Repository Index

Automatic SQL injection and database takeover tool

• sql-injection
• detection
• exploitation
• python

Small and highly portable detection tests based on MITRE's ATT&CK.

• mitre
• mitre-attack

Scapy: the Python-based interactive packet manipulation program & library.

• scapy
• python
• network
• network-analysis

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

• penetration-testing
• red-teaming
• windows
• fireeye-flare

TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.

• ai
• bug-detection
• code-audit
• code-quality

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• anti-analysis
• anti-debugging
• anti-sandbox
• anti-vm

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

• exploit
• 0day
• poc
• getshell

Hunt for security weaknesses in Kubernetes clusters

• vulnerabilities
• kubernetes-clusters
• hacktoberfest

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

• open-source
• pentest
• pentesting
• readteaming

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

• hacking-vps
• bug-bounty
• tmux
• axiom

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Automated NoSQL database enumeration and web application exploitation tool.

• nosql
• nosql-databases
• penetration-testing
• scanner

🚀 Caido releases, wiki and roadmap

• security
• proxy
• pentesting
• bugbounty

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

• cloudflare
• tor
• ip
• database

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

• penetration-testing
• pentesting-tool
• reporting
• reporting-tool

A Python based ingestor for BloodHound

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

• ai
• burp-extensions
• burpsuite
• cybersecurity

FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.

Advanced CPU-based password recovery utility

Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:

• pwnbox
• rogueap
• wifi-hacking
• wifi-security

Generate smart and powerful wordlists

• wordlist
• password
• hacking-tool
• password-cracking

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar