wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

Ethical-Hacking-Tools

Ethical-Hacking-Tools Show some 💚 and ⭐ the Repo to SUPPORT DOWNLOAD Kali Linux 🐉 🦜...

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

Kali-Setup

Kali Customize Script This script idea was originally taken from g0tmi1k https://github.com/g0tmi1k/os-scripts. I do not claim credit for the basis of the script! That said, I have added a TON more tools and fixed a lot of errors with the original version. I maintain this and keep it updated to h...

Vanquish

Vanquish – Get to Shell Vanquish is a Kali Linux based Enumeration Orchestrator built in Python. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases. The results of each phase are fed into the next phase to identify vulnerabilities...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

Reconky-Automated_Bash_Script

Reconky-Automated Bash Script root@kitploit: \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / Usage ./reconky.sh About Reconky is a script written in bash...

sqlmap-nu11secur1ty

sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...

owtf

Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...

owtf

攻击性 Web 测试框架 OWTF OWASP OWTF 帮助渗透测试人员保持高效，并遵循诸如 OWASP Web 安全测试指南、OWASP Top 10、PTES 和 NIST 等安全标准，以便他们有更多时间： 纵览全局并跳出固有思维。 高效地发现、验证和组合漏洞。 调查复杂问题，例如业务逻辑缺陷或多租户边界情况。 对高风险区域进行有针对性的模糊测试。 在紧张的评估时间窗口内展示有意义的实际影响。 该工具高度可配置，任何人都可以创建简单的插件或在配置文件中添加新测试，而无需具备开发经验。 注意 OWTF...

malwoverview

Malwoverview !Alt...

PAVELOW

PAVELOW Exploit Toolbox. Programmed by Xecurity. Language: BASH Description: PAVELOW helps you with your exploiting and vulnerability searching adventures on KALI Linux by using a few different pre-installed tools among several others that PAVELOW will installed & setup for youthey all can be fou...

Nac_Bypass_Agent

Nac Bypass Agent This piece of code is a script written in Python and designed to run on Kali Linux. Here is a summary explaining what each function does: runcommandcommand: This function runs the command it takes as input and returns its output. killnetworkservices: This function stops the...

aws-pentesting-lab

AWS Pen-Testing Laboratory PenTesting laboratory deployed as IaC with Terraform on AWS. It deploys a Kali Linux instance accessible via ssh & wireguard VPN. Vulnerable instances in a private subnet. NOTE: Ids only defined for region "eu-west-1" For other regions, kali ami id must be specified and...

web-hacking-playground

Web Hacking Playground 描述 Web Hacking Playground 是一个受控的 Web 黑客环境。它包含真实案例中发现的漏洞，既来自渗透测试也来自漏洞赏金项目。目标是让用户能够通过这些漏洞进行练习，并学习如何检测和利用它们。 还将涉及其他有趣的主题，例如：通过创建自定义有效载荷绕过过滤器、执行利用多个漏洞的链式攻击、开发概念验证脚本等。 重要说明 应用程序源代码是可见的。然而，本实验室采用黑盒方法。因此，不应通过审查代码来解决问题。 此外，需要注意的是，模糊测试（包括参数和目录）以及暴力攻击在本实验室中不会带来任何优势。 环境搭建 建议使用 Kali...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...