gitakaal Goto Github PK

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

hackerenv

hackerone-reports

Top disclosed reports from HackerOne

hackthebox-writeups

Writeups for HacktheBox 'boot2root' machines

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

impacket

Impacket is a collection of Python classes for working with network protocols.

init

john-the-ripper

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

ligolo

Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

livetargetsfinder

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

meg

Fetch many paths for many hosts - without killing the hosts

memlabs

Educational, CTF-styled labs for individuals interested in Memory Forensics

mstg-hacking-playground

needle

The iOS Security Testing Framework

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

noxss

Faster xss scanner,support reflected-xss and dom-xss

operative-framework

operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.

osint

Collections of Javascript bookmarklets created to aid in OSINT collection

owasp-web-checklist

OWASP Web Application Security Testing Checklist

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

pagodo

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping

parameth

This tool can be used to brute discover GET and POST parameters

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phonesploit

A tool for remote ADB exploitation in Python3 for all Machines.

php-webshells-collection

Most Wanted Private and Public PHP Web Shells Can Be Downloaded Here. (Educational Purpose Only)

pocsuite

This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.