Security Testing Libraries - Page 9

Java RMI enumeration and attack tool.

Java 667Updated: 2 y ago License: Permissive (MIT)

Statically-linked ssh server with reverse shell functionality for CTFs and such

Go 666Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Dumping DPAPI credz remotely

Python 666Updated: 2 y ago License: No License (No License)

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

C# 665Updated: 2 y ago License: Permissive (MIT)

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

Go 662Updated: 2 y ago License: Permissive (MIT)

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

JavaScript 656Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

Python 654Updated: 4 y ago License: No License (No License)

Automatic Enumeration Tool based in Open Source tools

Python 654Updated: 2 y ago License: Permissive (MIT)

Awesome cloud enumerator

Go 653Updated: 2 y ago License: Permissive (MIT)

test script for shellshocker and related vulnerabilities

Shell 652Updated: 4 y ago License: Permissive (CC0-1.0)

Automated Penetration Testing Reporting System

Python 647Updated: 2 y ago License: Permissive (MIT)

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Java 645Updated: 4 y ago License: Proprietary (Proprietary)

:eye: (s)AINT is a Spyware Generator for Windows systems written in Java. [Discontinued]

Java 645Updated: 2 y ago License: Permissive (BSD-3-Clause)

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Python 645Updated: 2 y ago License: Permissive (MIT)

一个高价值漏洞采集与推送服务 | collect valueable vulnerability and push it

Go 645Updated: 2 y ago License: Permissive (MIT)

Windows 权限提升 BadPotato

C# 643Updated: 2 y ago License: No License (No License)

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

Java 640Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Python 637Updated: 2 y ago License: Permissive (MIT)

MSDAT: Microsoft SQL Database Attacking Tool

Python 635Updated: 4 y ago License: No License (No License)

🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)

Go 635Updated: 2 y ago License: Permissive (MIT)

A python script to scan for Apache Tomcat server vulnerabilities.

Python 635Updated: 2 y ago License: No License (No License)

All in One Recon Tool for Bug Bounty

Python 633Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Java RMI Vulnerability Scanner

Java 632Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)

Shell 631Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Sandman is a NTP based backdoor for red team engagements in hardened networks.

C# 631Updated: 2 y ago License: Permissive (BSD-2-Clause)

Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.

Python 630Updated: 2 y ago License: No License (No License)

Use unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.

Shell 629Updated: 2 y ago License: Permissive (MIT)

A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities

Python 623Updated: 2 y ago License: Permissive (MIT)

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

Python 622Updated: 2 y ago License: Proprietary (Proprietary)

Vagrant VirtualBox environment for conducting an internal network penetration test

Ruby 618Updated: 2 y ago License: No License (No License)

Pentest environment deployer (kali linux + targets) using vagrant and chef.

Ruby 613Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

PowerShell 612Updated: 2 y ago License: Permissive (MIT)

Infosec Wordlists and more.

Python 609Updated: 2 y ago License: No License (No License)

A tool to link a domain with registered organisation names and emails, to other domains.

Python 608Updated: 4 y ago License: Permissive (MIT)

Windows C# LLMNR/mDNS/NBNS/DNS/DHCPv6 spoofer/machine-in-the-middle tool

C# 607Updated: 4 y ago License: Permissive (BSD-3-Clause)

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Go 605Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Open-Source Ransomware As A Service for Linux, MacOS and Windows

Python 604Updated: 3 y ago License: Strong Copyleft (GPL-3.0)

My subdomain enumeration script. It's unique in the way it is built upon.

Shell 604Updated: 2 y ago License: No License (No License)

Tool to bypass 40X response codes.

Go 604Updated: 2 y ago License: Permissive (Apache-2.0)

Recon phase script where i scrape emails from the web

Python 603Updated: 2 y ago License: No License (No License)

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

PowerShell 600Updated: 4 y ago License: No License (No License)

A fast and stealthy credential harvester

Python 599Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Auto Scanning to SSL Vulnerability

Python 596Updated: 2 y ago License: Permissive (MIT)

Apkmod can decompile, recompile, sign APK, and bind the payload with any legit APP

Shell 596Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

WAFNinja is a tool which contains two functions to attack Web Application Firewalls.

Python 595Updated: 3 y ago License: No License (No License)

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

Python 594Updated: 2 y ago License: No License (No License)

收集一些小型实用的工具

PHP 594Updated: 2 y ago License: No License (No License)

Twitter vulnerable snippets

PHP 594Updated: 2 y ago License: No License (No License)

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

Python 587Updated: 2 y ago License: Permissive (BSD-3-Clause)

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Python 581Updated: 2 y ago License: No License (No License)