Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
47,133 repositories indexed
49–72 of 113 · Most stars
Bloodhound Reporting for Blue and Purple Teams
A modular vulnerability scanner with automatic report generation capabilities.
A collection of AWS penetration testing junk
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
:key: Hash type identifier (CLI & lib)
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Hacking Toolkit
A friendly car security exploration tool for the CAN bus
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
🔐 A CLI tool to extract server certificates
The AI Agent for Cyber Security.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Security Auditor Utility for GraphQL APIs
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Fast HTTP enumerator
DNS Rebinding Exploitation Framework
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.