phantasmlab Goto Github PK

psychopath

psychoPATH - hunting file uploads & LFI in the dark. This tool is a highly configurable payload generator detecting LFI & web root file uploads. Involves advanced path traversal evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator. Now available in the Burp App Store!

pyvoicechanger

Real Time Microphone Voice Changer on Python3 + Qt5

ransomware

Bug7sec Team - ransomware open source (web)

redxblue

a project created to simulate the environment with several security holes, to serve as a training platform for security researchers.

reptile

LKM Linux rootkit

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

screenlogger

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

shellevil

Struts 2 DefaultActionMapper Interactive Shell Exploit for CVE-2013-225 [S2-016]

sms_flooder

Software to send messages, Using the Twilio library, for the program to work correctly you must enter your: ACCOUNT_SID and AUTH_TOKEN, in the source .. Take the official website https://www.twilio.com

sslyze

Fast and powerful SSL/TLS server scanning library.

thezoo

A repository of LIVE malwares for your own joy and pleasure

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

unzipper

Small class to extract + compress .zip, .gz, .rar archives via browser.

vulnerablejavawebapplication

A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity

webshell

WebShell Dump

wfuzz

Web application fuzzer

whatwaf

Detect and bypass web application firewalls and protection systems

wordlist

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.

wpscan

WPScan is a black box WordPress vulnerability scanner

xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

zaproxy

The OWASP ZAP core project