🔒 Tools

Categories

Filter

PSRansom


PSRansom is a PowerShell Ransomware Simulator with C...

GitHub📄 How To

MobSF


Mobile Security Framework (MobSF) is an automated, a...

GitHub📄 How To

ADRT


In order to collaborate with the day-to-day tasks of...

GitHub📄 How To

WindapSearch


windapsearch is a Python script to help enumerate us...

GitHub📄 How To

PingCastle


Get Active Directory Security at 80% in 20% of the t...

Site

N E R V E


NERVE is a vulnerability scanner tailored to find lo...

GitHub📄 How To

IntelSpy


IntelSpy is a multi-threaded network intelligence to...

GitHub📄 How To

PywerView


As a pentester, I love using PowerView during my ass...

GitHub📄 How To

Crowbar


Crowbar (formally known as Levye) is a brute forcing...

GitHub📄 How To

MKBRUTUS


Some boxes running Mikrotik RouterOS (3.x or newer) ...

GitHub📄 How To

pemcracker


This tool is inspired by pemcrack by Robert Graham. ...

GitHub📄 How To

MimiPenguin


akes advantage of cleartext credentials in memory by...

GitHub📄 How To

phishery


Phishery is a Simple SSL Enabled HTTP server with th...

GitHub📄 How To

bap


bap is a webservice honeypot that logs HTTP basic au...

GitHub📄 How To

CeWL


Based on a discussion on PaulDotCom (episode 129) ab...

GitHub📄 How To

Cerbrutus


Modular brute force tool written in Python, for very...

GitHub📄 How To

Zphisher


Any actions and or activities related to Zphisher is...

GitHub📄 How To

RDCMan


RDCMan manages multiple remote desktop connections. ...

Site📄 How To

MimiKatz


mimikatz is a tool Ive made to learn C and make some...

GitHub📄 How To

PyPhisher


Ultimate phishing tool in python. Includes popular w...

GitHub📄 How To

CredPhish


CredPhish is a PowerShell script designed to invoke ...

GitHub📄 How To

BruteShark


BruteShark is a Network Forensic Analysis Tool (NFAT...

Site

Steganography


Steganography applications conceal information in ot...

Site

Ghiro


Sometime forensic investigators need to process digi...

GitHub📄 How To

DeepSound


DeepSound is a steganography tool and audio converte...

Site

Cloakify


CloakifyFactory & the Cloakify Toolset - Data Exfilt...

GitHub📄 How To

HCONSTF


Hcon is the spirit of gaining & sharing knowledge. I...

Site

PentestBox


PenTestBox was developed entirely for Windows users ...

Site

SANDCAT


Sandcat Browser brings unique features that are usef...

Site

FuckShell


FuckShell is an open source tool that, when executed...

GitHub📄 How To

SPARTA


SPARTA is a python GUI application which simplifies ...

GitHub📄 How To

SpiderFoot


SpiderFoot is an open source intelligence (OSINT) au...

GitHub📄 How To

WATOBO


WATOBO – The WebApplication ToolBox is a PenTest too...

Site

WEEVELY


WEEVELY is a tool developed in Python that allows a ...

GitHub📄 How To

bettercap


bettercap is a powerful, easily extensible and porta...

GitHub📄 How To

WPForce


WPForce is a suite of Wordpress Attack tools. Curren...

GitHub📄 How To

TheFatRat


TheFatRat is an exploiting tool which compiles a mal...

GitHub📄 How To

CHAOS


CHAOS is a free and open-source Remote Administratio...

GitHub📄 How To

ASWCrypter


An Bash & Python Script For Generating Payloads that...

GitHub📄 How To

JSRat-Py


This is my implementation of JSRat.ps1 in Python so ...

GitHub📄 How To

BloodHound


BloodHound is a single page Javascript web applicati...

GitHub📄 How To

Kage


Kage (ka-geh) is a tool inspired by AhMyth designed ...

GitHub📄 How To

ReVBShell


ReVBSell is a project that provides a Server script ...

GitHub📄 How To

Bad-PDF


Bad-PDF create malicious PDF file to steal NTLM(NTLM...

GitHub📄 How To

Karkinos


This tool should be used on applications/networks th...

GitHub📄 How To

Reverse Shell


Hosted Reverse Shell generator with a ton of functio...

GitHub📄 How To

revshell gen


Standalone script written in Python 3 for generating...

GitHub📄 How To

Log4j Shell Poc


A Proof-Of-Concept for the recently found CVE-2021-4...

GitHub📄 How To

HoaxShell


hoaxshell is a Windows reverse shell payload generat...

GitHub📄 How To

Chimera


Chimera is a (shiny and very hack-ish) PowerShell ob...

GitHub📄 How To

DVWA


Damn Vulnerable Web Application (DVWA) is a PHP/MySQ...

GitHub📄 How To

bWAPP


bWAPP helps security enthusiasts, developers and stu...

Site📄 How To

D-TECT


D-TECT is an All-In-One Tool for Penetration Testing...

GitHub📄 How To

Fake-AP


Fakeap is a script to perform Evil Twin Attack, by g...

GitHub

Wifite


This repo is a complete re-write of wifite, a Python...

GitHub

wifiphisher


Wifiphisher is a rogue Access Point framework for co...

GitHub

Fluxion


Fluxion is the Future of MITM WPA Attacks" It is a r...

GitHub

bluepot


Bluepot was a third year university project attempti...

GitHub

pixiewps


Pixiewps is a tool written in C used to bruteforce o...

GitHub

wifipumpkin3


wifipumpkin3 is powerful framework for rogue access ...

GitHub

darkdump


Darkdump is a simple script written in Python3.11 in...

GitHub

rang3r


rang3r is a python script build in Python 2.7 which ...

GitHub

grabcam


Grabcam is a bash based script which is officially m...

GitHub

Cam-Hackers


Here you will find a list of several cameras from ar...

GitHub

Mandic magiC


WiFi Magic, Internet for everyone. Access the Intern...

Site📄 How To

WIRESEC


Wiresec is a script that organizes and performs the ...

GitHub📄 How To

JoomScan


OWASP Joomla! Vulnerability Scanner (JoomScan) is an...

GitHub📄 How To

Sucuri Security


The Sucuri Security WordPress plugin is free to all ...

Site📄 How To

netsparker


Invicti is a web vulnerability management solution t...

Site📄 How To

RIPS


RIPS is the most popular static code analysis tool t...

Site📄 How To

graudit


graudit is a simple script and signature sets that a...

GitHub📄 How To

YASUO


Yasuo is a ruby script that scans for vulnerable 3rd...

GitHub📄 How To

XSSCRAPY


Fast, thorough, XSS/SQLi spider. Give it a URL and i...

GitHub📄 How To

INISCAN


The INISCAN tool was designed to assess whether the ...

Site📄 How To

NodeJsScan


Static security code scanner (SAST) for Node.js appl...

GitHub📄 How To

WPSeku


WPSeku is a black box WordPress vulnerability scanne...

GitHub📄 How To

OpenVas


This is the OpenVAS Scanner of the Greenbone Communi...

GitHub📄 How To

Flan Scan


Flan Scan is a lightweight network vulnerability sca...

GitHub📄 How To

AutoPWN Suite


AutoPWN Suite is a project for scanning vulnerabilit...

GitHub📄 How To

Nikto


Nikto is an open source command line vulnerability s...

GitHub📄 How To

Nipper


Nipper (Network Infrastructure Parser) open source t...

Site📄 How To

XSS Challenges


This repository is a dockerized php application cont...

GitHub📄 How To

Shodan


Shodan is the worlds first search engine for Interne...

Site📄 How To

WhatWeb


WhatWeb identifies websites. Its goal is to answer t...

Site📄 How To

Web Admin Finder


At Black list penetration testing, the hacker need t...

Site📄 How To

weBreak


Webreak is a software designed to perform security a...

Site📄 How To

theHarvester


theHarvester is a simple to use, yet powerful tool d...

GitHub📄 How To

goofile


Use this tool to search for a specific file type in ...

Site📄 How To

Metagoofil


Metagoofil is an information gathering tool designed...

Site📄 How To

Gateway-Finder


Gateway-finder is a scapy script that will help you ...

GitHub📄 How To

MASSCAN


This is an Internet-scale port scanner. It can scan ...

GitHub📄 How To

SAWEF


The purpose of this tool is to be a Swiss army knife...

GitHub📄 How To

GitMiner


Advanced search tool and automation in Github. This ...

GitHub📄 How To

dirsearch


Dirsearch is an excellent tool that has advanced fea...

GitHub📄 How To

HOPER


It shows all the hops that makes a url you specify t...

GitHub📄 How To

Robtex


Robtex is used for various kinds of research of IP n...

Site📄 How To

HatCloud


HatCloud build in Ruby. It makes bypass in CloudFlar...

GitHub📄 How To

nWatch


nWatch is a handy tool for host discovery, portscann...

GitHub📄 How To

RED HAWK


All in one tool for Information Gathering and Vulner...

GitHub📄 How To

dnstwist


See what sort of trouble users can get in trying to ...

GitHub📄 How To

Seeker


Concept behind Seeker is simple, just like we host p...

GitHub📄 How To

BillCipher


nformation Gathering tool for a Website or IP addres...

GitHub📄 How To

DNSMaper


DNS Zone Transfer Test SubDomain BruteForce Banner V...

GitHub📄 How To

SubDomain Analyzer


The SubDomain Analyzer tool written in Python langua...

GitHub📄 How To

SiteBroker


A cross-platform python based utility for informatio...

GitHub📄 How To

UserRescon


Find usernames across over 75 social networks This i...

GitHub📄 How To

Shodan Eye


This tool collects all information about all devices...

GitHub📄 How To

Habu


I am developing Habu to teach (and learn) some conce...

GitHub📄 How To

SayCheese


Take webcam shots from target just sending a malicio...

GitHub📄 How To

TugaRecon


Tugarecon is a python tool designed to enumerate sub...

GitHub📄 How To

OKadminFinder


OKadminFinder is an Apache2 Licensed utility, rewrit...

GitHub📄 How To

Hakrawler


Fast golang web crawler for gathering URLs and JavaS...

GitHub📄 How To

Turbo Search


This is a search tool (brute-force style) based on a...

GitHub📄 How To

testssl


testssl.sh is a free command line tool which checks ...

GitHub📄 How To

MAP-Generator


Submit a URL to generate a node map of all of the re...

Site

adidnsdump


By default any user in Active Directory can enumerat...

GitHub📄 How To

LDAPDomainDump


ldapdomaindump is a tool which aims to solve this pr...

GitHub📄 How To

feroxbuster


feroxbuster is a tool designed to perform Forced Bro...

GitHub📄 How To

scilla


Information Gathering tool, DNS, Subdomains, Ports a...

GitHub📄 How To

CATPHISH


Generate similar-looking domains for phishing attack...

GitHub📄 How To

Digital Shadows


Digital Shadows provides access to the widest range ...

Site

SecurityTrails


Tap into a treasure-trove of cyber security gold for...

Site

FakeDataGen


FakeDataGen is a Full Valid Fake Data Generator. Thi...

GitHub📄 How To

Goblyn


Goblyn is a tool focused to enumeration and capture ...

GitHub📄 How To

sigurlfind3r


A passive reconnaissance tool for known URLs discove...

GitHub📄 How To

URL-Extractor


Bulk Da Cheker a free tool development and managed b...

Site📄 How To

assetfinder


Find domains and subdomains potentially related to a...

GitHub📄 How To

balabolka


Balabolka is a Text-To-Speech (TTS) program. All com...

Site📄 How To

BBOT


BBOT is a recursive, modular OSINT framework inspire...

GitHub📄 How To

GooFuzz


GooFuzz is a script written in Bash Scripting that u...

GitHub📄 How To

Contact