1446564 matches found
atlant-harden
AtlantHarden โ Windows, Browser & Office Security Hardening Tool AtlantHarden is a comprehensive Windows 10/11 security hardening application with a modern, professional UI. It applies 606 hardening settings โ including 354 DISA STIG controls across Windows 11, Edge, Chrome, Firefox, and Office 3...
malicious-pdf
Malicious PDF Generator โ ๏ธ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...
Parth
Parth Heuristic Vulnerable Parameter Scanner Introduction Some HTTP parameter names are more commonly associated with one functionality than the others. For example, the parameter ?url= usually contains URLs as the value and hence often falls victim to file inclusion, open redirect and SSRF...
cuckoo-droid
CuckooDroid - Automated Android Malware Analysis. Contributed By Check Point Software Technologies LTD. CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, CuckooDroid brigs to cuckoo the capabilities of execution and analysis of...
HowToHunt
HowToHunt A collection of practical guides, methodologies, and resources for hunting vulnerabilities From Hackers for Community, because Hacking is not just a skill Itโs a Mindset ๐ก What is HowToHunt? HowToHunt is a collaborative repository of step-by-step guides, methodologies, and hands-on...
hubble
Welcome to HubbleStack!! You can file an issue here Follow us on Twitter! Development Below are sample instructions to setup a dev environment: 1. virtualenv myvirtualenv 2. source myvirtualenv/bin/activate 3. pip install -r requirements.txt 4. sudo python setup.py develop 5. sudo hubble...
mip22
mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...
reverie
reverie Automated Pentest Tools Designed For Parrot Linux this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone git clone https://github.com/baguswiratmaadi/reverie ...
x8-Burp
This app is no longer supported The tool helps to find hidden parameters that can be vulnerable or can reveal interesting functionality that other hunters miss. Greater accuracy is achieved thanks to the line-by-line comparison of pages, comparison of response code and reflections. Features...
Black-Tool
Black-Tool Black-Tool v5.5.5 New Install the tools and start hacking Attack! Black-Tool root@kitploit: โโโโโโโโโโโ โโโโ โโโโโ โโโโโโโโโโโ โโโโ โโโโโโโโโโโโโโโโโโ โโโโโ โโโโโโโโโโโโ โโโโโ โโโโ โโโโ โโโโ โโโโโโ โโโโโโ โโโโ โโโโโ โ โโโโ โ โโโโโโ โโโโโโ โโโโ โโโโโโโโโโโ โโโโ โโโโโโโโ โโโโโโโโ โโโโโโโ...
ccat
Cloud Container Attack Tool CCAT โ๏ธ๐...
BadBlood
BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...
mesh-kridik
mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...
awesome-osint-arsenal
๐ AWESOME OSINT ARSENAL The Ultimate Open-Source Intelligence + Security Toolkit 751+ tools ยท 50 categories ยท Multi-distro installers ยท Georgian OSINT ยท Termux support The most comprehensive OSINT and security toolkit on the internet โ every tool with installation instructions or a verified link....
http-desync-guardian
Overview HTTP/1.1 went through a long evolution since 1991 to 2014: HTTP/0.9 โ 1991 HTTP/1.0 โ 1996 HTTP/1.1 RFC 2068 โ 1997 RFC 2616 - 1999 - 2014...
meg
meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...
sherlock
Hunt down social media accounts by username across 400+ social networks Installation โข Usage โข Contributing Installation !WARNING Packages for ParrotOS and Ubuntu 24.04, maintained by a third party, appear to be broken. Users of these systems should defer to uv/pipx/pip or Docker. Method| Notes...
shootback
shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall ๅๅTCP้ง้, ไฝฟๅพNATๆ้ฒ็ซๅขๅ็ๅ ็ฝๆบๅจๅฏไปฅ่ขซๅค็ฝ่ฎฟ้ฎ. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...
Preparation-Guide-to-OSCP
Guide to OSCP I am writing this guide to cover all OSCP topics as well as other infosec knowledge in details, I will also provide a cheat-sheet in each section so that you can use the commands directly once you understand the topics/tools. But I think to become a good pentester you should know ho...
pown
Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...