youdinforsec Goto Github PK

angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

attifyos

Attify OS - Distro for pentesting IoT devices

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

beef

The Browser Exploitation Framework Project

brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

commix

Automated All-in-One OS command injection and exploitation tool.

crackmapexec

A swiss army knife for pentesting networks

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

det

(extensible) Data Exfiltration Toolkit (DET)

dnschef

DNSChef - DNS proxy for Penetration Testers and Malware Analysts

dnsenum

dnsenum is a perl script that enumerates DNS information

dnsmap

fork of http://code.google.com/p/dnsmap/source/checkout

dnsrecon

DNS Enumeration Script

dshell

Dshell is a network forensic analysis framework.

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

evilgrade

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

faraday

Collaborative Penetration Test and Vulnerability Management Platform

fimap

fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.

fluxion

Fluxion is a remake of linset by vk496 with less bugs and enhanced functionality.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

grr

GRR Rapid Response: remote live forensics for incident response

impacket

Impacket is a collection of Python classes for working with network protocols.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

kadabra

[DEPRECATED] Kadabra is my automatic LFI Exploiter and Scanner, written in C++ and a couple extern module in Python.

kadimus

Kadimus is a tool to check sites to lfi vulnerability , and also exploit it...

liffy

Local File Inclusion Exploitation Tool (mirror)

mallory

HTTP/HTTPS proxy over SSH