etx77 Goto Github PK

appsec-browser-bundle

The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.

bashark

Bash post exploitation toolkit

beroot

Privilege Escalation Project - Windows / Linux / Mac

cheatsheets

Commands to perform various activities related to penetration testing and red teaming

checklists

Red Teaming & Pentesting checklists for various engagements

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

command-injection-attacker

SHELLING - a comprehensive OS command injection payload generator

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

ctf-writeups

Writeups of Capture The Flag Competitions

damnwebscanner

Another web vulnerabilities scanner, this extension works on Chrome and Opera

default-credentials

Default usernames and passwords for various systems (VoIP,IPMI,Oracle).

digital-signature-hijack

Binaries, PowerShell scripts and information about Digital Signature Hijacking.

dnscan

dnstwist

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

dork-scanner

dork scanning tool built in python. It scrapes web search engines with dorks you provide in order to find vulnerable urls. This tool supports google, yahoo, bing and baidu search engines

droopescan

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

eagle_project

exploit-pattern

generate and search pattern string for exploit development

exploitdb

The official Exploit Database repository

exploitdb-bin-sploits

Exploit Database binary exploits located in the /sploits directory

exploitdb-papers

exploit-database-papers

ffuf

Fast web fuzzer written in Go

fi-cyberspace-scan

Surgical python tool to assist in LFI discovery

fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gc-log-analyzer

Java GC log parser / analyzer for Java 7 and 8

gmmlib

go-bug

graphqlmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

gtfo

A blogging framework that gets the fuck out of your way