Pentesting Libraries

97 Components & Libraries

Sortby

Pentesting Libraries

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

SpiderFoot can be used offensively (e.g. in a red team exercise or penetration test) for reconnaissance of your target or defensively to gather information about what you or your organisation might h…

Web path scanner

An advanced web path brute-forcer Choose one of these installation options: dirsearch allows you to pause the scanning progress with CTRL+C, from here, you can save the progress (and continue later),…

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Small security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.

Python tool for phishing

A simple python tool for phishing This tool was created for the purpose of phishing during a penetration test. I wanted to create command line tool (to allow for automation) that would take a pre-cra…

A simple tool for interacting with OWASP ZAP from the commandline.

A commandline tool that wraps the OWASP ZAP API for controlling ZAP and executing quick, targeted attacks. To install the latest release from PyPI, you can run the following command: To install the l…

Information about my experiences in cybersecurity :skull:

Information about my cybersecurity experiences ... This repository is divided by the next sections: Bibliography

A collection of custom security tools for quick needs.

‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: Test CO…

Web hacking framework with tools, exploits by python

Code from Blackhat Python book

The iOS Security Testing Framework

Tactics, Techniques, and Procedures

Tactics, Techniques, and Procedures (aka. my notes) Resources to define, understand the execution, and goals of Red Teaming. These resources have an emphasis on Enterprise Red Teaming in the cloud

📡 A python program to create a fake AP and sniff data.

I'm not responsible for anything you do with this program, so please only use it for good and educational purposes.

A collection of public offensive and defensive security related scripts for InfoSec students.

A collection of public offensive and defensive security related scripts for InfoSec students. Only run these in a controlled and authorized manner! Whenever available, original copyright notices are …

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

The primary motivation behind the creation of this was to demonstrate how a lot of the commonly exploited Active Directory misconfiguration can be chained together to gain Administrator level privile…

Python 3.5+ DNS asynchronous brute force utility

A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Alternately you can install the usual way: Get help: Run a brute force with some custom options: Run a brute force, su…

A REST API security testing framework.

If you like the project, you can buy me beers :)

Penetration Testing, Vulnerability Assessment and Red Team Learning

This repo is a collection of tools and commands for pentesting and red teaming assessments updating soon ....

👻 A LAN dropbox chatbot controllable via Telegram

Boot up the Pi, get an SSH sell or connect a monitor and a keyboard and enter these commands: Make sure to try it out in your lab first and test if lanGhost is responding to your messages! If you are…

IP Tools To quickly get information about IP Address's, Web Pages and DNS records.

This Tools is a collection of online IP Tools that can be used to quickly get information about IP Address's, Web Pages and DNS records. Determine the registered owner of a domain or IP address block…

Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access Tool.

Loki.Rat is made of two main programs: The Web interface can be run on any server running Python. The agent[Payload] can be compiled to native executables using pyinstaller. Install The Loki.Rat Open…

Find web directories without bruteforce

If you have Pip installed on your system, you can use it to install the latest Dirhunt stable version: This software must not be used on third-party servers without permission. Dirhunt has been creat…

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

Python based backdoor that uses Gmail to exfiltrate data as an e-mail attachment. This RAT will help someone during red team engagements to backdoor any Windows machines. It tracks the user activity …

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

Takedown WiFi access points, devices in your network, servers, services, and Bluetooth devices with ease. Just enter the following line to install Raven-Storm on Linux.

Python network worm that spreads on the local network and gives the attacker control of these machines.

Python network worm that spreads on the local network and gives the attacker control of these machines. This code is not finished and works more like a "worm template" for you to get inspiration at t…