SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
CTF framework and exploit development library
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
This is a webshell open source project
- webshell
- webshell-sniper
- php
- jsp
Six Degrees of Domain Admin
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
Weaponized web shell
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A tool to abuse Exchange services
- mapi
- exchange
- shells
- pentesting
Open-Source Shellcode & PE Packer
- shellcode
- antivirus-evasion
- redteam
- hacktoberfest
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
Reflective PE packer.
- packer
- pe
- crypter
- assembly
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
- powershell
- golang
- python
- clueless-agents
Password cracking rules and masks for hashcat that I generated from cracked passwords.
JShell - Get a JavaScript shell with XSS.