cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

chell

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

corsme

Cross Origin Resource Sharing MisConfiguration Scanner

corsy

CORS Misconfiguration Scanner

ctf-tools

Some setup scripts for security research tools.

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

cupp

Common User Passwords Profiler (CUPP)

cve-2018-15473

Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473

darkdump

Search The Deep Web Straight From Your Terminal

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

desectools

Ferramentas desenvolvidas durante o curso de pentest profissional da DESEC.

diva-android

DIVA Android - Damn Insecure and vulnerable App for Android

dnsrato

Pentest Reconnaissance Tool in Javascript based on Ricardo Longatto version.

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

emoji

emoji terminal output for Python

enum4linux-ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

exploit-notes

Sticky notes for pentesting, bug bounty, CTF.

extract-endpoints

Extract endpoints from source files.

faraday

Collaborative Penetration Test and Vulnerability Management Platform

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

ffuf

Fast web fuzzer written in Go

fimap

fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.

fopnp

Foundations of Python Network Programming (Apress) — scripts and examples

free-programming-books

:books: Freely available programming books

fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

fuzzagotchi

Automatic web fuzzer.