Security Testing Libraries - Page 3

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

Python 2372Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

HTML 2371Updated: 10 mo ago License: Permissive (Apache-2.0)

Find leaked secrets via github search

Python 2353Updated: 1 y ago License: Permissive (Apache-2.0)

Automatic SSRF fuzzer and exploitation tool

Python 2321Updated: 10 mo ago License: Permissive (MIT)

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

C 2297Updated: 10 mo ago License: Permissive (MIT)

This repository contains the scanner component for Greenbone Community Edition.

C 2262Updated: 10 mo ago License: Strong Copyleft (GPL-2.0)

game of active directory

PowerShell 2259Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

Java 2228Updated: 11 mo ago License: Permissive (MIT)

A script that you can run in the background!

Shell 2223Updated: 10 mo ago License: Permissive (MIT)

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

Python 2215Updated: 1 y ago License: Proprietary (Proprietary)

DNS Enumeration Script

Python 2212Updated: 11 mo ago License: Strong Copyleft (GPL-2.0)

SSRF (Server Side Request Forgery) testing resources

Python 2206Updated: 10 mo ago License: No License (No License)

LKM Linux rootkit

C 2193Updated: 10 mo ago License: No License (No License)

Privilege Escalation Project - Windows / Linux / Mac

Python 2184Updated: 1 y ago License: No License (No License)

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Python 2155Updated: 11 mo ago License: Permissive (BSD-2-Clause)

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

PowerShell 2133Updated: 10 mo ago License: Permissive (MIT)

Privilege Escalation Enumeration Script for Windows

PowerShell 2102Updated: 10 mo ago License: Permissive (BSD-3-Clause)

一个红队知识仓库

HTML 2093Updated: 10 mo ago License: No License (No License)

An evil RAT (Remote Administration Tool) for macOS / OS X.

Python 2074Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Automate Your Application Security Orchestration And Correlation (ASOC) Using ArcherySec.

Python 2064Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

cve-search - a tool to perform local searches for known vulnerabilities

Python 2054Updated: 11 mo ago License: Strong Copyleft (AGPL-3.0)

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.

Shell 2033Updated: 10 mo ago License: Permissive (Apache-2.0)

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

HTML 2024Updated: 10 mo ago License: Permissive (MIT)

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Python 2023Updated: 11 mo ago License: Strong Copyleft (GPL-3.0)

Rust Weaponization for Red Team Engagements.

Rust 2010Updated: 10 mo ago License: No License (No License)

Red Teaming Tactics and Techniques

PowerShell 2004Updated: 3 y ago License: No License (No License)

Koadic C3 COM Command & Control - JScript RAT

Python 2002Updated: 3 y ago License: Permissive (Apache-2.0)

👻Stowaway -- Multi-hop Proxy Tool for pentesters

Go 1958Updated: 11 mo ago License: Permissive (MIT)

A database of PHP security advisories

PHP 1931Updated: 1 y ago License: Permissive (Unlicense)

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

Python 1925Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

PowerShell 1924Updated: 10 mo ago License: Permissive (MIT)

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

Python 1914Updated: 11 mo ago License: No License (No License)

Snoop — инструмент разведки на основе открытых данных (OSINT world)

Python 1913Updated: 10 mo ago License: Proprietary (Proprietary)

无状态子域名爆破工具

Go 1912Updated: 10 mo ago License: Permissive (MIT)

Operational information regarding the log4shell vulnerabilities in the Log4j logging library.

Python 1891Updated: 1 y ago License: No License (No License)

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

Python 1888Updated: 10 mo ago License: Permissive (MIT)

Know the dangers of credential reuse attacks.

Python 1887Updated: 10 mo ago License: Permissive (MIT)

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

Python 1872Updated: 11 mo ago License: Permissive (Apache-2.0)

使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。

Shell 1872Updated: 10 mo ago License: No License (No License)

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

Python 1867Updated: 1 y ago License: No License (No License)

Rockyou for web fuzzing

Shell 1841Updated: 11 mo ago License: No License (No License)

:cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

Python 1838Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

JavaScript 1836Updated: 1 y ago License: Permissive (Apache-2.0)

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

Perl 1806Updated: 10 mo ago License: Permissive (MIT)

A container repository for my public web hacks!

JavaScript 1797Updated: 11 mo ago License: No License (No License)

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

Go 1797Updated: 10 mo ago License: Permissive (Apache-2.0)

The Last Web Recon Tool You'll Need

Python 1793Updated: 11 mo ago License: Permissive (MIT)

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

Java 1783Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

A post-exploitation powershell tool for extracting juicy info from memory.

PowerShell 1759Updated: 12 mo ago License: No License (No License)

Venom - A Multi-hop Proxy for Penetration Testers

Go 1743Updated: 10 mo ago License: Permissive (MIT)