47,133 repositories indexed
1–24 of 68 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
World's fastest and most advanced password recovery utility
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
Web application fuzzer
w3af: web application attack and audit framework, the open source web vulnerability scanner.
The repository host gives no description.
Automated NoSQL database enumeration and web application exploitation tool.
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
The Offensive Manual Web Application Penetration Testing Framework.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
Hashtopolis - distributed password cracking with Hashcat
Small utilities that are useful in advanced password cracking
Crack password hashes without the fuss :cat2:
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.