open-sec Goto Github PK

pyscripter-er

A framework built on top of Burp's Python Scripter extension.

raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

ranger

A tool for security professionals to access and interact with remote Microsoft Windows based systems.

rattler

Automated DLL Enumerator

recon-ng-modules

Additional modules for recon-ng

red-team-curation-list

A list to discover work of red team tooling and methodology for penetration testing and security assessment

redelk

Red Team's SIEM - easy deployable tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

redirect.rules

Quick and dirty redirect.rules dynamic generator

redteaming

revsh

A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.

riskyspn

Detect and abuse risky SPNs

robber

Robber is open source tool for finding executables prone to DLL hijacking

rtfm

A database of common, interesting or useful commands, in one handy referable form

rtoos

Red Team Operator by Open-Sec

rubeus

Trying to tame the three-headed dog.

santet-online

scanner-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

secgen

Create randomly insecure VMs

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security-research

Exploits written by the Rhino Security Labs team

seth

Perform a MitM attack and extract clear text credentials from RDP connections

shadowbroker

The Shadow Brokers "Lost In Translation" leak

sharpallowedtoact

Computer object takeover through Resource-Based Constrained Delegation (msDS-AllowedToActOnBehalfOfOtherIdentity)

sharpgpoabuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

sharpshooter

Payload Generation Framework

silenttrinity

A post-exploitation agent powered by Python, IronPython, C# and .NET's DLR

sintinepoweroutlook

Malicious (Meterpreter) Add-in for Outlook

siofra

sleepy-puppy

Sleepy Puppy XSS Payload Management Framework