Security Testing Libraries - Page 2

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Python 4183Updated: 11 mo ago License: Strong Copyleft (GPL-3.0)

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Python 4120Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Python 4086Updated: 10 mo ago License: Permissive (MIT)

Open Source Vulnerability Management Platform

Python 4018Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Ladon大型内网渗透工具，可PowerShell模块化、可CS插件化、可内存加载，无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。10.10.6内置230个功能模块,网络资产探测模块32个通过多种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等信息，高危漏洞检测16个含MS17010、Zimbra、Exchange

PowerShell 3980Updated: 10 mo ago License: Permissive (MIT)

A pretty sweet vulnerability scanner

Python 3913Updated: 10 mo ago License: Permissive (BSD-3-Clause)

Automated All-in-One OS Command Injection Exploitation Tool.

Python 3872Updated: 10 mo ago License: Proprietary (Proprietary)

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Python 3823Updated: 10 mo ago License: Proprietary (Proprietary)

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

Python 3753Updated: 11 mo ago License: No License (No License)

The LAZY script will make your life easier, and of course faster.

Shell 3642Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Go 3641Updated: 10 mo ago License: Permissive (BSD-3-Clause)

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

Python 3617Updated: 11 mo ago License: No License (No License)

My simple Swiss Army knife for http/https troubleshooting and profiling.

Shell 3594Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

快速搭建各种漏洞环境(Various vulnerability environment)

Shell 3563Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

The ultimate WinRM shell for hacking/pentesting

Ruby 3509Updated: 10 mo ago License: Weak Copyleft (LGPL-3.0)

Common User Passwords Profiler (CUPP)

Python 3501Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Python 3382Updated: 11 mo ago License: Strong Copyleft (GPL-3.0)

Study Notes For Web Hacking / Web安全学习笔记

Python 3366Updated: 10 mo ago License: Permissive (CC0-1.0)

Knock Subdomain Scan

Python 3327Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

Java 3321Updated: 10 mo ago License: Permissive (Apache-2.0)

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

Python 3313Updated: 11 mo ago License: Strong Copyleft (GPL-3.0)

Git All the Payloads! A collection of web attack payloads.

Shell 3305Updated: 11 mo ago License: Strong Copyleft (GPL-3.0)

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

Python 3214Updated: 1 y ago License: Permissive (MIT)

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Python 3198Updated: 11 mo ago License: Strong Copyleft (GPL-2.0)

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

Python 3138Updated: 10 mo ago License: Proprietary (Proprietary)

A fast sub domain brute tool for pentesters

Python 3126Updated: 11 mo ago License: No License (No License)

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Python 3085Updated: 10 mo ago License: Permissive (MIT)

Fully automated offensive security framework for reconnaissance and vulnerability scanning

Python 3084Updated: 3 y ago License: Permissive (MIT)

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

PowerShell 3052Updated: 11 mo ago License: Permissive (MIT)

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

Python 3002Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

A python script that finds endpoints in JavaScript files

Python 2986Updated: 11 mo ago License: Permissive (MIT)

Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).

Python 2893Updated: 10 mo ago License: Proprietary (Proprietary)

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

Go 2850Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

DefectDojo is a DevSecOps and vulnerability management tool.

HTML 2848Updated: 10 mo ago License: Permissive (BSD-3-Clause)

A collection of custom security tools for quick needs.

Python 2843Updated: 10 mo ago License: No License (No License)

Automation for internal Windows Penetrationtest / AD-Security

PowerShell 2830Updated: 10 mo ago License: Permissive (BSD-3-Clause)

Weaponized web shell

Python 2827Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

A high performance offensive security tool for reconnaissance and vulnerability scanning

Python 2793Updated: 11 mo ago License: Permissive (MIT)

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

Python 2753Updated: 10 mo ago License: Proprietary (Proprietary)

Linux enumeration tool for pentesting and CTFs with verbosity levels

Shell 2742Updated: 11 mo ago License: Strong Copyleft (GPL-3.0)

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

Python 2564Updated: 10 mo ago License: Permissive (MIT)

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

C 2563Updated: 10 mo ago License: Strong Copyleft (AGPL-3.0)

File upload vulnerability scanner and exploitation tool.

Python 2546Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Python Remote Administration Tool (RAT)

Python 2539Updated: 10 mo ago License: Proprietary (Proprietary)

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

PowerShell 2526Updated: 10 mo ago License: Permissive (MIT)

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

PHP 2501Updated: 10 mo ago License: Permissive (MIT)

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Rust 2479Updated: 10 mo ago License: Permissive (MIT)

An ArchLinux based distribution for penetration testers and security researchers.

Shell 2465Updated: 10 mo ago License: Proprietary (Proprietary)

An OOB interaction gathering server and client library

Go 2434Updated: 10 mo ago License: Permissive (MIT)

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

Python 2429Updated: 10 mo ago License: Permissive (BSD-2-Clause)