urh

The Universal Radio Hacker URH is a complete suite for wireless protocol investigation with native support for many common Software Defined Radios. URH allows easy demodulation of signals combined with an automatic detection of modulation parameters making it a breeze to identify the bits and byt...

pafish

Pafish Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do. The project is free and open source; the code of all the anti-analysis techniques is publicly available. Pafish executables for...

pyrebox

================ ARCHIVED PROJECT THIS PROJECT HAS BEEN ARCHIVED AND ITS ISSUE QUEUE IS LOCKED. THE PROJECT WILL BE KEPT PUBLIC ONLY FOR REFERENCE PURPORSES. .. image:: docs/media/pyreboxlogolightbg.png .. QEMU: http://qemu.org/ .. DECAF: https://github.com/sycurelab/DECAF .. S2E:...

CrackMapExec

No Longer Maintained This project is no longer mantained due to the existence of a hostile fork. CrackMapExec You are on the latest up-to-date repository of the project CrackMapExec ! 🎉 🚧 If you want to report a problem, open un Issue 🔀 If you want to contribute, open a Pull Request 💬 If you want...

ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

Hijacker

Hijacker Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng, MDK3 and Reaver. It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an ARM android device with ...

panopticon

已弃用 Panopticon 项目已迁移至Gitlab，并重组为多个 crate。Qt GUI 已被 Verso 替代。 我会合并拉取请求，但不会再对此版本进行实质性工作。下方大多数链接已失效。 Panopticon - 一个自由的跨平台反汇编器 Panopticon 是一个使用 Rust 编写的跨平台逆向工程反汇编器。它支持 AMD64、x86、AVR 和 MOS 6502 指令集，并能打开 ELF 文件。Panopticon 自带 Qt GUI，用于浏览和注释控制流图。 安装 如果你只是想使用 Panopticon，请访问官网查看安装说明。 编译 Panopticon 使用 Rust...

LALIN

Lalin is the future Lalin is a remake of Lazykali by bradfreda with fixed bugs , added new features and uptodate tools . It's compatible with the latest release of Kali Rolling Donate If this project very help you to penetration testing and u want support me , you can give me a cup of coffee : 📜...

Windows-Exploit-Suggester

DESCRIPTION This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the...

jsprime

Authors Nishant Das Patnaik nishant.dp@ Sarathi Sabyasachi Sahoo sarathisahoo@ Introduction Today, more and more developers are switching to JavaScript as their first choice of language. The reason is simple JavaScript has now been started to be accepted as the mainstream programming for...

envizon

envizon - 由 evait security 开发 生命周期结束（EOL） https://github.com/evait-security/envizon/issues/130 我们（evait security）已将内部项目文档迁移至 https://gitlab.com/invuls/pentest-projects/pcf。 网络可视化与渗透测试报告 版本 5.0 本工具由 evait security 设计、开发并维护。为了回馈安全社区，我们公开发布了内部使用并持续优化的先进网络可视化与漏洞报告工具 'envizon'。希望您的反馈能帮助我们进一步改进和完善它。 网站...

lanGhost

⚠️ Warning! This project is no longer maintained and may not work as excepted. A LAN dropbox chatbot controllable via Telegram features: installation: warning: lanGhost is designed for Raspberry Pis Raspbian /Kali for RPi. Running it on other/desktop distros could cause issues and may not work as...

toxy

toxy 当前未积极维护，可能与最新的 Node.js 运行时不兼容 。如果你有兴趣维护 toxy，请提交 issue。 可入侵的 HTTP 代理 ，用于模拟 服务器故障场景 、系统弹性测试 和意外网络状况 ，专为 node.js 构建。 它主要用于抵抗故障测试，在覆盖容错和弹性能力时特别有用，尤其是在容忍延迟网络和面向服务架构中，toxy 可以作为服务间的中间人代理来注入故障。 toxy 允许你插入毒药，可选择通过规则过滤，这些规则可以拦截并按需更改 HTTP 流，在此过程中执行多种恶意操作，例如限制带宽、延迟网络数据包、注入网络抖动延迟或回复自定义错误或状态码。 它主要在 L7...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

Dumb

Dumb - Dumain Bruteforcer A tool to bruteforce dumains! How DUMB works: Dumb works with a masked dumain for substitution. The dumain can have as many masks as you want as long as you pass the according wordlists. For example: Bruteforcing subdumains: Using the mask DUMB.dumain.com and the followi...

honeybits

Honeybits A simple PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your production servers and workstations to lure the attacker toward your honeypots. Author: Adel "0x4D31" Karimi. The Windows version of this project: honeybits-win...

CrawlBox

CrawlBox | Easy way to brute-force web directory. Operating Systems Tested MacOSX Kali Linux Ubuntu 16.04 Usage root@kitploit: python crawlbox.py -h -v -w WORDLIST url positional arguments: root@kitploit: url specific target url, like domain.com optional arguments: root@kitploit: -h, --help show...

CrawlBox

CrawlBox | 暴力破解网站目录的简单方法。 已测试的操作系统 MacOSX Kali Linux Ubuntu 16.04 用法 root@kitploit: python crawlbox.py -h -v -w WORDLIST url 位置参数： root@kitploit: url 具体的目标网址，例如 domain.com 可选参数： root@kitploit: -h, --help 显示此帮助信息并退出 -v, --version 显示程序版本号并退出 -w WORDLIST 指定字典文件的路径 -d DELAY 在请求之间添加延迟 示例 使用内置字典扫描网站...

macro_pack

macropack 简短描述 警告：MacroPack自2021年起不再维护，如果您是专业人士，需要用于初始访问、假设入侵、EDR绕过等进攻性信息安全工具，请查看https://www.balliskit.com MacroPack Community 是一款用于自动化混淆和生成旧格式（如MS Office文档或VBS类格式）的工具。它还处理各种快捷方式格式。该工具可用于红队演练、渗透测试、演示和社会工程评估。MacroPack将简化反恶意软件解决方案的绕过，并自动化从VB源码到最终Office文档或其他载荷类型的过程。使用非常简单： 无需配置 一切都可以通过单行代码完成...

macro_pack

macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...