gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

gladius

Gladius Modo fácil de Responder a Credenciales Autor: Cory Duplantis @ctfhacker / blog Artículo en el blog sobre Gladius asciicast Gladius proporciona un método automatizado para descifrar credenciales de diversas fuentes durante un compromiso. Actualmente desciframos hashes de Responder,...

droid-hunter

.---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter '//||\ ''...

overload

Overload A Python-based network stress testing tool featuring Layer 2, Layer 4, and Layer 7 attack methods for authorized security testing. !WARNING This project has been archived and is no longer actively maintained. While the source code remains available, no new features, bug fixes, or updates...

hacker-roadmap

This repository is an overview of what you need to learn penetration testing and a collection of hacking tools, resources and references to practice ethical hacking. Most of the tools are UNIX compatible, free and open source. Status This project has been terminated and archived. Content might be...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

ssh-mitm

SSH MITM v2.3-dev Autor: Joe Testa @therealjoetesta Resumen Esta herramienta de pruebas de penetración permite a un auditor interceptar conexiones SSH. Un parche aplicado al código fuente de OpenSSH v7.5p1 hace que actúe como un proxy entre la víctima y su servidor SSH destino; todas las...

ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

LALIN

Lalin is the future Lalin is a remake of Lazykali by bradfreda with fixed bugs , added new features and uptodate tools . It's compatible with the latest release of Kali Rolling Donate If this project very help you to penetration testing and u want support me , you can give me a cup of coffee : 📜...

wordpress-exploit-framework

WordPress Exploit Framework Un framework en Ruby diseñado para ayudar en las pruebas de penetración de sistemas WordPress. Instalación Para instalar la última versión estable, ejecuta gem install wpxf. Después de la instalación, puedes iniciar la consola de WordPress Exploit Framework ejecutando...

wordpress-exploit-framework

WordPress Exploit Framework A Ruby framework designed to aid in the penetration testing of WordPress systems. Installation To install the latest stable build, run gem install wpxf. After installation, you can launch the WordPress Exploit Framework console by running wpxf. What do I need to run it...

SimpleEmailSpoofer

SimpleEmailSpoofer A few Python programs designed to help penetration testers with email spoofing. This Project is Retired Due to improvements in email protections and anti-spam techniques, it is no longer effective to attempt to spoof emails simply because they do not have a proper DMARC record ...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

envizon

envizon - por evait security EOL https://github.com/evait-security/envizon/issues/130 Nosotros evait security nos mudamos a https://gitlab.com/invuls/pentest-projects/pcf para la documentación interna del proyecto. visualización de redes e informes de pruebas de penetración Versión 5.0 Esta...

Empire

Invoke-Obfuscation v1.8 Introduction Invoke-Obfuscation is a PowerShell v2.0+ compatible PowerShell command and script obfuscator. Background In the Fall of 2015 I decided to begin researching the flexibility of PowerShell's language and began cataloguing the various ways to accomplish a handful ...

wildPwn

wildPwn - WildFly Exploitation Tool It is a tool for WildFly. Tool can be used to brute force or shell deploy. wildPwn.war contains modified Laudanum Shell. userList.txt contains common usernames and passList.txt contains common passwords. Usage Bruteforce python wildPwn.py -m brute --target -use...

SiteBroker

SiteBroker A cross-platform python based utility for information gathering and penetration automation! Output Sitebroker's Full Output Easy way Docker Image You can simply run this docker image to test SiteBroker without installing python packages system-wide or in a virtualenv. docker build -t...

celerystalk

celerystalk celerystalk te ayuda a automatizar tu proceso de escaneo/enumeración de red con trabajos asíncronos también conocidos como tareas mientras conservas el control total de qué herramientas quieres ejecutar. Demo interactiva: Modo Bug Bounty HackerOne Demo interactiva: Modo Evaluación de...

pathprober

pathprober Descubre y sondea rutas HTTP usando metodología de fuerza bruta y filtrado por una palabra específica o dos palabras a la vez. Propósito Forzar directorios web o rutas HTTP y validar usando el código de respuesta HTTP ya no es relevante. Esta herramienta te ayudará a realizar una prueb...

novahot

novahot novahot es un framework de webshell para testers de penetración. Implementa una API basada en JSON que puede comunicarse con troyanos escritos en cualquier lenguaje. Por defecto, incluye troyanos escritos en PHP, Ruby y Python. Además de ejecutar comandos del sistema, novahot puede emular...