Penetration Libraries

80 Components & Libraries

Sortby

Penetration Libraries

Web path scanner

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

A simple tool for interacting with OWASP ZAP from the commandline.

A commandline tool that wraps the OWASP ZAP API for controlling ZAP and executing quick, targeted attacks. To install the latest release from PyPI, you can run the following command: To install the l…

Information about my experiences in cybersecurity :skull:

Information about my cybersecurity experiences ... This repository is divided by the next sections: Bibliography

Exploits and Security Tools Framework 2.0.1

Pentest framework environment is the basis of IT security specialist’s toolkit. This software is essential as for learning and improving of knowledge in IT systems attacks and for inspections and pro…

Code from Blackhat Python book

fsociety Hacking Tools Pack – A Penetration Testing Framework

A collection of public offensive and defensive security related scripts for InfoSec students.

A collection of public offensive and defensive security related scripts for InfoSec students. Only run these in a controlled and authorized manner! Whenever available, original copyright notices are …

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised. Portia performs privilege escalation as well as lateral movement automatically in the network

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised Portia is a genus of jumping spider that fe…

Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.

Sh00t and repeat! Note: Always use docker start and docker stop. You may loose your data if you remove the container or the volume. It's important to keep your Sh00t to latest to avail the new featur…

Penetration Testing, Vulnerability Assessment and Red Team Learning

This repo is a collection of tools and commands for pentesting and red teaming assessments updating soon ....

This application was created as a POC for how to scan your local network traffic for HTTP requests and then inject various javascript cryptocurrency miners into the response payloads

INTRO: Miner in the Middle is a script that allows you to inject javascript miners into targets on your local network. It does this using python, scapy and netfilterqueue. When you run the applicatio…

Python Security Scripts

This is a current work in progress. As soon as I've finished the book, I'll fork this project and create a more usefull pentesting-framework. A simple zip-pw dictionary cracker. Usage: This script wi…

Automated Security Testing For REST API's

REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so…

Python Books for Security

This repository will never have a license.

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

Python based backdoor that uses Gmail to exfiltrate data as an e-mail attachment. This RAT will help someone during red team engagements to backdoor any Windows machines. It tracks the user activity …

All in One Hacking Tool for Linux & Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog

Video Tutorial : Coming Soon Video Tutorial : Coming Soon Thats It... If You Like This Repo. Please Share This With Your Friends..

Common password pattern generator using strings list

In this parameter we are going to select how the tool will work when shifting strings. You can choose one of three:

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

Takedown WiFi access points, devices in your network, servers, services, and Bluetooth devices with ease. Just enter the following line to install Raven-Storm on Linux.

Tool Information Gathering Write By Python.

Tool Information Gathering Write With Python.

A distributed nmap / masscan scanning framework complete with scan scheduling, engine pooling, subsequent scan port diff-ing, and an API client for automation workflows.

Scantron is coded for Python3.6+ exclusively and leverages Django for the web front-end, Django REST Framework as the API endpoint, PostgreSQL as the database, a Redis job queue for tasks, Postfix fo…

Hack the World using Termux

all that on Termux {1}-Payload Generator {2}- Merasploit-Framework installation {3} Beef-Framework installation {4} NGROK installation {6} WEB-HACKS {7} PASSWORD CRACK {8} Starting your web server

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

To install the application, simply use pip: To install the tool for development purposes, run the following command (after downloading a copy): To get an overview of all possible options, simply call…

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new subdomains deployed by specific organizations and …

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

"Oh, you think darkness is your ally. But you merely adopted the dark; I was born in it, molded by it. I didn't see the light until I was already a man, by then it was nothing to me but BLINDING! The…