Infosec Libraries

41 Components & Libraries

Sortby

Infosec Libraries

Exploitation Framework for Embedded Devices

The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing operations: Required: Optional: Bluetoot…

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

Web path scanner

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

A python script that finds endpoints in JavaScript files

Build the Docker image: Run with Docker

📡 A python program to create a fake AP and sniff data.

I'm not responsible for anything you do with this program, so please only use it for good and educational purposes.

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

Name-that-hash will name that hash type! Honestly, do you need any more convincing? 😂 But, let's look at the features more in-depth. Here HashID displays Skype before NTLM, whereas Name-That-Hash und…

An information security preparedness tool to do adversarial simulation.

Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test (mostly) your host based…

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. AutoPWN Suite has a very user friendly easy to read output. You can install it using pip. (sudo recommend…

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

Automated Penetration Testing Reporting System

The tool has been tested using Python 3.8.10 on Kali Linux 2022.2/3, Ubuntu 20.04.5 LTS, Windows 10/11. Windows Installation Linux Installation Windows Linux This project is supported by:

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for differ…

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

Well, Spoofy is different and here is why: After the initial testing using Microsoft 365, some combinations were retested using Protonmail and Gmail due to the differences in their handling of banner…

Python Ransomware Tutorial - YouTube tutorial explaining code + showcasing the ransomware with victim/target roles

To test the Ransomware out on your machine, edit lines 49 and 140 in the ransomware.py file with your own absolute paths etc for testing purposes and so you can use the localRoot folder [ATTACKER] Ru…

OWASP Honeypot, Automated Deception Framework.

We've set up a live API on a few servers in Stockholm area, you can use API calls and information without any limitation, the service is running on a tiny VPS, please do not send a lot of requests.

PyIris is a modular remote access trojan toolkit written in python targeting Windows and Linux systems.

The PyIris project is a modular remote access trojan toolkit written completely in python. It allows users to dynamically build, generate and encode/encrypt remote access trojan payloads for remote c…

PyIris is a modular remote access trojan toolkit written in python targeting Windows and Linux systems.

The PyIris project is a modular remote access trojan toolkit written completely in python.It allows users to dynamically build, generate and encode/encrypt remote access trojan payloads for remotecon…

Modular penetration testing platform that enables you to write, test, and execute exploit code.

Exploit Development, Reverse Engineering & Cryptography

Reverse Engineering, Exploitation & Crypto. XANAX - A custom shellcode encoder written in assembly : Password Protected Reverse Shell (Linux/ARMv6) Solution for the crackme "Crack3-by-D4RK_FL0W" …

DevBrute is a versatile password brute forcing tool designed to tackle a wide range of Social Media accounts and Web Applications. With its robust capabilities, it's adept at breaking through various security barriers.

The installation of this tool is easy and you can install this tool in just three steps. To install DevBrute, follow these steps: DevBrute supports various configurations through command-line options…

Create adversarial attacks against machine learning Windows malware detectors

If you use our library, please cite us! Also, depending on the manipulations / formalization you are using, please cite our work: If you encounter something strange, feel free to open an issue! I am …

Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty

Pycript is a Burp Suite extension that enables users to encrypt and decrypt requests and response for manual and automated application penetration testing. It also allows users to create custom encry…

Totally Insecure Web Application Project (TIWAP)

TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities. Inspired by DVWA, the contributors have tried their best to regenerat…

Self-hosted passive subdomain continous monitoring tool.

Why opt for sub.Monitor? This program offers easy setup due to its utilization of SQLite for storing all identified domains (removing the necessity for prior database management). Moreover, it boasts…

Pentest: Subdomains enumeration tool for penetration testers.

*** 03-05-2024 *** NEWS: Imagine that... In less than 28 seconds, it can discover 15464 subdomains. ********** AVAILABLE SOON ********** Tugarecon is a python tool designed to enumerate subdomains us…

This Python application is an OSINT (Open Source Intelligence) tool called "Ominis OSINT - Web Hunter." It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results.

🚀 Happy OSINTing! 🕵️‍♂️ These measures collectively contribute to ensuring user anonymity and privacy, providing a secure environment for conducting digital reconnaissance activities. 🌐 Premier Digit…