faraday

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

spiderfoot

SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. virtualenv -p python3...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

pentest-guide

Guide de test d'intrusion basé sur l'OWASP + Extra Ce guide est destiné aux testeurs d'intrusion recherchant les cas de test appropriés nécessaires lors d'un projet de test d'intrusion. J'ai réorganisé le Guide de test OWASP v4 de mon point de vue en incluant 9 classes de test et chaque classe...

RATel

RATel Veuillez ne pas télécharger sur virustotal ! Pour éviter que RATel ne soit détecté par les antivirus, veuillez ne pas télécharger le payload sur TOTAL VIRUS. Chaque mois, je testerai moi-même si le payload est détecté par les antivirus. Ainsi, vous aurez une photo chaque mois pour prouver l...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

nodexp

NodeXP - Detection and Exploitation Tool for Node.js Services! NodeXP is an intergrated tool, written in Python 2.7, capable of detecting possible vulnerabilities on Node.js services as well as exploiting them in an automated way, based on ServerSideJavascriptInjection attack! Getting Started -...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

scanless

⚠️ I am no longer maintaining scanless as of August 2023. ⚠️ scanless This is a Python command-line utility and library for using websites that can perform port scans on your behalf. Supported Online Port Scanners ipfingerprints spiderip standingtech viewdns yougetsignal Install Do it up: $ pip...

pathprober

pathprober Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Purpose Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration...

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Rapport de test d'intrusion autorisé D-Link DNS-320L NAS | Client : Otonata Aperçu Ce dépôt contient le rapport complet d'évaluation de sécurité pour un test d'intrusion autorisé effectué sur un appareil D-Link DNS-320L NAS pour le...

CVE-2024-0692-SolarWinds-SEM-RCE

CVE-2024-0692-SolarWinds-SEM-RCE По результатам моего исследования в ходе теста на проникновение, подробности см. здесь https://www.sprocketsecurity.com/blog/cve-2024-0692-building-the-exploit-that-didnt-exist...

WordPress-Path-Traversal-CVE-2019-11447

Penetration Test Report WordPress Path Traversal - CVE-2019-11447 Document Information Item| Details ---|--- Document Title| Penetration Test Report - WordPress Path Traversal Client/Exam| HackTheBox Lab - CPTS Exercise 1 Date| August 22, 2026 Assessor| Fernando Viana Penetration Tester Assessmen...

metasploitable-pentest-report

Metasploitable 2 — Rapport de Test d'Intrusion Avertissement : Ce test d'intrusion a été réalisé dans un environnement de laboratoire VMware privé et isolé, à des fins éducatives uniquement. Aucun système réel n'a été accédé. Toutes les adresses IP ont été anonymisées. Aperçu Champ| Détails ---|-...

Vuln_Exploitation_MegaQuagga_Pentest

Exploitation de vulnérabilités — Rapport de test d'intrusion MegaQuagga Analyste: Samuel Weiss Organisation: 0x2A Security Date: 20 avril 2026 Client: MegaQuagga Publishing Cible: www.megaquagga.local Classification: CONFIDENTIEL Aperçu Ce projet documente un test d'intrusion structuré mené contr...