH Honeypot

Python 1462Updated: 2 y ago License: No License (No License)

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

Shell 1439Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++.

C++ 1435Updated: 2 y ago License: Permissive (Apache-2.0)

:new: The Multi-Tool Web Vulnerability Scanner.

Python 1432Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

A Python based ingestor for BloodHound

Python 1431Updated: 2 y ago License: Permissive (MIT)

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

Python 1424Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Find web directories without bruteforce

Python 1412Updated: 2 y ago License: Permissive (MIT)

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

PowerShell 1410Updated: 2 y ago License: Permissive (MIT)

Python2编写的struts2漏洞全版本检测和利用工具

Python 1397Updated: 2 y ago License: No License (No License)

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

Python 1386Updated: 2 y ago License: Permissive (MIT)

Python3编写的CMS漏洞检测框架

Python 1382Updated: 2 y ago License: No License (No License)

CVE Alerting Platform

Python 1377Updated: 2 y ago License: Proprietary (Proprietary)

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

Perl 1375Updated: 2 y ago License: No License (No License)