ReconCat

Recon Cat ========================================= Introduction A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for penetration testing purpose. This...

openmagic

openmagic openmagic can assist you in the automating testing and exploiting of systems vulnerable to the OpenSSL TLS heartbeat read overrun CVE-2014-0160. The base module wraps a modified version of the "ssltest.py" program by Jared Stafford and provides the following additional features: Save th...

malware_training_vol1

malwaretrainingvol1 Materials for Windows Malware Analysis training volume 1 🚧 WARNING: work in progress! More material will be added gradually. Content The goal of this training it to build understanding of various common techniques used by malware. It contains elements of programming as well as...

class-dump

class-dump class-dump is a command-line utility for examining the Objective-C segment of Mach-O files. It generates declarations for the classes, categories and protocols. This is the same information provided by using 'otool -ov', but presented as normal Objective-C declarations. The latest...

awesome-pentest

Awesome 침투 테스트 훌륭한 침투 테스트 및 공격적 사이버 보안 리소스 모음입니다. 침투 테스트는 컴퓨터 시스템과 그 물리적 인프라에 대해 승인된 시뮬레이션 공격을 수행하여 잠재적인 보안 취약점을 노출하는 방법입니다. 취약점을 발견한 경우 이 지침에 따라 책임감 있게 보고해 주세요. 여러분의 기여와 제안을 진심으로♥ 환영합니다. ✿◕‿◕. 자세한 내용은 기여 가이드라인을 확인해 주세요. 이 저작물은 크리에이티브 커먼즈 저작자표시 4.0 국제 라이선스에 따라 사용이 허가됩니다. 목차 Android 유틸리티 익명성 도구 To...

LHF

Codacy Badge This has been only tested on the newest Kali Linux Distro LHF: Low Hanging Fruit a recon tool for penetration testing To install dependencies: ./Install.sh To start: ./LHF.py + Checking permissions - Rockyou wordlist is missing trying to decompress... + Rockyou wordlist is...

mXtract

mXtract mXtract is an opensource linux based tool that analyzes and dumps memory. It is developed as a pentration testing tool, its primary purpose is to scan memory for private keys, ips, and passwords using regexes. Remember, your results are only as good as your regexes. Screenshots Scan with...

Ethical-Hacking-Tools

Ethical-Hacking-Tools Show some 💚 and ⭐ the Repo to SUPPORT DOWNLOAD Kali Linux 🐉 Parrot OS 🦜 Remnux 🐝 bWAPP 💻 OWASP Juice Shop 🍹 What is Hacking? 👾 Hacking is identifying weakness in computer systems or networks to exploit its weaknesses to gain access. Hacking can be carried out in many ways. T...

the-book-of-secret-knowledge

"El conocimiento es poderoso, ¡ten cuidado cómo lo usas! " Una colección de listas inspiradoras, manuales, chuletas, blogs, trucos, one-liners, herramientas CLI/web y más. 📔 ¿Qué es? Este repositorio es una colección de diversos materiales y herramientas que uso a diario en mi trabajo. Contiene...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server auditing. Features SSH1 and SSH2 protocol server support; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm...

py-CVE-2021-41773

CVE-2021-41773 Python语言poc&exp项目。 声明：该项目来自作者日常学习笔记。 请勿利用相关技术以及工具从事非法测试，如因此产生的一切不良后果作者无关。 使用： python main.py -h 查看帮助 python main.py -u 利用漏洞 python main.py -f url.txt 批量测试漏洞是否存在 python main.py -f url.txt -o bug.txt 批量测试漏洞是否存在,存在的写入bug.txt中...

fridump

Fridump Fridump v0.1 es una herramienta de volcado de memoria de código abierto, orientada principalmente a evaluadores de penetración y desarrolladores. Fridump utiliza el framework Frida para volcar direcciones de memoria accesibles desde cualquier plataforma compatible. Se puede usar desde un...

ansible-CVE-2015-0235-GHOST

This repository does not have a README...

esp32-wifi-penetration-tool

ESP32 Wi-Fi Penetration Tool This project introduces an universal tool for ESP32 platform for implementing various Wi-Fi attacks. It provides some common functionality that is commonly used in Wi-Fi attacks and makes implementing new attacks a bit simpler. It also includes Wi-Fi attacks itself li...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

toxssin

toxssin 목적 toxssin은 XSSCross-Site Scripting 취약점 악용 과정을 자동화하는 오픈소스 침투 테스트 도구입니다. 이 도구는 이 도구를 작동시키는 악성 JavaScript 페이로드toxin.js가 생성하는 트래픽을 해석하는 https 서버로 구성되어 있습니다. 이 프로젝트는 순수 JavaScript, 신뢰할 수 있는 인증서, 그리고 간단한 트릭을 사용하여 XSS 취약점이 유발할 수 있는 악용 가능성의 깊이를 탐구하기 위한 연구 기반의 창의적인 작업으로 시작되었습니다그리고 여전히 그렇습니다. 고지 사...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

TIDoS-Framework

TIDoS The Offensive Web Application Penetration Testing Framework. IMPORTANT : The new Qt5 interface is complete, but has additional dependencies. Take a look at the updated installation instructions. Highlights :- Here is some light on what the framework is all about: A complete versatile...

pulsexploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubun...