Repositories list

• DeepBlueCLI

  Public
  PowerShell

  •

  GNU General Public License v3.0

  •359•0•0•0•Updated Jul 24, 2019Jul 24, 2019

• CheatSheetSeries

  Public
  The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

  Python

  •

  Other

  •4k•0•0•0•Updated Jun 25, 2019Jun 25, 2019

• furious

  Public
  Golang IP/port scanner with SYN (stealth) scanning and device manufacturer identification

  Go

  •

  GNU General Public License v3.0

  •84•0•0•0•Updated Jun 19, 2019Jun 19, 2019

• WhatWeb

  Public
  Next generation web scanner

  Ruby

  •

  GNU General Public License v2.0

  •922•0•0•0•Updated Jun 12, 2019Jun 12, 2019

• Zydra

  Public
  Python

  •

  MIT License

  •109•0•0•0•Updated Jun 2, 2019Jun 2, 2019

• shellphish

  Public
  Phishing Tool for 18 social media: Instagram, Facebook, Snapchat, Github, Twitter, Yahoo, Protonmail, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers, Gitlab, Pinterest

  HTML

  •

  Other

  •1.1k•0•0•0•Updated Apr 27, 2019Apr 27, 2019

• stream-en

  Public
  Sourcecode created during my Livestream (English)

  Roff

  •24•0•0•0•Updated Apr 24, 2019Apr 24, 2019

• linux-re-101

  Public
  A collection of resources for linux reverse engineering

  360•0•0•0•Updated Mar 29, 2019Mar 29, 2019

• gitrob

  Public
  Reconnaissance tool for GitHub organizations

  Go

  •

  MIT License

  •831•0•0•0•Updated Feb 1, 2019Feb 1, 2019

• EyeWitness

  Public
  EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

  Python

  •

  GNU General Public License v3.0

  •861•0•0•0•Updated Jan 31, 2019Jan 31, 2019

• bashbunny-payloads

  Public
  Payloads for the Hak5 Bash Bunny

  PowerShell

  •1.5k•0•0•0•Updated Jan 30, 2019Jan 30, 2019

• SecLists

  Public
  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  PHP

  •

  MIT License

  •24k•0•0•0•Updated Jan 30, 2019Jan 30, 2019

• commix

  Public
  Automated All-in-One OS command injection and exploitation tool.

  Python

  •

  Other

  •831•0•0•0•Updated Jan 30, 2019Jan 30, 2019

• sqlmap

  Public
  Automatic SQL injection and database takeover tool

  Python

  •

  Other

  •5.8k•0•0•0•Updated Jan 30, 2019Jan 30, 2019

• unicorn

  Public
  Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

  Python

  •

  Other

  •815•0•0•0•Updated Jan 29, 2019Jan 29, 2019

• KaliTools

  Public
  Recommended Tools

  GNU General Public License v3.0

  •0•0•0•0•Updated Jan 29, 2019Jan 29, 2019

• spiderfoot

  Public
  SpiderFoot, the most complete OSINT collection and reconnaissance tool.

  Python

  •

  GNU General Public License v2.0

  •2.4k•0•0•0•Updated Jan 28, 2019Jan 28, 2019

• NoSQLMap

  Public
  Automated NoSQL database enumeration and web application exploitation tool.

  Python

  •

  GNU General Public License v3.0

  •584•0•0•0•Updated Jan 27, 2019Jan 27, 2019

• wpscan

  Public
  WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites.

  Ruby

  •

  Other

  •1.3k•0•0•0•Updated Jan 27, 2019Jan 27, 2019

• Empire

  Public
  Empire is a PowerShell and Python post-exploitation agent.

  PowerShell

  •

  BSD 3-Clause "New" or "Revised" License

  •2.8k•0•0•0•Updated Jan 27, 2019Jan 27, 2019

• LinEnum

  Public
  Scripted Local Linux Enumeration & Privilege Escalation Checks

  Shell

  •

  MIT License

  •2k•0•0•0•Updated Jan 24, 2019Jan 24, 2019

• public-pentesting-reports

  Public
  Curated list of public penetration test reports released by several consulting firms and academic security groups

  C

  •2k•0•0•0•Updated Jan 24, 2019Jan 24, 2019

• Veil

  Public
  Veil 3.1.X (Check version info in Veil at runtime)

  Python

  •

  GNU General Public License v3.0

  •887•0•0•0•Updated Jan 23, 2019Jan 23, 2019

• mimikittenz

  Public
  A post-exploitation powershell tool for extracting juicy info from memory.

  PowerShell

  •334•0•0•0•Updated Jan 21, 2019Jan 21, 2019

• discover

  Public
  For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

  Shell

  •

  MIT License

  •831•0•0•0•Updated Jan 21, 2019Jan 21, 2019

• BloodHound-1

  Public
  Six Degrees of Domain Admin

  PowerShell

  •

  GNU General Public License v3.0

  •1.8k•0•0•0•Updated Jan 16, 2019Jan 16, 2019

• CrackMapExec

  Public
  A swiss army knife for pentesting networks

  Python

  •

  BSD 2-Clause "Simplified" License

  •1.7k•0•0•0•Updated Jan 15, 2019Jan 15, 2019

• Responder

  Public
  Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

  Python

  •

  GNU General Public License v3.0

  •1.7k•0•0•0•Updated Jan 15, 2019Jan 15, 2019

• gobuster

  Public
  Directory/file & DNS busting tool written in Go

  Go

  •

  Apache License 2.0

  •1.3k•0•0•0•Updated Jan 14, 2019Jan 14, 2019

• Sublist3r

  Public
  Fast subdomains enumeration tool for penetration testers

  Python

  •

  GNU General Public License v2.0

  •2.1k•0•0•0•Updated Jan 11, 2019Jan 11, 2019