88 matches found
metasploitable3
Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...
john
John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...
faction
OWASP - FACTION Marco de generación de informes de pruebas de penetración y colaboración ¡Faction ahora es un proyecto OWASP! Puedes encontrar más informaciónaquí Patrocinadores Patrocinadores Premium...
github-dorks
Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...
getaltname
GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...
OSCP-Exam-Report-Template-Markdown
基于Markdown的Offensive Security考试报告模板 我创建了一个基于Markdown的Offensive Security考试报告模板 ，这样在参加Offensive Security的OSCP、OSWE、OSEE、OSWP、OSEP、OSED、OSWA、OSDA、OSMR、OSTH、OSIR等考试时，就不再需要LaTeX、Microsoft Office Word、LibreOffice Writer了！ 现在你可以在撰写考试报告时更加高效快速！ 🚀 加快写作速度 ，不要在24小时考试报告撰写中浪费时间 ⭐ 无需处理WYSIWYG编辑器的格式问题...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...
redsnarf
root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...
Binary Exploits
Exploits binarios de Exploit Database Los exploits binarios se encuentran en el directorio /bin-sploits/. Este es un repositorio oficial de The Exploit Database, un proyecto patrocinado por Offensive Security. Nuestros repositorios son: Exploits y Shellcodes:...
uberscan
uberscan 用于渗透测试服务器、路由器和物联网设备的安全程序 （顺便说一句，我的比特币地址是 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE） （另外还有一个备用的BTC地址，因为有人报告某些比特币钱包不支持某些地址：1PEDKUiUTxGNJ3XTPfXCTAjpzVzX1VZAme） 同志们，大家好，欢迎使用 UBERSCAN 1.0 UBERSCAN 旨在帮助渗透测试服务器和网络，并作为一个工具，供像我这样试图进入道德黑客行业的人用来了解，例如，有多少设备容易受到像 Mirai...
ShonyDanza
ShonyDanza 一个可定制、易于导航的工具，利用Shodan的力量进行侦察、渗透测试和防御。 使用ShonyDanza，你可以： 基于搜索条件获取IP 根据预先配置的阈值自动从结果中排除蜜罐 预配置所有IP搜索以根据指定的网络范围过滤 预配置搜索限制 使用“构建搜索”功能通过简单的构建块来制作搜索 使用预设搜索并预配置你自己的预设搜索 检查IP是否已知的恶意软件C2 获取主机和域名配置文件 按需扫描 查找漏洞利用 获取搜索和漏洞利用的总计数 自动将漏洞利用代码、IP列表、主机配置文件、域名配置文件和扫描结果保存到ShonyDanza中的目录 安装 git clone...
celerystalk
celerystalk celerystalk 通过异步任务（即 tasks ）帮助你自动化网络扫描/枚举过程，同时让你完全控制要运行哪些工具。 交互演示：漏洞赏金模式 HackerOne 交互演示：漏洞评估/渗透测试模式 已退役的 HackTheBox.eu 机器 celerystalk 可以为你自动化什么 阶段| 命令| 使用的工具示例 ---|---|--- DNS 侦察/枚举| ./celerystalk subdomains -d domain1,domain2| Amass, sublist3r 定义范围，导入 nmap/nessus| ./celerystalk impor...
Dark-Moon
The Open-Source AI-...
Autonomous-AI-PenTest-Agent
Auto...
CVE-2026-40606
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize the username when querying the LDAP...
CVE-2026-40606
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize the username when querying the LDAP...
CVE-2026-6179
CVE-2026-6179 concerns a stored cross-site scripting (XSS) vulnerability in NightWolf Penetration Testing Platform. The affected entry states that an attacker can trigger and run malicious script in a user’s browser due to a stored XSS flaw, enabling impact on user-side confidentiality and integr...
Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing
We present the first comprehensive evaluation of AI agents against human cybersecurity professionals in a live enterprise environment. We evaluate ten cybersecurity professionals alongside six existing AI agents and ARTEMIS, our new agent scaffold, on a large university network consisting of 8,00...
