Security Testing Libraries - Page 8

WPSeku - Wordpress Security Scanner

Python 769Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

PowerShell 768Updated: 4 y ago License: Proprietary (Proprietary)

Automated hacking tool that will find leaked databases with 97.1% accurate to grab mail + password together from recent uploads from https://pastebin.com. Bruteforce support for spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts

Shell 761Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.

Go 761Updated: 4 y ago License: No License (No License)

Asset inventory of over 800 public bug bounty programs.

Shell 759Updated: 2 y ago License: Permissive (MIT)

Modern tactical exploitation toolkit.

Python 756Updated: 2 y ago License: Permissive (MIT)

GoLismero - The Web Knife

Python 752Updated: 4 y ago License: Strong Copyleft (GPL-2.0)

:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:

C++ 752Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

Vulnerability scanner based on vulners.com search API

Java 751Updated: 4 y ago License: Weak Copyleft (LGPL-3.0)

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

PHP 748Updated: 2 y ago License: No License (No License)

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

Python 747Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

A semi-interactive PHP shell compressed into a single file.

PHP 742Updated: 2 y ago License: Permissive (Apache-2.0)

Utility for detecting phishing domains targeting Web3 users

JavaScript 737Updated: 2 y ago License: Proprietary (Proprietary)

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

Go 734Updated: 4 y ago License: No License (No License)

JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)

Python 733Updated: 2 y ago License: No License (No License)

HVNC for Cobalt Strike

C 731Updated: 2 y ago License: Permissive (MIT)

Damn Small SQLi Scanner

Python 730Updated: 2 y ago License: No License (No License)

Generates millions of keyword-based password mutations in seconds.

Python 729Updated: 2 y ago License: Permissive (MIT)

Data Hacking Project

Jupyter Notebook 727Updated: 3 y ago License: Permissive (MIT)

Credentials gathering tool automating remote procdump and parse of lsass process.

Python 724Updated: 2 y ago License: Permissive (MIT)

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

HTML 723Updated: 2 y ago License: No License (No License)

Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)

C 722Updated: 2 y ago License: No License (No License)

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

Python 722Updated: 4 y ago License: Permissive (MIT)

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to find possible credentials leaks in PwnDB or Dehashed and obtain Google account information via GHunt.

Python 720Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Ruby on Rails Phishing Framework

PHP 716Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on.

Shell 715Updated: 2 y ago License: No License (No License)

The easiest way to write web applications with Perl (Perl web micro-framework)

Perl 714Updated: 4 y ago License: No License (No License)

AV Evasion Tool For Red Team Ops

C 706Updated: 2 y ago License: Permissive (Apache-2.0)

Open source C2 server created for stealth red team operations

PowerShell 700Updated: 2 y ago License: No License (No License)

Lockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link.

HTML 695Updated: 2 y ago License: Proprietary (Proprietary)

Automation for javascript recon in bug bounty.

Shell 695Updated: 2 y ago License: No License (No License)

Demonstrates the "heartbleed" problem using full OpenSSL stack

C 694Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Multi Tool Subdomain Enumeration

Python 691Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

Java漏洞学习笔记 Deserialization Vulnerability

HTML 690Updated: 2 y ago License: No License (No License)

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

Go 688Updated: 2 y ago License: Permissive (MIT)

This Script will help you to gather information about your victim or friend.

Python 687Updated: 2 y ago License: Permissive (MIT)

A Python Package for Data Exfiltration

Python 682Updated: 2 y ago License: Permissive (MIT)

漏洞检测、漏洞利用

HTML 682Updated: 2 y ago License: No License (No License)

Python and Powershell internal penetration testing framework

Python 681Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam

Python 676Updated: 3 y ago License: No License (No License)

NetCat for Windows

C 675Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

A (partial) Python rewriting of PowerSploit's PowerView

Python 673Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Python 672Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Easy automated vulnerability scanning, reporting and analysis

JavaScript 672Updated: 2 y ago License: Permissive (Apache-2.0)

Python and Powershell internal penetration testing framework

Python 671Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

Subdomain takeover vulnerability checker

Go 670Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

Web vulnerability scanner written in Python3

Python 669Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

Python 669Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

Shell 669Updated: 2 y ago License: Permissive (MIT)

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

JavaScript 668Updated: 2 y ago License: Permissive (Apache-2.0)