Infosec Libraries

40 Components & Libraries

Sortby

Infosec Libraries

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

Web path scanner

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

unix wildcard attacks

It goes something like this: Feel free to change them!

Exploitation Framework for Embedded Devices

The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing operations: Required: Optional: Bluetoot…

📡 A python program to create a fake AP and sniff data.

I'm not responsible for anything you do with this program, so please only use it for good and educational purposes.

A python script that finds endpoints in JavaScript files

Build the Docker image: Run with Docker

Penetration Testing, Vulnerability Assessment and Red Team Learning

This repo is a collection of tools and commands for pentesting and red teaming assessments updating soon ....

This application was created as a POC for how to scan your local network traffic for HTTP requests and then inject various javascript cryptocurrency miners into the response payloads

INTRO: Miner in the Middle is a script that allows you to inject javascript miners into targets on your local network. It does this using python, scapy and netfilterqueue. When you run the applicatio…

An information security preparedness tool to do adversarial simulation.

Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test (mostly) your host based…

PyIris is a modular remote access trojan toolkit written in python targeting Windows and Linux systems.

The PyIris project is a modular remote access trojan toolkit written completely in python. It allows users to dynamically build, generate and encode/encrypt remote access trojan payloads for remote c…

PyIris is a modular remote access trojan toolkit written in python targeting Windows and Linux systems.

The PyIris project is a modular remote access trojan toolkit written completely in python.It allows users to dynamically build, generate and encode/encrypt remote access trojan payloads for remotecon…

Common password pattern generator using strings list

In this parameter we are going to select how the tool will work when shifting strings. You can choose one of three:

OWASP Honeypot, Automated Deception Framework.

We've set up a live API on a few servers in Stockholm area, you can use API calls and information without any limitation, the service is running on a tiny VPS, please do not send a lot of requests.

A toolkit for Security Researchers

1 positional arguments needed: Optional arguments: Optional arguments: 3 positional arguments needed: Optional arguments: 1 positional argument needed: Optional arguments: Please fork, create merge r…

Exploit Development, Reverse Engineering & Cryptography

Reverse Engineering, Exploitation & Crypto. XANAX - A custom shellcode encoder written in assembly : Password Protected Reverse Shell (Linux/ARMv6) Solution for the crackme "Crack3-by-D4RK_FL0W" …

LinkedinScraper is an another information gathering tool written in python. You can scrape employees of companies on Linkedin.com and then create these employee names, titles and emails.

LinkedinScraper is an another information gathering tool written in python. You can scrape employees of companies on Linkedin.com and then create these employee names, titles and emails. Install requ…

Python Tutorial - || Advanced Keylogger || Code Walk-through || Hacking/Info-Sec ||

This tool is only for testing and academic purposes and can only be used where strict consent has been given. Do not use it for illegal purposes! It is the end user’s responsibility to obey all appli…

Google Chrome Database Cracking Hacking - Get username & passwords

Simple Keylogger with smtp to send emails on your account using python works on linux and Windows

do you gonna need pyxhood and python-xlibthe last one rest is pyscreenshot

Python Ransomware Tutorial - YouTube tutorial explaining code + showcasing the ransomware with victim/target roles

To test the Ransomware out on your machine, edit lines 49 and 140 in the ransomware.py file with your own absolute paths etc for testing purposes and so you can use the localRoot folder [ATTACKER] Ru…

Create adversarial attacks against machine learning Windows malware detectors

If you use our library, please cite us! Also, depending on the manipulations / formalization you are using, please cite our work: If you encounter something strange, feel free to open an issue! I am …

Pentest: Subdomains enumeration tool for penetration testers.

Tugarecon is a python tool designed to enumerate subdomains using modules. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Bruteforce wa…

DevBrute is a versatile password brute forcing tool designed to tackle a wide range of Social Media accounts and Web Applications. With its robust capabilities, it's adept at breaking through various security barriers.

The installation of this tool is easy and you can install this tool in just three steps. To install DevBrute, follow these steps: DevBrute supports various configurations through command-line options…

BusKill's main CLI/GUI app for arming/disarming/configuring the BusKill laptop kill cord

BusKill is a laptop kill cord that can trigger your computer to lock or shutdown when it's physically separated from you. To read our comprehensive documentation, see: For instructions on downloading…

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

Name-that-hash will name that hash type! Honestly, do you need any more convincing? 😂 But, let's look at the features more in-depth. Here HashID displays Skype before NTLM, whereas Name-That-Hash und…