Pentest

System Administration

Cnitch – Container Snitch Checks Running Processes Under Docker Engine

Mistica – Swiss Army Knife For Arbitrary Communication Over Application

Post Exploitation

DeimosC2 – Golang Command & Control Framework For Post-Exploitation

Exploitation Tools

EternalBlueC – EternalBlue Suite Remade In C/C++

10
CWFF – Create Your Custom Wordlist For Fuzzing
CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using...
13
Cloudsplaining – AWS IAM Security Tool That Identifies Violations
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example...
11
dazzleUP – Detect Privilege Escalation Vulnerabilities Caused By Misconfigurations
A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. dazzleUP detects...
15
Kubei – A Flexible Kubernetes Runtime Scanner
Kubei is a vulnerabilities scanning tool that allows users to get an accurate and immediate risk assessment of their kubernetes clusters....
10
uDork – Google Search Techniques To Obtain Sensitive Information
uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or...
12
Oralyzer – Tool To Identify Open Redirection
Oralyzer, a simple python script, capable of identifying the open redirection vulnerability in a website. It does that by fuzzing the...
26
Kubebox – Terminal And Web Console For Kubernetes
Terminal and Web console for Kubernetes Features Configuration from kubeconfig files (KUBECONFIG environment variable or $HOME/.kube) Switch contexts interactively Authentication support...
22
How to Host Your Own Tor Hidden Service with an Onion Address
Tor is free and open-source software for enabling anonymous communication. The name derived from the acronym for the original software project...
22
Commit Stream – Find Github Repositories By Extracting Commit Logs
commit-stream drinks commit logs from the Github event firehose exposing the author details (name and email address) associated with Github repositories...
21
Intelspy – Perform Automated Network Reconnaissance Scans
Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence spy tool which performs automated enumeration...
20
TrustJack – Yet Another PoC For Hijacking DLLs in Windows
Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows Blogpost: https://redteamer.tips/?p=108 To be used with a cmd that does whatever the F you want, for...
16
SNOWCRASH – A Polyglot Payload Generator
A polyglot payload generator Introduction SNOWCRASH creates a script that can be launched on both Linux and Windows machines. Payload selected...
20
HawkScan – Reconnaissance And Information Gathering On A Website
Security Tool for Reconnaissance and Information Gathering on a website. (python 2.x & 3.x) This script use “WafW00f” to detect the...
24
Sitedorks – Search Popular Search Engines For A Search Term
Search Google, Bing, Yahoo or Yandex for a search term with different websites. A default list is already provided, which contains...
19
Autoenum – Automatic Service Enumeration Script
Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs...
20
reNgine – Reconnaissance Framework For Gathering Information During Penetration Testing
reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines,...
19
AuthMatrix – Burp Suite Extension That Provides A Way To Test Authorization
AuthMatrix is an extension to Burp Suite that provides a simple way to test authorization in web applications and web services....

Page 1 of 5712 3 4 5 Next ›Last »

To Top

Pin It on Pinterest