sock007 Goto Github PK

adversarial-threat-detector

anteros

The Anteros project arose from the need to conduct cyber-security studies involving Phishings and other types of security tests. Anteros is a program capable of shortening and modifying urls to carry out security tests.

autolocalprivilegeescalation

An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

autosploit

Automated Mass Exploiter

autosqli

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-privilege-escalation

A curated list of awesome privilege escalation

awesomexss

Awesome XSS stuff

bilibilili

A face-recognition-based attendance taking system

brokensmtp

Small python script to look for common vulnerabilities on SMTP server.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

crackmapexec

A swiss army knife for pentesting networks

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

edc

Event Data Collector

exploit-suggester

This tool reads the output of “showrev -p” on Solaris machines and outputs a list of exploits that you might want to try. It currently focusses on local exploitation of Solaris 8 on SPARC, but other version of Solaris are partially supported.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

gyoithon

GyoiThon is a growing penetration test tool using Machine Learning.

hardware-and-firmware-security-guidance

Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

justniffer

Justniffer Just A Network TCP Packet Sniffer .Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate Apache web server log files, track response times and extract all "intercepted" files from the HTTP traffic

legion

Automatic Enumeration Tool based in Open Source tools

machine_learning_security

Source code about machine learning and security.

mal.py

MALFORMED PACKET DoS slow HTTP and down websites

medusa

A fast and secure multi protocol honeypot.

msf-autopwn

Autoexploitation of some of the most common vulnerabilities in wild

msfbot

WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin

msploitego

Pentesting suite for Maltego based on data in a Metasploit database

net-creds

Sniffs sensitive data from interface or pcap

nmap-vulners

NSE script based on Vulners.com API

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

photon

Incredibly fast crawler designed for OSINT.