Security Testing Libraries - Page 5

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

Go 1372Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Fast Go Application Scanner

Go 1364Updated: 2 y ago License: Proprietary (Proprietary)

Pop shells like a master.

Python 1359Updated: 2 y ago License: Permissive (MIT)

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

C# 1354Updated: 2 y ago License: No License (No License)

a recon tool that allows searching on URLs that are exposed via shortener services

Go 1341Updated: 2 y ago License: Permissive (MIT)

ODAT: Oracle Database Attacking Tool

Python 1339Updated: 2 y ago License: No License (No License)

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Python 1332Updated: 2 y ago License: Proprietary (Proprietary)

记录自己编写、修改的部分工具

Python 1325Updated: 2 y ago License: Permissive (MIT)

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

Go 1293Updated: 2 y ago License: Permissive (Apache-2.0)

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

Python 1292Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

Python 1290Updated: 2 y ago License: Permissive (MIT)

Discover Your Attack Surface!

Ruby 1275Updated: 2 y ago License: Proprietary (Proprietary)

DKMC - Dont kill my cat - Malicious payload evasion tool

Python 1274Updated: 2 y ago License: Proprietary (Proprietary)

Docker security analysis & hacking tools

Python 1273Updated: 2 y ago License: Proprietary (Proprietary)

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

C++ 1273Updated: 2 y ago License: Proprietary (Proprietary)

Perform a MitM attack and extract clear text credentials from RDP connections

Python 1271Updated: 2 y ago License: Permissive (MIT)

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

Python 1268Updated: 2 y ago License: Permissive (MIT)

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

JavaScript 1252Updated: 2 y ago License: Permissive (MIT)

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Python 1250Updated: 2 y ago License: No License (No License)

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

C++ 1246Updated: 4 y ago License: No License (No License)

LadonGO 4.2 Pentest Scanner framework 全平台Go开源内网渗透扫描器框架,Windows/Linux/Mac内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

Go 1245Updated: 2 y ago License: Permissive (MIT)

:hammer: A modern multiple reverse shell sessions manager written in go

Go 1244Updated: 2 y ago License: Weak Copyleft (LGPL-3.0)

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

Shell 1244Updated: 2 y ago License: Permissive (MIT)

Penetration Testing Platform

Python 1237Updated: 2 y ago License: Permissive (MIT)

Security Tool to Look For Interesting Files in S3 Buckets

Python 1234Updated: 2 y ago License: Permissive (MIT)

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.

Perl 1227Updated: 2 y ago License: No License (No License)

Drone pentesting framework console

Python 1221Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

C# 1218Updated: 2 y ago License: No License (No License)

这是一个抓取浏览器密码的工具，后续会添加更多功能

C# 1208Updated: 2 y ago License: No License (No License)

Python 1204Updated: 2 y ago License: Permissive (MIT)

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

Python 1181Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

RedSnarf is a pen-testing / red-teaming tool for Windows environments

PowerShell 1173Updated: 2 y ago License: Permissive (Apache-2.0)

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

Python 1172Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Dictionary for penetration testers happy hacker

Python 1170Updated: 2 y ago License: No License (No License)

C 1167Updated: 2 y ago License: Proprietary (Proprietary)

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

PowerShell 1162Updated: 2 y ago License: Permissive (MIT)

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

C 1156Updated: 2 y ago License: Permissive (Apache-2.0)

Burp被动扫描流量转发插件

Java 1154Updated: 2 y ago License: No License (No License)

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

Python 1140Updated: 2 y ago License: Permissive (MIT)

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

C++ 1136Updated: 3 y ago License: Proprietary (Proprietary)

Open source vulnerability DB and triage service.

Python 1135Updated: 2 y ago License: Permissive (Apache-2.0)

pentest framework

Python 1133Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Small utilities that are useful in advanced password cracking

C 1104Updated: 2 y ago License: Permissive (MIT)

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

Python 1098Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

HTML 1094Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

PowerShell 1091Updated: 2 y ago License: No License (No License)

MSFvenom Payload Creator (MSFPC)

Shell 1091Updated: 2 y ago License: Permissive (MIT)

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Python 1080Updated: 2 y ago License: Permissive (MIT)

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

Python 1076Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

SimplE RePort wrIting and COllaboration tool

JavaScript 1076Updated: 2 y ago License: Proprietary (Proprietary)