oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

patrowlmanager

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

pentesting-lab

Este Proyecto es para realizar pruebas de laboratorio en la mayoría de los entornos linux sin la necesidad de tener las herramientas instaladas de forma native el unico requerimiento es que se tenga docker y docker-compose instalado el el hosts

pentesting-web

Este proyecto va enfocado a la seguridad informática y al Hacking Etico, pudiendo desplegar herramientas como Metasplotable, Dradis DVWAP.

phonesploit

Using open Adb ports we can exploit a Andriod Device

phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

phpvuln

Audit tool to find common vulnerabilities in PHP source code

portainer-registry

pre-commit

A framework for managing and maintaining multi-language pre-commit hooks.

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

proftpd-1.3.3a

ProFTPD IAC Remote Root Exploit

prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls and many more additional checks that help on GDPR, HIPAA and other security frameworks.

purpleteam

CLI component of OWASP PurpleTeam

pwntools

CTF framework and exploit development library

pytm

A Pythonic framework for threat modeling

quack

Quack Toolkit is a set of tools to provide denial of service attacks. Quack Toolkit includes SMS attack tool, HTTP attack tool and many other attack tools.

raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

raindance

Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.

react-suspended-vulnerable-application

React Suspended is an educational frontend application riddled with security vulnerabilities

react-test-bench

Intentionally vulnerable React web application for exercising vulnerability detection

reactvulna

A deliberately vulnerable js app made with reactjs. For educational purposes.

redcloud

Automated Red Team Infrastructure deployement using Docker

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

retosweb

rover

Interactive Terraform visualization. State and configuration explorer.

ruby-shells

Simple forward and reverse shells that can be compiled and used on pen tests to avoid AV and used to get better access.

s3-inspector

Tool to check AWS S3 bucket permissions

s3scanner

Scan for open AWS S3 buckets and dump the contents

sample-node-app

Sample Node App to Habitize!

scantron

A distributed nmap / masscan scanning framework