Pentest Libraries

114 Components & Libraries

Sortby

Pentest Libraries

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

The tool is highly configurable and anybody can trivially create simple plugins or add new tests in the configuration files without having any development experience. OWTF is developed on KaliLinux a…

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

Web path scanner

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

[unmaintained] Post-exploitation tool

A simple POst-Exploitation Tool. The client program runs on the target machine and is configured with an IP address (the server) to connect to and a frequency to connect at. If the server isn't runni…

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

Python tool for phishing

A simple python tool for phishing This tool was created for the purpose of phishing during a penetration test. I wanted to create command line tool (to allow for automation) that would take a pre-cra…

A simple tool for interacting with OWASP ZAP from the commandline.

A commandline tool that wraps the OWASP ZAP API for controlling ZAP and executing quick, targeted attacks. To install the latest release from PyPI, you can run the following command: To install the l…

Information about my experiences in cybersecurity :skull:

Information about my cybersecurity experiences ... This repository is divided by the next sections: Bibliography

A collection of custom security tools for quick needs.

‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: Test CO…

Web hacking framework with tools, exploits by python

Code from Blackhat Python book

The iOS Security Testing Framework

Tactics, Techniques, and Procedures

Tactics, Techniques, and Procedures (aka. my notes) Resources to define, understand the execution, and goals of Red Teaming. These resources have an emphasis on Enterprise Red Teaming in the cloud

📡 A python program to create a fake AP and sniff data.

I'm not responsible for anything you do with this program, so please only use it for good and educational purposes.

A collection of public offensive and defensive security related scripts for InfoSec students.

A collection of public offensive and defensive security related scripts for InfoSec students. Only run these in a controlled and authorized manner! Whenever available, original copyright notices are …

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

The primary motivation behind the creation of this was to demonstrate how a lot of the commonly exploited Active Directory misconfiguration can be chained together to gain Administrator level privile…

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised. Portia performs privilege escalation as well as lateral movement automatically in the network

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised Portia is a genus of jumping spider that fe…

Python 3.5+ DNS asynchronous brute force utility

A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Alternately you can install the usual way: Get help: Run a brute force with some custom options: Run a brute force, su…

A REST API security testing framework.

If you like the project, you can buy me beers :)

Penetration Testing, Vulnerability Assessment and Red Team Learning

This repo is a collection of tools and commands for pentesting and red teaming assessments updating soon ....

👻 A LAN dropbox chatbot controllable via Telegram

Boot up the Pi, get an SSH sell or connect a monitor and a keyboard and enter these commands: Make sure to try it out in your lab first and test if lanGhost is responding to your messages! If you are…

IP Tools To quickly get information about IP Address's, Web Pages and DNS records.

This Tools is a collection of online IP Tools that can be used to quickly get information about IP Address's, Web Pages and DNS records. Determine the registered owner of a domain or IP address block…

Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access Tool.

Loki.Rat is made of two main programs: The Web interface can be run on any server running Python. The agent[Payload] can be compiled to native executables using pyinstaller. Install The Loki.Rat Open…

Find web directories without bruteforce

If you have Pip installed on your system, you can use it to install the latest Dirhunt stable version: This software must not be used on third-party servers without permission. Dirhunt has been creat…

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

Python based backdoor that uses Gmail to exfiltrate data as an e-mail attachment. This RAT will help someone during red team engagements to backdoor any Windows machines. It tracks the user activity …

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

Several REPL functions were provided by House to make the testing easier: To make House work; you would need: Often occues when there are multiple USB devices connected, try to restart the target app…

Related tags