Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Cameradar hacks its way into RTSP videosurveillance cameras
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
:key: Hash type identifier (CLI & lib)
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
Quantum Insert
- quantum-insert
- python
- detection
- pcap
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.
- wordlist
- wikipedia
- dictionary
- attack
FETCH THE PASSWORD STRETCHER