pentestit Goto Github PK

arp-spoofer

A Simple ARP Spoofer using Scapy

autobrowser

AutoBrowser Screenshot

autodane

babadook

Connection-less Powershell Persistent and Resilient Backdoor

backdoors

beef-modules

Modules for BeEF

bettercap

A complete, modular, portable and easily extensible MITM framework.

binrev

burp-plugins

Central Repo for Burp plugins

burpjdser

check_ioc

Check_ioc is a script to check for various, selectable indicators of compromise on Windows systems via PowerShell and Event Logs. It was primarily written to be run on a schedule from a monitoring engine such as Nagios, however, it may also be run from a command-line (for incident response).

chuckle

clusterd

application server attack toolkit

cmsmap

commix

Automated All-in-One OS Command Injection and Exploitation Tool

consul

Consul is a tool for service discovery, monitoring and configuration.

crawlic

Web recon tool (find temporary files, parse robots.txt, search some folders, google dorks and search domains hosted on same server)

ctf-tools

Some setup scripts for security research tools.

daws

Advanced Web Shell

dnsteal

DNS Exfiltration tool for stealthily sending files over DNS requests.

evilfoca

EvilFOCA

exploit-database-bin-sploits

Exploit Database binary exploits located in the /sploits directory

freedom

capstone based disassembler for extracting to binnavi

ftpmap

FTP scanner, and take-over tool in C

gryffin

Gryffin is a large scale web security scanning platform

ie11sandboxescapes

Some example source code for fixed IE11 sandbox escapes.

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

ivre

A Python network recon framework, based on Nmap, Bro & p0f with MongoDB backend.

kunai

pwning & info gathering via user browser

lbmap

Advanced HTTP fingerprinting PoC