AirStrike

/ \ / | | | | | / \ | || '|\ \ | || '|| || |/ / / \ / \ | || | || | | | | || | / // \|||| |/ ||| ||||\ | AirStrike is a Flask + Socket.IO web interface for orchestrating Wi-Fi assessment tools from a browser. This build intentionally focuses on the three most stable attacks in the suite:...

GyoiThon

GyoiThon : Next generation penetration test tool Japanese page is here. Presentation January 25th,2018:JANOG41 March 23th,2018:Black Hat ASIA 2018 Arsenal August 12th,2018:DEFCON26 DemoLabs October 24th,2018:OWS in CSS2018 November 3rd,2018:AV TOKYO 2018 HIVE December 22-23th,2018:SECCON YOROZU...

Guinevere

Guinevere - Automated Security Assessment Reporting Tool This tool works with Gauntlet a private tool to automate assessment reporting. Main features include: Generate Assessment Report Export Assessment Generate Retest Report Generate Pentest Checklist Generate Assessment Report This option will...

cscan

cscan Faraday Continuous Scanning More information: http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html...

copyfail-guard

CopyFail Guard / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / // / / / / // / // / // / / / // / // ./, // ,/// /,/,// ,/ // // Fast, auditable Linux exposure assessment and mitigation for CVE-2026-31431 “Copy Fail” while kernels get patched...

pingcastle

PingCastle by Netwrix Stay Connected & Contribute We welcome all PingCastle users: open source contributors, IT admins, and security professionals, to get involved and help shape the future of PingCastle. Join the Netwrix Community : community.netwrix.com Get announcements, view the roadmap, subm...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 : Palo Alto OS Command Injection - Proof of Concept POC Disclamer This is a tool for security engineering and vulnerability assessment teams to quickly verify the existance of the vulnerability on their assets across the environment...

CVE-2024-6387

CVE-2024-6387 Bulk Scanning Tool for OpenSSH CVE-2024-6387 and 19 Other OpenSSH CVEs Overview Introducing a new OpenSSH bulk scanning tool! Quickly scan multiple SSH servers for security vulnerabilities like CVE-2024-6387, CVE-2006-5051, and others. This tool is designed for scanning and reportin...

BLE-Replay

BLE-Replay BLE-Replay is a Bluetooth Low Energy BLE peripheral assessment tool. It pulls/consumes Bluetooth HCI logs from your mobile device and extracts all of the writes that the central makes to a peripheral. This data can be replayed using most Bluetooth dongles from a Linux host, or saved to...

Prismatica

Prismatica In Development Prismatica is a modular C2 Interface hooked into the Diagon Command and Control Toolkit. There are multiple tools and components of the Prismatica Marketplace. All Prism Apps are built around the Emergence Fabric. To get started begin with Emergence Prismatica Applicatio...

reconmap

Reconmap ペネトレーションテスト管理、自動化、およびレポートプラットフォーム Reconmap は、セキュリティ専門家がエンゲージメントライフサイクル全体を通じてサポートするために設計されたオープンソースの脆弱性評価およびペネトレーションテストプラットフォームです。ペネトレーションテスターや情報セキュリティチームがセキュリティ評価を効率的に計画、実行、報告することを可能にします。 ワークフローを効率化し、コラボレーションを促進することで、Reconmapは初期偵察から最終報告までの時間を短縮し、品質を損なうことなく、より速く、より整理された結果を提供します。 機能...

trigmap

About Trigmap is a bash wrapper for Nmap. You can use it to easily run nmap scans and, especially, to collect information into a well organized directory hierarchy. The use of Nmap makes the script portable easy to run not only on Kali Linux and very efficient thanks to the optimized Nmap...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

AD_Enumeration_Hunt

ADEnumerationHunt Description Welcome to the AD Pentesting Toolkit! This repository contains a collection of PowerShell scripts and commands that can be used for Active Directory AD penetration testing and security assessment. The scripts cover various aspects of AD enumeration, user and group...

xray

Bienvenido a xray 👋 Una potente herramienta de evaluación de seguridad 🏠Documentación de uso • ⬇️Descargar xray • ⬇️Descargar xpoc • ⬇️Descargar xapp • 📖Repositorio de plugins Versión en inglés Nota: La serie xray no es de código abierto. Simplemente descargue el binario compilado. Este repositorio...

Carnivore

Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Released under the AGPL license https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Microsoft External Assessment Tool...

ravage

Ravage Ravageは、あなたが所有している、または明示的にテストを許可された実行中のWebアプリケーションを評価するための、エビデンス優先のCLIです。決定的な偵察と検証を、オプションのモデル駆動型攻撃ループと組み合わせ、スコープ、認証、トラフィック計上、エビデンスをコード管理された境界内に保持します。 Ravageは1.0未満の研究用アルファ版です。使い捨て環境と文書化された交戦規則を使用してください。セキュリティテストはアプリケーションの状態を変更する可能性があります。Ravageは発見事項を修復したり、修正を展開したりしません。 クイックスタート · 認証 · 結果 · 機...

powersap

PowerSAP PowerSAPは、公開されているすべてのツール（Bizploit、Metasploitの補助モジュール、インターネット上のPythonスクリプトなど）で利用される一般的かつ効果的なテクニックを、シンプルなPowerShellで再実装したものです。この再実装には、新規または未公開の脆弱性は含まれていません。 PowerSAPは、.Netコネクタ「NCo」を使用してSAP RFCにアクセスできます。 クレジット すべてのクレジットは以下に帰属します: Onapsis - Mariano, Jordan… ERPScan @chipik ERPSEC - Joris van...

powersap

PowerSAP PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability. PowerSAP allo...

metahub

MetaHub 는 취약성 관리를 위한 자동화된 컨텍스트 기반 보안 결과 강화 및 영향 평가 도구입니다. AWS Security Hub 또는 ASFF 호환 보안 스캐너와 함께 사용할 수 있습니다. 쓸모없는 심각도에 의존하지 말고 YOUR 컨텍스트에 기반한 영향 점수 정의로 전환하세요. 목차 설명 빠른 실행 컨텍스트 영향 고수준 아키텍처 사용 사례 구성 Python으로 실행 Docker로 실행 Lambda로 실행 Security Hub 사용자 지정 액션으로 실행 AWS 인증 Security Hub 구성 컨텍스트 구성 입력 출력 필...