ssh-audit

ssh-audit...

serval

A Netcat style backdoor for pentesting and pentest challenges Serval is a lightweight, easy-to-use, binary for spawning reverse and bind shells for pentests or pentesting exercises. Serval is cross platform and can be compiled for both Windows 32 & 64-bit and Linux 32 and 64-bit. Note: Due to the...

P4wnP1_aloa

P4wnP1 A.L.O.A. P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance". 0. How to install The latest image could be found under release tab. The...

Pompem

Pompem - Exploit and Vulnerability Finder Pompem is an open source tool, designed to automate the search for Exploits and Vulnerability in the most important databases. Developed in Python, has a system of advanced search, that help the work of pentesters and ethical hackers. In the current...

Kubestroyer

Kubestroyer Kubestroyer aims to exploit Kubernetes clusters misconfigurations and be the swiss army knife of your Kubernetes pentests Explore the docs » ·...

catsploit

CATSploit🐈 CATSploit es una herramienta de pruebas de penetración automatizada que utiliza el método de Puntuación de Técnicas de Ataque Cibernético CATS y que puede ser utilizada sin la necesidad de un pentester. Actualmente, los pentesters realizaban implícitamente la selección de técnicas de...

idb

Idb idb es una herramienta que simplifica algunas tareas comunes en pentesting e investigación de iOS. Originalmente existía una versión de línea de comandos de la herramienta, pero ya no está en desarrollo, por lo que deberías usar la versión GUI. idb tiene una nueva página principal...

HazProne

Hazprone HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand aws resources enabling you to pentest Vulnerabilities within, and hence, gain a better understanding of what could go wrong and why!! The framework helps gain practical,...

Lockdoor-Framework

Lockdoor v2.3 ⚠️ This project is not maintained anymore. ⚠️ Find more at https://g.co/kgs/TtYRJJP Table of contents Table of contents Changelog 📌 : Badges 📌 : Support me 💰 : Contributors ⭐ : Versions 06/2021 : 2.3 03/2020 : 2.2.3 Blogs & Articles 📰 : Overview 📙 : Features 📙 : Pentesting Tools...

raven

Raven Currently is not being maintained Raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin. Disclaimer root@kitploit: Please do not use this program to do stupid things. The author does not keep any...

sessionprobe

SessionProbe 🚀⚡ SessionProbe is a multi-threaded pentesting tool designed to assist in evaluating user privileges in web applications. It takes a user's session token and checks for a list of URLs if access is possible, highlighting potential authorization issues. SessionProbe deduplicates URL...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

awesome-rust-security

Awesome Rust Security Lista curada de proyectos y recursos asombrosos relacionados con Rust y la seguridad informática Tabla de contenidos Herramientas Seguridad web y en la nube Evaluación de vulnerabilidades Seguridad ofensiva y Red Teaming Detección de amenazas y forensia Criptografía...

AcuAutomate

AcuAutomate AcuAutomate is an unofficial Acunetix CLI tool that simplifies automated pentesting and bug hunting across extensive targets. It's a valuable aid during large-scale pentests, enabling the easy launch or stoppage of multiple Acunetix scans simultaneously. Additionally, its versatile...

wifi-pentesting-guide

WiFi Penetration Testing Guide Index 1. Basic commands 2. Open networks 2.1. Captive portals 2.2. Man in the Middle attack 3. WEP cracking 3.1. No clients 4. WPA2-PSK cracking 4.1. Cracking the 4-way-handshake 4.2. PMKID attack 4.3. AP-less attack 5. WPA2-Enterprise 5.1. Fake Access Points 5.2...

canTot

canTot canTot is a python-based cli framework based on sploitkit and is easy to use because it is similar to working with Metasploit. This similar to an exploit framework but focused on known CAN Bus vulnerabilities or fun CAN Bus hacks. It can also be used as a guide for pentesting vehicles and...

RedRabbit

RedRabbit Acerca de RedRabbit es un script de PowerShell diseñado para ayudar a pentesters a realizar hacking ético RedTeam. El objetivo es destacar lo potente que es PowerShell y cómo puede usarse en tu contra Éticamente. Para ejecutar Puedes ejecutarlo localmente descargando el script o de form...

IoT-Pentest-devices-and-purpose

Dispositivos IoT para Pentest y su Propósito - Edición 2025 Este documento describe las herramientas y hardware más recientes para pruebas de seguridad IoT en 2025, cubriendo diferentes protocolos y tecnologías. Incluye ataques de vanguardia, vulnerabilidades recién descubiertas y herramientas de...

tracy

Tracy Una herramienta de pentesting diseñada para ayudar a encontrar todos los sinks y sources de una aplicación web y mostrar estos resultados de manera digerible. tracy debe usarse durante la fase de mapeo de la aplicación en el pentest para identificar fuentes de entrada y sus correspondientes...