Shell Pentesting

Open-source Shell projects categorized as Pentesting
Edit details
Topics: Hacking Bash Penetration Testing Pentest Security
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
Sponsored

Top 23 Shell Pentesting Projects

  • Sn1per

    Attack Surface Management Platform

  • airgeddon

    This is a multi-use bash script for Linux systems to audit wireless networks.

    • Project mention: Hacking WiFi 101: basic concepts, terminology, and a real-life example | dev.to | 2024-04-03

    Known tools (scripts) that are used to exploit WPS vulnerabilities are Reaver and Bully. Another great automated tool is Airgeddon. With some luck, you will be able to run these tools on vulnerable access points (or network repeaters, which are usually vulnerable to WPS attacks) and retrieve the key.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • reconftw

    reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

    • Project mention: Automated recognition frameworks? | /r/bugbounty | 2023-06-23

  • lscript

    The LAZY script will make your life easier, and of course faster.

  • linux-smart-enumeration

    Linux enumeration tool for pentesting and CTFs with verbosity levels

  • EMBA

    EMBA - The firmware security analyzer

    • Project mention: New EMBA firmware analyzer release - EMBA v1.2.3 - R.I.P. Binwalk | /r/netsec | 2023-05-11

  • OneListForAll

    Rockyou for web fuzzing

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo

  • Sudomy

    Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

  • SSH-Snake

    SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

    • Project mention: FLaNK Weekly 08 Jan 2024 | dev.to | 2024-01-08

  • pwncat

    pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) (by cytopia)

  • GooFuzz

    GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

  • DDexec

    A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

  • ReverseAPK

    Quickly analyze and reverse engineer Android packages

  • Goohak

    Automatically Launch Google Hacking Queries Against A Target Domain

  • Open-Redirect-Payloads

    Open Redirect Payloads

  • archer-t2u-plus-linux

    TP-Link Archer T2U Plus / AC600 High Gain USB Wifi Adapter Review & Driver installation Guide for various platforms.

  • Cobra

    All in one tool to make your hacking easier. (by ManasHarsh)

  • huntkit

    Docker - Ubuntu with a bunch of PenTesting tools and wordlists

  • arno

    An automation tool to install the most popular tools for bug bounty or pentesting.

  • wafaray

    Enhance your malware detection with WAF + YARA (WAFARAY)

  • WiFiChallengeLab-docker

    Virtualized WiFi pentesting laboratory without the need for physical WiFi cards, using mac80211_hwsim. Docker version of WiFiChallenge Lab with modifications in the challenges and improved stability. Ubuntu virtual machine with virtualized networks and clients to perform WiFi attacks on OPN, WPA2, WPA3 and Enterprise networks.

    • Project mention: You shouldn't run NSA-grade Wi-Fi at home | news.ycombinator.com | 2024-01-04

  • Hack4Squad

    :skull: A bash hacking and scanning framework

  • webrecon

    Automated Web Recon Shell Scripts

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2024-04-03.

Shell Pentesting related posts

Index

What are some of the best open-source Pentesting projects in Shell? This list will help you:

Project Stars
1 Sn1per 7,501
2 airgeddon 5,990
3 reconftw 5,219
4 lscript 3,844
5 linux-smart-enumeration 3,174
6 EMBA 2,400
7 OneListForAll 2,332
8 Sudomy 1,839
9 SSH-Snake 1,803
10 pwncat 1,696
11 GooFuzz 1,216
12 DDexec 765
13 ReverseAPK 697
14 Goohak 688
15 Open-Redirect-Payloads 542
16 archer-t2u-plus-linux 323
17 Cobra 185
18 huntkit 161
19 arno 117
20 wafaray 106
21 WiFiChallengeLab-docker 99
22 Hack4Squad 54
23 webrecon 49

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com