pentest-guide

Penetration Test Guide based on the OWASP + Extra This guide is for the penetration testers seeking for the appropriate test cases required during a penetration test project. I rearranged the OWASP Testing Guide v4 from my point of view including 9 Test Classes and each class has several Test Cas...

wifi-cracking

Wi-Fi Cracking Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat. This is a brief walk-through tutorial that illustrates how to crack Wi-Fi networks that are secured using weak passwords. It is not exhaustive, but it should be enough information for you to test your own...

apache-cve-2021-42013-rce

apache-cve-2021-42013-rce Docker-based penetration testing lab simulating CVE-2021-42013 vulnerability Path Traversal & RCE on Apache HTTP Server 2.4.49. This project is prepared to simulate and exploit the CVE-2021-42013 vulnerability found in Apache HTTP Server 2.4.49 in an isolated environment...

threatbox

Threatbox - 标准攻击平台 ThreatBox 是一个基于 Linux 的标准化受控攻击平台。我使用该平台的某个版本已有多年。它最初是一系列脚本的集合，后来演变为一个滚动的虚拟机，再后来变成用于构建 Linux ISO 的代码，现在则已转换为一套 Ansible 剧本。为什么用 Ansible？为什么不呢？这似乎是标准攻击平台配置的下一步自然演进。 本项目使用 Ansible 剧本和角色来对 Linux 目标机（已在 Ubuntu 18.04 上测试）进行部署后配置。 该项目旨在作为创建、管理和使用标准攻击平台（用于红队或渗透测试）的启动流程。...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

hardcidr

hardCIDR 背景 一个 Linux Bash 脚本，用于在渗透测试的情报收集阶段发现目标组织拥有的网络块或范围（以 CIDR 表示法）。这些信息由五个区域互联网注册管理机构（RIR）维护： ARIN （北美） RIPE （欧洲/亚洲/中东） APNIC （亚太） LACNIC （拉丁美洲） AfriNIC （非洲） 除了网络块和 IP 地址之外，自治系统编号（ASN）也很重要。ASN 作为边界网关协议（BGP）的一部分，用于唯一标识互联网上的每个网络。目标组织可能因其网络规模或由于对等服务提供商的冗余服务路径而拥有自己的 ASN。这些 ASN 将揭示组织拥有的其他网络块。 需求...

Lazymux

Lazymux Lazymux tools installer is very easy to use, only provided for lazy termux users; it's huge list of Many Hacking tools and PEN TESTING! NOTE: Am not Responsible of bad use of this project. Screenshot Requirements • Linux environment • Python 2.x • git Installation and Using Lazymux...

GoEnumerator

ABOUT GoEnumerator GoEnumerator is a tool I'm writing for the fun of it but to also use for my own enumeration, so I will be keep adding more features to try to speed up the first steps on any CTF enumeration or profesional pentest, as I will add features and options to make the tool to not trigg...

LFI-Destruction

🔥 LFI-Destruction – Authorized Penetration Testing Framework LFI-Destroyer is a comprehensive, modular Local File Inclusion LFI exploitation framework designed for authorized security professionals. It combines multiple attack techniques into a single, easy‑to‑use tool: SSH & Browser Artifact...

chaos

chaos chaos es un escáner de IP de 'origen' desarrollado por RST en colaboración con ChatGPT. Es una utilidad de nicho con una audiencia prevista de probadores de penetración y cazadores de bugs principalmente. Una IP de origen es una expresión técnica que describe la dirección IP pública final...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

pythem

pythem - 渗透测试框架 pythem 是一个多用途渗透测试框架，由 Python 编写，专为安全研究人员和安全专业人士设计。该工具仅限于合法行为使用。对于因使用本工具而导致的任何不当或违法行为，本人概不负责。更多信息请阅读许可协议。 安装 链接： 创建桌面快捷方式 Linux 安装 依赖安装 注意： 仅在基于 Debian 的发行版上测试过，如果你使用 Redhat 或 SUSE 类系统，可以尝试使用 yum 或 zypper 安装依赖。 root@kitploit: sudo apt-get update sudo apt-get install -y...

Mr.SIP

SIP 安全、攻击与审计框架 Mr.SIP 是一款简单的、基于控制台的 SIP 审计与攻击工具。它最...

pymultitor

PyMultiTor Proxy Tor Multi Hilo en Python, ¿Alguna vez quisiste estar en dos lugares diferentes al mismo tiempo? Cuando me hice esta pregunta, comencé a desarrollar esta solución en mi mente. Al realizar pruebas de penetración a menudo surgen problemas causados por dispositivos de seguridad que...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

KaliIntelligenceSuite

Kali Intelligence Suite Kali Intelligence Suite KIS is an intelligence gathering and data mining tool for penetration testers. It shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by automatically: executing Kali Linux tools e.g., dnsrecon, gobuster, hydra,...

Caboom

Caboom root@kitploit: ██████╗ █████╗ ██████╗ ██████╗ ██████╗ ███╗ ███╗ ██╗ ██╔════╝██╔══██╗██╔══██╗██╔═══██╗██╔═══██╗████╗ ████║ ██║ ██║ ███████║██████╔╝██║ ██║██║ ██║██╔████╔██║ ██║ ██║ ██╔══██║██╔══██╗██║ ██║██║ ██║██║╚██╔╝██║ ╚═╝ ╚██████╗██║ ██║██████╔╝╚██████╔╝╚██████╔╝██║ ╚═╝ ██║ ██╗...

cdb

Pown CDB Pown CDB es una utilidad del Protocolo de Depuración de Chrome. El objetivo principal de la herramienta es automatizar tareas comunes para ayudar a depurar aplicaciones web desde la línea de comandos y monitorear e interceptar activamente solicitudes y respuestas HTTP. Esto es...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...