Penetration-test Libraries

79 Components & Libraries

Sortby

Penetration-test Libraries

Web path scanner

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

fsociety Hacking Tools Pack – A Penetration Testing Framework

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

Osintgram offers an interactive shell to perform analysis on Instagram account of any users by its nickname. You can get: Fork/Clone/Download this repo Navigate to the directory Create a virtual envi…

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Used for penetration testing and/or red-teaming etc. I created this tool because i needed a third party tool to generate a bunch of PDF files with various links. Output will be written as: test1.pdf,…

Automated Security Testing For REST API's

REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so…

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

Have a look at the following commands to better understand this behaviour: Be advised that it is not reliable to send files via UDP Why unbreakable? Because it will keep coming back to you, even …

Hack the World using Termux

all that on Termux {1}-Payload Generator {2}- Merasploit-Framework installation {3} Beef-Framework installation {4} NGROK installation {6} WEB-HACKS {7} PASSWORD CRACK {8} Starting your web server

Fully featured and community-driven hacking environment

Exegol is a community-driven hacking environment, powerful and yet simple enough to be used by anyone in day to day engagements. Exegol is the best solution to deploy powerful hacking environments se…

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

Possibly missing python packages will be installed during the installation process.

All in One Hacking Tool for Linux & Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog

Video Tutorial : Coming Soon Video Tutorial : Coming Soon Thats It... If You Like This Repo. Please Share This With Your Friends..

An XSS exploitation command-line interface and payload generator.

toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for…

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new subdomains deployed by specific organizations and …

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

Python based backdoor that uses Gmail to exfiltrate data as an e-mail attachment. This RAT will help someone during red team engagements to backdoor any Windows machines. It tracks the user activity …

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. AutoPWN Suite has a very user friendly easy to read output. You can install it using pip. (sudo recommend…

Automated Penetration Testing Reporting System

The tool has been tested using Python 3.8.10 on Kali Linux 2022.2/3, Ubuntu 20.04.5 LTS, Windows 10/11. Windows Installation Linux Installation Windows Linux This project is supported by:

A distributed nmap / masscan scanning framework complete with scan scheduling, engine pooling, subsequent scan port diff-ing, and an API client for automation workflows.

Scantron is coded for Python3.6+ exclusively and leverages Django for the web front-end, Django REST Framework as the API endpoint, PostgreSQL as the database, a Redis job queue for tasks, Postfix fo…

Tool Information Gathering Write By Python.

Tool Information Gathering Write With Python.

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for differ…

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

Takedown WiFi access points, devices in your network, servers, services, and Bluetooth devices with ease. Just enter the following line to install Raven-Storm on Linux.

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

Well, Spoofy is different and here is why: After the initial testing using Microsoft 365, some combinations were retested using Protonmail and Gmail due to the differences in their handling of banner…

Tool Information Gathering & social engineering Write By [Python,JS,PHP]

[Support Ngrok]

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their …

NIVOS is a hacking tool that allows you to scan deeply , crack wifi, see people on your network. It applies to all linux operating systems. And it is improving every day, new packages are added. Thank You For Using NIVOS :> [NIVOS Created By NIVO Team]

NIVOS is a hacking tool that allows you to scan deeply , crack wifi, see people on your network. It applies to all linux operating systems. And it is improving every day, new packages are added. Than…

A Tools Session Hijacking And Stealer Local Passcode Telegram Windows

A Tools Session Hijacking And Stealer Local passcode Telegram Windows

Collection of reverse shells for red team operations, penetration testing, and offensive security.

Credits: UnD3sc0n0c1d0 /var/log/auth.log /var/log/auth.log&cmd=id /var/log/vsftpd.log /var/log/vsftpd.log&cmd=id /var/log/apache2/access.log /var/log/nginx/access.log /var/log/apache2/access.…

A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.

Python Hacking Tools (PyHTools) (pht) is a collection of python written hacking tools consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jamm…