47,133 repositories indexed
1–24 of 37 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
Directory/File, DNS and VHost busting tool written in Go
Common User Passwords Profiler (CUPP)
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
A toolset to make a system look as if it was the victim of an APT attack
Automated Security Testing For REST API's
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
A utility to safely generate malicious network traffic patterns and evaluate controls.
Generate smart and powerful wordlists
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
Advanced keyboard-walk generator with configureable basechars, keymap and routes
High-Performance word generator with a per-position configureable charset
dll injection tool that implements various methods
Standalone password candidate generator using the PRINCE algorithm
Fast HTTP enumerator
A Linux packet crafting tool.