Pentest-Cheat-Sheet

Pentest Cheat Sheet There are many cheat sheets out there, but this is mine. It's a work in progress right now, and lives as a rought draft that's updated a lot , at times. I started this while I was studying for my OSCP, but it's now evolving to include more practical things that I need as a red...

CVE-2024-6387_Check

This script checks if servers are running a vulnerable version of OpenSSH based on specified targets. It uses threading for concurrent scanning of multiple targets and ports. Installation: git clone https://github.com/sardine-web/CVE-2024-6387Check.git cd CVE-2024-6387Check Usage To check if...

flumberboozle

flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...

autoscan

autoscan.sh Overview autoscan.sh is fully automated penetration test tool linked with Metasploit, nmap and other free avialable tools and report all of this in faraday faraday is one tool, you can use it for other open source reporting tools, an example is to export it in jira. Autoscan identifie...

sif

install · usage · modules · docs · contribute fast, concurrent recon to exploitation in one binary. every scanner shares one connection-pooled http client. what is sif? sif is a recon and exploitation scanner that runs the whole chain in one binary: subdomain enum, port scan, crawler, nuclei,...

Moodle-CVE-2018-1042

Moodle CVE-2018-1042 Script to exploit CVE-2018-1042 in order to do internal port scans...

CyberScan

CyberScan CyberScan is an open source penetration testing tool that can analyse packets , decoding , scanning ports, pinging and geolocation of an IP including latitude, longitude , region , country ... Screenshots Operating Systems Supported Windows XP/7/8/8.1/10 GNU/Linux MacOSX Installation Yo...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

Spartan

Spartan Recon Like a Pro Wiki • Usage • Gallery Features Subdomain Scan Using Aquatone & Sublist3r Httprob for only Live sites Masscan for open ports Identifing CMS using CMSeeK Grabing URL's from waybackMachine ScreenShot using Aquatone Brute forcing directories and files using Dirsearch Cors Sc...

trigmap

About Trigmap is a bash wrapper for Nmap. You can use it to easily run nmap scans and, especially, to collect information into a well organized directory hierarchy. The use of Nmap makes the script portable easy to run not only on Kali Linux and very efficient thanks to the optimized Nmap...

NetworkSherlock

NetworkSherlock: Porwerfull Port Scanning With Shodan NetworkSherlock is a powerful and flexible port scanning tool designed for network security professionals and penetration testers. With its advanced capabilities, NetworkSherlock can efficiently scan IP ranges, CIDR blocks, and multiple target...

mylg

myLG, Command line Network Diagnostic Tool myLG is an open source software utility which combines the functions of the different network probes in one network diagnostic tool. Features Popular looking glasses ping/trace/bgp: Telia, Level3, NTT, Cogent, KPN More than 200 countries DNS Lookup...

OnionHarvester

OnionHarvester V2 A small TOR Onion Address harvester for checking if the address is available or not. The program uses the TOR local socks5 proxy for finding all the Onion Addresses which are alive and ports 80 and 443 are available. Details about the project and TOR onion harvesting is publishe...

netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...

leprechaun

Leprechaun .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,. .,-' --' --' /...

sunlogin_rce

Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...

network-fingerprint

network-fingerprint Capture packet request/response pairs for a port and/or IP to aid in Network protocol based Nuclei Templates creation. Resources Installation Instructions Usage Running network-fingerprint Output Format Usage ▶ network-fingerprint -h This will display help for the tool. You ca...

ReconNote

ReconNote Web Application Security Recon Automation Framework It takes user input as a domain name and maximize the attack surface area by listing the assets of the domain like - Subdomains from - Amass ,findomain, subfinder & resolvable subdomains using shuffledns Screenshots Port Scan JS files...

fscan

Fscan 中文 Comprehensive intranet scanning tool for automated vulnerability assessment. Version : 2.2.0 Features Scanning Host Discovery - ICMP/Ping alive detection, B/C segment statistics for large networks Port Scanning - TCP connect scan, 133 built-in ports, port groups web/db/service/all...

Pybelt

NOTE: This project is no longer updated, this will be the last push to this project, if you would like more info, feel free to ping me on Twitter: @staysalty Pybelt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type...