aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

HazProne

Hazprone HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand aws resources enabling you to pentest Vulnerabilities within, and hence, gain a better understanding of what could go wrong and why!! The framework helps gain practical,...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

Information Security: GDPR Compliance & Incident Response A comprehensive security and privacy compliance framework for high-risk biometric surveillance systems CCTV, Facial Recognition Technology, and centralised contact tracing, including comparative framework analysis ISO 27001, Cyber...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

ScareCrow

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of ScareCrow or to submit an issue, reference https://github.com/Tylous/ScareCrow. ScareCrow More Information If you want to learn more about the techniques utilized in this framework please take a look at Part 1 and Part 2 Description...

whad-client

WHAD: Wireless HAcking Devices This framework provides a set of command-line tools to play with/hack/explore wireless protocols and devices as well as a library to create powerful wireless tools to use with hardware devices running a compatible firmware. Installation Installation is pretty...

B2R2

B2R2 B2R2 is a fully managed binary analysis framework written in F. It provides a rich set of algorithms, functions, and tools for reverse engineering, program analysis, and binary-level inspection. The name B2R2 takes inspiration from R2-D2, the iconic robot from Star Wars. Originally named B2-...

Loki

🧙‍♂️ Loki Command & Control Loki is a stage-1 command and control C2 framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015. Developed for red team operations, Loki enables evasion of security software and bypasses application controls by exploiting...

cai

Cybersecurity AI CAI Professional Edition with unlimited alias1 tokens | 📊 View Benchmarks | 🚀 Learn More 🔓 Community Edition Research & Learning · Perfect for Researchers & Students pip install cai-framework ✅ Free for research 🤖 300+ AI models 🌍 Community driven 📚 Open source 🔧 Extensible...

mysql-baseline

DevSec MySQL Baseline This Compliance Profile ensures, that all hardening projects keep the same quality. https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/mysqlhardening https://github.com/dev-sec/chef-mysql-hardening https://github.com/dev-sec/puppet-mysql-hardening...

Penetration-Testing-on-Metasploitable2

Internship Project 2 — Penetration Testing on Metasploitable2 Summary: This project demonstrates a complete penetration testing workflow: reconnaissance, enumeration, exploitation, post-exploitation validation, and mitigation recommendations. The target used is Metasploitable2 and the attack box ...

barq

barq barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to...

redamon

Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...

AutoSploit

Docker deployment instructions tl;dr Using docker-compose: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker docker-compose run --rm autosploit Using just Docker: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker If you wish to edit default postgr...

Reconator

Reconator is an automated reconnaissance framework. Add a target — alone or in bulk — and the worker runs 17 recon modules against it subdomain enum, dirbrute, JS/link mining, WAF fingerprint, takeover check, GF triage, and more. The dashboard shows per-module output as it lands. Stack Layer| Tec...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

Ivy

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Ivy or to submit an issue, reference https://github.com/Tylous/Ivy. More Information If you want to learn more about the techniques utilized in this framework as well as the defensive measure to help defend against it, please take a...

LazyOwn

LazyOwn RedTeam Framework with AI agents, Linux BOF beacon, YARA+Nuclei marketplace 837 CLI commands. Multi-operator C2. 153 MCP tools for AI agents. The First OSS C2 with Linux native c BOF support + built-in YARA/Nuclei marketplaces. Install in one command curl -fsSL...

Evtx_Log_Browser

Evtx Log xml Browser Browse through Windows evtx event logs & export to xml Latest version ishere Dependencies: .NET Framework 4.8 Powershell Version: 5.1...

SSRFmap

SSRFmap SSRF are often used to leverage actions on other services, this framework aims to find and exploit these services easily. SSRFmap takes a Burp request file as input and a parameter to fuzz. Server Side Request Forgery or SSRF is a vulnerability in which an attacker forces a server to...