Infosec Libraries

The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing operations: Required: Optional: Bluetoot…

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

Build the Docker image: Run with Docker

I'm not responsible for anything you do with this program, so please only use it for good and educational purposes.

Name-that-hash will name that hash type! Honestly, do you need any more convincing? 😂 But, let's look at the features more in-depth. Here HashID displays Skype before NTLM, whereas Name-That-Hash und…

Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test (mostly) your host based…

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. AutoPWN Suite has a very user friendly easy to read output. You can install it using pip. (sudo recommend…

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

The tool has been tested using Python 3.8.10 on Kali Linux 2022.2/3, Ubuntu 20.04.5 LTS, Windows 10/11. Windows Installation Linux Installation Windows Linux This project is supported by:

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for differ…

Well, Spoofy is different and here is why: After the initial testing using Microsoft 365, some combinations were retested using Protonmail and Gmail due to the differences in their handling of banner…

To test the Ransomware out on your machine, edit lines 49 and 140 in the ransomware.py file with your own absolute paths etc for testing purposes and so you can use the localRoot folder [ATTACKER] Ru…

We've set up a live API on a few servers in Stockholm area, you can use API calls and information without any limitation, the service is running on a tiny VPS, please do not send a lot of requests.

The PyIris project is a modular remote access trojan toolkit written completely in python. It allows users to dynamically build, generate and encode/encrypt remote access trojan payloads for remote c…

The PyIris project is a modular remote access trojan toolkit written completely in python.It allows users to dynamically build, generate and encode/encrypt remote access trojan payloads for remotecon…

Reverse Engineering, Exploitation & Crypto. XANAX - A custom shellcode encoder written in assembly : Password Protected Reverse Shell (Linux/ARMv6) Solution for the crackme "Crack3-by-D4RK_FL0W" …

If you use our library, please cite us! Also, depending on the manipulations / formalization you are using, please cite our work: If you encounter something strange, feel free to open an issue! I am …

Pycript is a Burp Suite extension that enables users to encrypt and decrypt requests and response for manual and automated application penetration testing. It also allows users to create custom encry…

TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities. Inspired by DVWA, the contributors have tried their best to regenerat…

Why opt for sub.Monitor? This program offers easy setup due to its utilization of SQLite for storing all identified domains (removing the necessity for prior database management). Moreover, it boasts…

  This repo is a collection of tools and commands for pentesting and red teaming assessments updating soon ....

BusKill is a laptop kill cord that can trigger your computer to lock or shutdown when it's physically separated from you. To read our comprehensive documentation, see: For instructions on downloading…

In this parameter we are going to select how the tool will work when shifting strings. You can choose one of three:

It goes something like this: Feel free to change them!

1 positional arguments needed: Optional arguments: Optional arguments: 3 positional arguments needed: Optional arguments: 1 positional argument needed: Optional arguments: Please fork, create merge r…