ravage

Ravage Ravage is an evidence-first CLI for assessing a running web application that you own or are explicitly authorized to test. It combines deterministic reconnaissance and validation with an optional model-driven attack loop, while keeping scope, authentication, traffic accounting, and evidenc...

Guinevere

Guinevere - Automated Security Assessment Reporting Tool This tool works with Gauntlet a private tool to automate assessment reporting. Main features include: Generate Assessment Report Export Assessment Generate Retest Report Generate Pentest Checklist Generate Assessment Report This option will...

hackbox

HackB0x v2.0 HackBox هو مزيج من الأدوات والتقنيات الرائعة. HackBox هي أداة شاملة وقوية تجمع بين مجموعة متنوعة من التقنيات المتطورة لتمكين محترفي الأمن من تحديد ومعالجة الثغرات الأمنية في تطبيقات الويب والشبكات. الأداة مجهزة بمجموعة واسعة من الوظائف التي تمكن المستخدمين من إجراء تقييمات أمنية...

LAMMA-beta

LAMMA BETA Vulnerability Assessment Framework for all the Crypto Implimentations. An Open Source Initiative by - SECURITY MONX Lamma Framework Documentation beta File Name : README Author : @ajithatti Org : Security Monx Version : 0.0.1 Purpose : Gives introduction of Lamma Framework beta Table O...

PingCastleCloud

Ping Castle Cloud important: the source code has been moved to the main PingCastle project. this project is now archived. Introduction Ping Castle Cloud is a tool designed to assess quickly the AzureAD security level with a methodology based on risk assessment and a maturity framework. It does no...

AirStrike

/ \ / | | | | | / \ | || '|\ \ | || '|| || |/ / / \ / \ | || | || | | | | || | / // \|||| |/ ||| ||||\ | AirStrike is a Flask + Socket.IO web interface for orchestrating Wi-Fi assessment tools from a browser. This build intentionally focuses on the three most stable attacks in the suite:...

AutoGadgetFS

Ethereum Donations : 0xA919e40ddB0563918dDc174320D91992e0048477 Table of Contents 1. What's AutoGadgetFS ? 2. Requirments 3. The Setup a. Device testing only b. Minimal agfs in the middle setup c. Complete agfs in the middle setup with debugging support 4. USB Device class support 5. Capabilities...

kstg

OWASP KSTG OWASP Kubernetes Security Testing Guide Our Vision Create a comprehensive manual for Kubernetes Cluster Security Assessment We are creating a comprehensive testing guide for Kubernetes cluster security assessment that covers a top down approach to assess the security of a cluster. The...

apk-interceptor

apk-interceptor Android deeplink, Intent, and WebView bridge assessment helper apk-interceptor is a portable Android testing APK for authorized application security assessments. It helps security engineers verify how an Android app handles external entry points such as custom URI schemes,...

cscan

cscan المسح المستمر من فاراداي مزيد من المعلومات: http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html...

gcp_scanner

إخلاء مسؤولية هذا المشروع ليس مشروعًا رسميًا من Google. إنه غير مدعوم من Google وتتنصل Google صراحةً من جميع الضمانات المتعلقة بجودته أو قابليته للتسويق أو ملاءمته لغرض معين. GCP Scanner هذه أداة مسح لموارد GCP يمكنها المساعدة في تحديد مستوى الوصول الذي تمتلكه بعض بيانات الاعتماد على GCP. صُممت...

CMD_Bypass_Assessment

CMD Bypass Method Analysis CMD Bypass Method Analysis is a PowerShell script that automatically tests CMD bypass methods on Windows systems and evaluates the results. The script checks for various CMD bypass methods and saves the results to a text file, providing security recommendations. Use To...

cis-vsphere

🦍 CIS vSphere A tool to assess the compliance of a VMware vSphere environment against the CIS Benchmark for VMware vSphere. Requirements VMware PowerCLI 12.0.0 or higher VMware vSphere 7.0 Read access to the vCenter or ESXi host Usage 1. Clone the repo and navigate to the folder: git clone...

PQC-Scanner

The PQC Network Scanner is a purpose‑built assessment tool designed to help organisations understand their cryptographic exposure as they transition toward a post‑quantum security posture. Unlike traditional TLS scanners that focus solely on certificate validity or classical cryptographic strengt...

reconmap

Reconmap منصة لإدارة اختبار الاختراق وأتمتته وإعداد التقارير Reconmap هي منصة مفتوحة المصدر لتقييم الثغرات واختبار الاختراق، صُممت لمساعدة المتخصصين في الأمن السيبراني طوال دورة حياة المهمة. تتيح لمُختبري الاختراق وفرق أمن المعلومات تخطيط وتنفيذ وإعداد تقارير التقييمات الأمنية بكفاءة. من خلال تبس...

awesome-hacker-search-engines

Awesome Hacker Search Engines A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Email addresses • Domains • URLs • DNS •...

MSFinger

MSFinger - Microsoft Network Service Fingerprinting Tool Version: 1.0 Author: Laurent Gaffie Company: Secorizon Overview MSFinger is a high-performance network fingerprinting tool designed for internal network reconnaissance. It rapidly identifies Microsoft services, detects security...

omnisci3nt

⭐️ If you find this GitHub repo useful, please consider giving it a star! ⭐️ 🕵️‍♂️ Omnisci3nt: Unified Web Reconnaissance Toolkit Omnisci3nt is a comprehensive web reconnaissance and intelligence framework designed for cybersecurity professionals, ethical hackers, and security researchers. It...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

secator

سكين المخترِق السويسري. الميزات • الأوامر المدعومة • التثبيت • الاستخدام • الوثائق • انضم إلينا على Discord! إن secator هو مشغل مهام وسير عمل يُستخدم لتقييمات الأمن. وهو يدعم العشرات من أدوات الأمان المعروفة، وهو مصمم لتحسين إنتاجية مختبرى الاختراق وباحثي الأمن. الميزات قائمة منسقة من الأوامر...