An HTTP toolkit for security research.
- mitm
- proxy
- http
- pentesting
Repository Index
76,356 visible repositories in the index
1–24 of 28 · Most stars
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
HTTP parameter discovery suite.
- api-testing
- api-fuzzer
- api-fuzzing
- recon
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
- http2
- command-and-control
- c2
- golang
Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange
An OOB interaction gathering server and client library
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
- hacking
- penetration-testing
- pentesting-tools
- powershell
Neo-reGeorg is a project that seeks to aggressively refactor reGeorg
- regeorg
- neoreg
- reduh
- socks-proxy
高性能 HTTP 正向代理工具 | A high-performance http tunneling tool
- http-socks5
- proxy
- http-proxy
- socks5
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
- bugbounty
- subdomain-enumeration
- scanner
- enumeration
A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440)
- password-cracking
- machine-learning
- deep-learning
- gan
A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
- burp-extensions
- burpsuite-extender
- update-cookie
- cookie
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
- security
- owasp
- owtf
- python
403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evidence.
- waf-bypass
- pentesting
- bugbounty
- ctf
Transparent SSL/TLS interception
The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by https://kasper-oswald.de. The device is available at https://shop.kasper.it. For further information see the Getting Started Page https://rawgit.com/emsec/ChameleonMini/master/Doc/Doxygen/html/_page__getting_started.html or the Wiki tab above.
- nfc
- card
- contactless
- rfid
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
Fast HTTP enumerator
- http
- fuzz
- fuzzer
- enumerator
Automated Tactics Techniques & Procedures
- empire
- tactics
- procedure
- cybersecurity