cloudfox

🦊 CloudFox 🦊 CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure. CLOUDFOX UPDATE REQUIRED: 12/202...

JCS

JCS Joomla Component Scanner made for penetration testing purpose on Joomla CMS JCS can help you with the latest component vulnerablities and exploits. Database can update from several resources and a Crawler has been implemented to find components and component's link. This version supports...

metasploit-framework

Metasploit Framework The Metasploit Framework is an open-source tool released under a BSD-style license. For detailed licensing information, refer to the COPYING file. Latest Version Access the latest version of Metasploit from the Nightly Installers page. Documentation Comprehensive documentatio...

emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

pcc

PHP Secure Configuration Checker Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful...

ArchStrike

ArchStrike ArchStrike is shutting down This should come as no surprise to those who've been paying attention, but the project hasn't been getting maintained for a while now. Over time, most of the killer applications provided by ArchStrike have gained official upstream packages, and the list of...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE is a Static analysis Tool that Targets ios applications and brings important information such as Links, interesting files .json,cer,der,api and is very useful to show good results when you pentesting ios apps What new in this tool ✅Fast & easy to use ✅Get binary info like...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

machine_learning_security

Machine Learning and Security Source codes about machine learning and security. Line up. Cyber security and Machine Learning course The elementary training course of Machine learning for security engineer. Vulnerabilities of Machine Learning Summary of Machine Learning vulnerability. Analytics...

Group3r

by Mike Loss @mikeloss with help from @LukeHealy, @Sh3r4, and @LegendOfLynkle Development of Group3r was generously supported by my previous employer: OK BUT WTF IS IT DO? Like its ancestors, Group3r is a tool for pentesters and red teamers to rapidly enumerate relevant settings in AD Group Polic...

HackTools

Welcome to HackTools ! Introduction — Preview — Install — Build — Support !NOTE Psst... Loved HackTools? 👀 Check out Penflow - our new security testing companion! Try it at map.penflow.sh 🚀 !NOTE Dear Users, We're excited to announce a major revamp of our app! Due to recent changes and multiple...

pentest-book

description: - This book contains a bunch of info, scripts and knowledge used during my pentests. /home/six2dez/.pentest-book Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram@six2dez, Twitter@six2dez1 or...

inceptor

🚩 This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/ 🚩 Sponsors If you want to sponsors this project and have the latest updates on Inceptor, latest issues fixed, latest features, please support us on...

userefuzz

User-Agent , X-Forwarded-For and Referer SQLI Fuzzer made with python Works onlinux and unix based systems Legal Disclaimer Usage of userefuzz for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws...

JWTweak

JWTweak Introduction JWTweak is a guided, fully-offline JWT security-testing toolkit. It detects the algorithm of an input token, analyses it for risky configuration, recommends the attacks that fit, and walks you through each one — no flags to memorise. Just run it: python3 JWTweak.py Paste a...

lorsrf

LORSRF - 2.1 Lorsrf is a powerful web penetration testing tool designed to identify parameters that can be exploited for SSRF or Out-of-band resource load attacks. By adding an OAST host like Burp Collaborator to the parameter value, Lorsrf can generate an HTTP request that is received in Burp...

wstg

OWASP Web Security Testing Guide Welcome to the official repository for the Open Worldwide Application Security Project® OWASP® Web Security Testing Guide WSTG. The WSTG is a comprehensive guide to testing the security of web applications and web services. Created by the collaborative efforts of...

waf-checker

A powerful web application to test how well your Web Application Firewall WAF protects against common attack vectors. → waf-checker.com ← Features Security Testing 19+ attack categories out of the box: SQL Injection, XSS, Path Traversal, Command Injection, SSRF, NoSQL Injection, LFI, LDAP...