infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

AttackSurfaceManagement

ABOUT: Discover the attack surface and prioritize risks with our continuous Attack Surface Management ASM platform - Sn1per Professional. For more information, go to https://sn1persecurity.com. FEATURES: Attack Surface Discovery Easily discover the attack surface IPs, domain names, open ports, HT...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection 中文文档 相关文章 Description JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further...

PHP-REVERSE-SHELL

PHP Reverse Shell Powerful & Stealthy This is a powerful and stealthy PHP reverse shell designed for ethical hacking and penetration testing. It establishes a reliable and quiet connection back to your machine. ⚠️ Disclaimer This PHP reverse shell is developed strictly for educational and...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

ipa-medit

ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...

openapi_security_scanner

OpenAPI Security Scanner About The Project Authorization security issues in modern web applications could not be easily picked up by security scanners. A few examples from Shopify, LINE, NordVPN. One of the reasons is that the security scanners mainly looking for SQLi, XSS, RCE instead of looking...

AWE

AWE: Adaptive Agents for Dynamic Web Penetration Testing Akshat Singh Jaswal · Ashish Baghel Accepted at NDSS LAST-X 2026 Abstract Modern web applications are increasingly produced through AI-assisted development and rapid no-code deployment pipelines, widening the gap between accelerating softwa...

BabySploit

this depiction may be outdated...

dolos_cloak

Dolos Cloak Dolos Cloak 是一个 Python 脚本，旨在帮助网络渗透测试人员和红队绕过 802.1x 解决方案，通过使用高级中间人攻击。该工具能够搭便车在已允许访问目标网络的受害者设备的有线连接上，而不会将受害者设备踢出网络。它设计运行在运行 Kali ARM 的 Odroid C2 上，需要两个外部 USB 以太网适配器。该工具应该可以在其他硬件和发行版上运行，但迄今为止仅在 Odroid C2 上经过测试。 作者：Forrest Kasler fkaslerph3eds 工作原理 Dolos Cloak 使用 iptables、arptables 和...

privacytests

PrivacyTests PrivacyTests 是一个开源测试项目，用于衡量浏览器的隐私特性，同时也是一个网站，https://privacytests.org，以人类可读的方式呈现测试结果。 PrivacyTests 使用 MIT 许可证。 aioquic: 一个子模块，包含 aioquic 项目的分支，用于进行 HTTP3 相关测试 assets: 用于运行测试和渲染页面的副本、CSS、图标、图片、字体 live: 测试服务器的 express JS 文件 results: 原始结果保存在此目录中 scripts: 用于运行测试以及渲染网站和结果页面的脚本 static:...

cdb

Pown CDB Pown CDB es una utilidad del Protocolo de Depuración de Chrome. El objetivo principal de la herramienta es automatizar tareas comunes para ayudar a depurar aplicaciones web desde la línea de comandos y monitorear e interceptar activamente solicitudes y respuestas HTTP. Esto es...

ajpfuzzer

AJPFuzzer - A command-line fuzzer for AJPv1.3 AJPFuzzer is a rudimental fuzzer for the Apache JServ Protocol ajp13. Built on top of libajp13, the tool allows you to create and send AJP messages using an easy-to-use command line interface. AJPFuzzer can craft properly formatted AJP13 messages all...

ludus-defender-lab

Ludus Defender 实验室 用于 Windows 安全实验室的 Ludus range 配置和 Ansible 角色，预先配置了 MDE 和 MDI，并包含一个完全错误配置的 ADCS 安装，用于检测覆盖测试。 配置| VMs| 用途 ---|---|--- zsec-mde-mdi-lab.yml| DC01 + WKS01| 包含 ADCS ESC1–ESC15 的 MDE/MDI 检测实验室 要求 已安装并配置 Ludus 已在你的环境中设置 LUDUSAPIKEY VM 模板：win2022-server-x64-template 部署 root@kitploit:...

PolarDNS

PolarDNS is a specialized authoritative DNS server written in Python 3.x, originally developed as a tool for security testing of DNS recursive resolvers from the server-side. It allows the operator to produce custom DNS responses, making it suitable for in-depth DNS protocol testing purposes...

airbash

airba.sh Airbash is a POSIX-compliant, fully automated WPA PSK PMKID and handshake capture script aimed at penetration testing. It is compatible with Bash and Android Shell tested on Kali Linux and Cyanogenmod 10.2 and uses aircrack-ng to scan for clients that are currently connected to access...

authz0

Authz0 是一款自动化授权测试工具。可以基于 URL 和角色（Roles）及凭据（Credentials）来识别未授权访问。 URL 和角色通过基于 YAML 的模板进行管理，可以通过 authz0 自动创建和添加。您也可以基于一次创建/生成的模板文件，使用多个认证头和 Cookie 进行测试。 🛸 关键特性 生成扫描模板 $ authz0 new 包含 URLs 包含角色（Roles） 包含 ZAP 历史记录（选择 URL 将选中的条目保存为 HAR） 包含 Burp 历史记录（选择 URL 保存条目） 包含 HAR 文件 轻松修改扫描模板（角色、URL）$ authz0 setU...

blackarmy-framework

BlackArmy BlackArmy Pentest Framework...

BigBountyRecon

BigBountyRecon BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It...

hackbox

HackB0x v2.0 HackBox 是出色工具与技术的结合。 HackBox 是一个功能全面且强大的工具，它融合了多种前沿技术，旨在增强安全专业人员在识别和修复 Web 应用程序及网络漏洞方面的能力。该工具配备了广泛的功能，使用户能够高效、便捷地执行各种安全评估和渗透测试活动。 该工具拥有若干关键功能，用于识别和缓解常见的 Web 应用程序漏洞。例如，HackBox 包含一个 XSS 功能，可让用户测试 Web 应用程序是否存在跨站脚本（XSS）漏洞。此外，该工具还包含一个 Exploits 功能，允许用户模拟攻击并测试各种漏洞利用，包括 SQL 注入和远程文件包含。 HackBo...