SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
70,234 visible repositories in the index
1–24 of 73 · Most stars
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods
- ddos
- ddos-attacks
- ddos-tool
- attack
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
Exploitation Framework for Embedded Devices
An HTTP toolkit for security research.
- mitm
- proxy
- http
- pentesting
hydra
- penetration-testing
- password-cracker
- network-security
- hydra
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- java
- deserialization
- gadget
- exploit
This is a multi-use bash script for Linux systems to audit wireless networks.
- evil-twin
- wps
- security
- beef
Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.
- badusb
- badusb-payloads
- flipper-zero
- flipperzero
The all-in-one browser extension for offensive security professionals 🛠
- reverse-shell
- hacking
- hack-tools
- chrome-extension
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
- attack
- auto
- golang
- hacker
The Official USB Rubber Ducky Payload Repository
- badusb
- ducky-payloads
- duckyscript
- hak5
Fluxion is a remake of linset by vk496 with enhanced functionality.
- fluxion
- handshake
- linset
- fakeap
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
- android
- backdoor
- python
- reverse-shell
Phishing Tool & Information Collector
- phishing
- python
- pentesting
- undead
Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
Git All the Payloads! A collection of web attack payloads.
- payload
- payloads
- xss
- sqli
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
- burpsuite
- intruder
- payloads
- fuzz-lists