ArchStrike

ArchStrike ArchStrike is shutting down This should come as no surprise to those who've been paying attention, but the project hasn't been getting maintained for a while now. Over time, most of the killer applications provided by ArchStrike have gained official upstream packages, and the list of...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

CVE-2019-9053

CVE-2019-9053 CVE-2019-9053 Exploit for Python 3 Last tested: 28-12-2021 Tested on: Python 3.10.1 Original Exploit Source: https://www.exploit-db.com/exploits/46635 Users take full responsibility for any actions performed using this tool. If these terms are not acceptable to you, then do not use...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE is a Static analysis Tool that Targets ios applications and brings important information such as Links, interesting files .json,cer,der,api and is very useful to show good results when you pentesting ios apps What new in this tool ✅Fast & easy to use ✅Get binary info like...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

fuzz-wooyun-org

fuzz-wooyun-org WooYun Fuzz Library...

machine_learning_security

Machine Learning and Security Source codes about machine learning and security. Line up. Cyber security and Machine Learning course The elementary training course of Machine learning for security engineer. Vulnerabilities of Machine Learning Summary of Machine Learning vulnerability. Analytics...

Group3r

by Mike Loss @mikeloss with help from @LukeHealy, @Sh3r4, and @LegendOfLynkle Development of Group3r was generously supported by my previous employer: OK BUT WTF IS IT DO? Like its ancestors, Group3r is a tool for pentesters and red teamers to rapidly enumerate relevant settings in AD Group Polic...

HackTools

Welcome to HackTools ! Introduction — Preview — Install — Build — Support !NOTE Psst... Loved HackTools? 👀 Check out Penflow - our new security testing companion! Try it at map.penflow.sh 🚀 !NOTE Dear Users, We're excited to announce a major revamp of our app! Due to recent changes and multiple...

pentest-book

description: - This book contains a bunch of info, scripts and knowledge used during my pentests. /home/six2dez/.pentest-book Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram@six2dez, Twitter@six2dez1 or...

ONUS

ONUS - Automated Vulnerability Assessment & Penetration Testing Built by maverickaayush. A locally-hosted, air-gapped VAPT tool: point it at an authorized target domain and it runs 8 scanning modules in parallel, deterministically scores every finding CVSS v3.1, optionally adds AI-generated...

inceptor

🚩 This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/ 🚩 Sponsors If you want to sponsors this project and have the latest updates on Inceptor, latest issues fixed, latest features, please support us on...

userefuzz

User-Agent , X-Forwarded-For and Referer SQLI Fuzzer made with python Works onlinux and unix based systems Legal Disclaimer Usage of userefuzz for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws...

JWTweak

JWTweak Introduction JWTweak is a guided, fully-offline JWT security-testing toolkit. It detects the algorithm of an input token, analyses it for risky configuration, recommends the attacks that fit, and walks you through each one — no flags to memorise. Just run it: python3 JWTweak.py Paste a...

Vulnerable-Web-Application

Vulnerable Web Application What is Vulnerable-Web-Application Vulnerable-Web-Application is a website that is prepared for people who are interested in web penetration and who want to have information about this subject or to be working. In fact, the website is quite simple to install and use...

lorsrf

LORSRF - 2.1 Lorsrf is a powerful web penetration testing tool designed to identify parameters that can be exploited for SSRF or Out-of-band resource load attacks. By adding an OAST host like Burp Collaborator to the parameter value, Lorsrf can generate an HTTP request that is received in Burp...

wstg

OWASP Web Security Testing Guide Welcome to the official repository for the Open Worldwide Application Security Project® OWASP® Web Security Testing Guide WSTG. The WSTG is a comprehensive guide to testing the security of web applications and web services. Created by the collaborative efforts of...

waf-checker

A powerful web application to test how well your Web Application Firewall WAF protects against common attack vectors. → waf-checker.com ← Features Security Testing 19+ attack categories out of the box: SQL Injection, XSS, Path Traversal, Command Injection, SSRF, NoSQL Injection, LFI, LDAP...

jmxbf

jmxbf - A brute force program to test weak accounts configured to access a JMX Registry Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniele Costa, daniele dot costa at nccgroup dot trust http://www.github.com/nccgroup/jmxbf Released under AGPL see LICENSE for...