SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
67,262 visible repositories in the index
1–17 of 17 · Most stars
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
- powershell
- nishang
- security
- red-team
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
- rsa-attack
- rsa
- cryptography
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
- exploit
- 0day
- poc
- getshell
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
- penetrationtesting
- pentesting
- pentesting-tools
- penetration-testing
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
- cloudflare
- tor
- ip
- database
CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
- hashcat
- jtr
- mdxfind
- ngram
Collection of danish base wordlists for cracking danish passwords (Hashcat, John the Ripper etc.)
- password-cracking
- wordlists
- hashcat-lists
- hashcat
A tool that converts Bitwarden's data into a hashcat-suitable hash
Quickly look up hashes in your terminal using the HashMob API 🔥
- data-breaches
- hash-cracking
- hash-lookup
- hashcat
Extract hashes from the MongoDB database server to a hash format that hashcat accepts: -m 24100 (SCRAM-SHA-1) or -m 24200 (SCRAM-SHA-256)