SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
79,841 visible repositories in the index
1–12 of 12 · Most stars
Six Degrees of Domain Admin
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
Six Degrees of Domain Admin
CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
- bugbounty
- subdomain-enumeration
- scanner
- enumeration
Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
- bypass-cloudflare
- bypass-hostname
- bypass-waf
- dnssec
The SpecterOps project management and reporting engine
- reporting
- penetration-testing
- red-team
- informationsecurity
XSS spider - 66/66 wavsep XSS detected
Rule Processor Y is a next-gen Rule processor with complex multibyte character support built to support Hashcat
- cybersecurity
- hashcat
- hashcat-rules
- johntheripper
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
- hashcat
- jtr
- mdxfind
- ngram