00derp Goto Github PK

mywebappscripts

A collection of all the lists, scripts and techniques I use while doing web application penetration tests.

name-snoop

A script for customized DNS cache snooping

nasnum

The NAS Enumerator

netzob

Netzob: Protocol Reverse Engineering, Modeling and Fuzzing

ninjalinux

Do you desire to be free? Do you desire to be invincible... now you can, introducing, NinjaLinux -- Scripts for pentesting.

nmapgrapher

A tool to generate graph and other output from NMAP XML files

node-shells

nosql-exploitation-framework

A Python Framework For NoSQL Scanning and Exploitation

not-in-pentesting-class

The Dirty Secrets They Didn't Teach You In Pentesting Class

oauth2-redirector

Utility for testing OAuth2 CSRF vulnerabilities

oneliner

Convert any Python file into a single line of code.

opencv

Open Source Computer Vision Library

openskype

Analysis of the Skype VoIP client

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure completeness and consistency of the tests.

owasp-zsc

OWASP ZCR Shellcoder

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

packet-knife

An interactive packet listening and extraction tool.

packetstorm-exploits

Collection of publicly available exploits from Packetstorm

paddingoracledemos

parator

payloads

Git All the Payloads! A collection of web attack payloads.

pcc

PHP Secure Configuration Checker

pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

peda

PEDA - Python Exploit Development Assistance for GDB

pentest-tools

Penetration Testing Tools Developed by AppSec Consulting.

pentest_utils

Some utils and pocs

pentestly

Python and Powershell internal penetration testing framework

pfi

PFI (Port Forwarding Interceptor)

photon

Ridiculously fast crawler which extracts URLs, files, intel & endpoints from a target.

php-webshells

Common php webshells. Do not host the file(s) on your server!