Awesome Penetration Testing

• awesome-tor

  2 396 0.0

  A list of awesome Tor related projects, articles, papers, etc

See also awesome-tor.

• nipe

  2 1,159 3.2 Perl

  Discontinued An engine to make Tor network your default gateway [Moved to: https://github.com/htrgouvea/nipe] (by GouveaHeitor)

Nipe - Script to redirect all traffic from the machine to the Tor network.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• dos-over-tor

  1 26 10.0 Python

  Proof of concept denial of service over TOR stress test tool

dos-over-tor - Proof of concept denial of service over Tor stress test tool.

• kalitorify

  4 970 2.6 Shell

  Transparent proxy through Tor for Kali Linux OS

kalitorify - Transparent proxy through Tor for Kali Linux OS.

• avet

  1 1,610 3.5 Shell

  AntiVirus Evasion Tool

AntiVirus Evasion Tool (AVET) - Post-process exploits containing executable files targeted for Windows machines to avoid being recognized by antivirus software.

• CarbonCopy

  3 1,245 0.0 Python

  A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

CarbonCopy - Tool that creates a spoofed certificate of any online website and signs an Executable for AV evasion.

• UniByAv

  1 239 10.0 Python

UniByAv - Simple obfuscator that takes raw shellcode and generates Anti-Virus friendly executables by using a brute-forcable, 32-bit XOR key.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• peCloakCapstone

  1 102 10.0 Python

  Platform independent peCloak fork based on Capstone

peCloakCapstone - Multi-platform fork of the peCloak.py automated malware antivirus evasion tool.

• Ciphey

  27 17,000 2.9 Python

  ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

  

Ciphey - Automated decryption tool using artificial intelligence and natural language processing.

• RsaCtfTool

  9 5,232 9.0 Python

  RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

  

RsaCtfTool - Decrypt data enciphered using weak RSA keys, and recover private keys from public keys using a variety of automated attacks.

• ctf-tools

  3 8,133 4.3 Shell

  Some setup scripts for security research tools.

ctf-tools - Collection of setup scripts to install various security research tools easily and quickly deployable to new machines.

• ShellPop

  2 1,427 0.0 Python

  Pop shells like a master.

shellpop - Easily generate sophisticated reverse or bind shell commands to help you save time during penetration tests.

• lair

  1 376 10.0 JavaScript

  Lair is a reactive attack collaboration framework and web application built with meteor.

  

Lair - Reactive attack collaboration framework and web application built with meteor.

• pentest-projects

  3 - -

Pentest Collaboration Framework (PCF) - Open source, cross-platform, and portable toolkit for automating routine pentest processes with a team.

• RedELK

  5 2,288 7.1 Python

  Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

  

RedELK - Track and alarm about Blue Team activities while providing better usability in long term offensive operations.

• DET

  1 815 10.0 Python

  (extensible) Data Exfiltration Toolkit (DET)

  

DET - Proof of concept to perform data exfiltration using either single or multiple channel(s) at the same time.

• trevorc2

  3 1,179 1.8 C

  TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

  

TrevorC2 - Client/server tool for masking command and control and data exfiltration through a normally browsable website, not typical HTTP POST requests.

• dnscat2

  5 3,257 0.0 PHP

dnscat2 - Tool designed to create an encrypted command and control channel over the DNS protocol, which is an effective tunnel out of almost every network.

• pwnat

  15 3,085 5.8 C

  The only tool/technique to punch holes through firewalls/NATs where multiple clients & server can be behind separate NATs without any 3rd party involvement. Pwnat is a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, DNS, router admin requirements, STUN/TURN/UPnP/ICE, or spoofing.

pwnat - Punches holes in firewalls and NATs.

• QueenSono

  1 132 0.0 Go

  Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)

QueenSono - Client/Server Binaries for data exfiltration with ICMP. Useful in a network where ICMP protocol is less monitored than others (which is a common case).

• unicorn

  3 3,631 4.2 Python

  Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18. (by trustedsec)

  

Magic Unicorn - Shellcode generator for numerous attack vectors, including Microsoft Office macros, PowerShell, HTML applications (HTA), or certutil (using fake certificates).

• pwntools

  8 11,480 9.1 Python

  CTF framework and exploit development library

  

Pwntools - Rapid exploit development framework built for use in CTFs.

• peda

  7 5,746 0.0 Python

  PEDA - Python Exploit Development Assistance for GDB

peda - Python Exploit Development Assistance for GDB.

• wordpress-exploit-framework

  1 900 10.0 Ruby

  Discontinued A Ruby framework designed to aid in the penetration testing of WordPress systems.

Wordpress Exploit Framework - Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems.

• Hwacha

  1 104 10.0 Python

  Deploy payloads to *Nix systems en masse

Hwacha - Post-exploitation tool to quickly execute payloads via SSH on one or more Linux systems simultaneously.

• Linux_Exploit_Suggester

  1 1,749 10.0 Perl

  Linux Exploit Suggester; based on operating system release number

  

Linux Exploit Suggester - Heuristic reporting on potentially viable exploits for a given GNU/Linux system.

• bruteforce-wallet

  7 334 4.6 C

  Try to find the password of an encrypted Peercoin (or Bitcoin, Litecoin, etc...) wallet file.

BruteForce Wallet - Find the password of an encrypted wallet file (i.e. wallet.dat).

• duplicut

  1 777 0.0 C

  Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

duplicut - Quickly remove duplicates, without changing the order, and without getting OOM on huge wordlists.

• gocrack

  1 995 0.0 Go

  Discontinued GoCrack is a management frontend for password cracking tools written in Go [Moved to: https://github.com/mandiant/gocrack] (by fireeye)

  

GoCrack - Management Web frontend for distributed password cracking sessions using hashcat (or other supported tools) written in Go.

• hate_crack

  2 1,596 3.6 Python

  A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

  

hate_crack - Tool for automating cracking methodologies through Hashcat.

• jwt-cracker

  1 943 5.7 JavaScript

  Simple HS256, HS384 & HS512 JWT token brute force cracker.

JWT Cracker - Simple HS256 JSON Web Token (JWT) token brute force cracker.

• Bless

  1 64 10.0 C#

  Bless - Gtk# Hex Editor (fork) (by bwrsandman)

Bless - High quality, full featured, cross-platform graphical hex editor written in Gtk#.

• hexedit

  1 95 4.2 C

  View and edit files in hexadecimal or in ASCII

hexedit - Simple, fast, console-based hex editor.

• awesome-industrial-control-system-security

  7 1,494 2.9 Python

  A curated list of resources related to Industrial Control System (ICS) security.

See also awesome-industrial-control-system-security.

• isf

  1 999 0.0 Python

  ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

Industrial Exploitation Framework (ISF) - Metasploit-like exploit framework based on routersploit designed to target Industrial Control Systems (ICS), SCADA devices, PLC firmware, and more.

• s7scan

  1 127 10.0 Python

  The tool for enumerating Siemens S7 PLCs through TCP/IP or LLC network

  

s7scan - Scanner for enumerating Siemens S7 PLCs on a TCP/IP or LLC network.

• awesome-vulnerable

  3 850 5.1

  A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

See also awesome-vulnerable.

• awesome-lockpicking

  1 1,303 0.0

  :unlock::sunglasses: A curated list of awesome guides, tools, and other resources related to the security and compromise of locks, safes, and keys.

See awesome-lockpicking.

• Bella

  1 177 10.0 Python

  Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻

Bella - Pure Python post-exploitation data mining and remote administration tool for macOS.

• x64dbg

  32 43,170 9.1 C++

  An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

  

x64dbg - Open source x64/x32 debugger for windows.

• EvilOSX

  5 2,171 0.0 Python

  An evil RAT (Remote Administration Tool) for macOS / OS X.

EvilOSX - Modular RAT that uses numerous evasion and exfiltration techniques out-of-the-box.

• AutoSploit

  1 4,918 0.0 Python

  Automated Mass Exploiter

AutoSploit - Automated mass exploiter, which collects target by employing the Shodan.io API and programmatically chooses Metasploit exploit modules based on the Shodan query.

• ZAP

  61 11,987 9.2 Java

  The ZAP core project

  

OWASP Zed Attack Proxy (ZAP) - Feature-rich, scriptable HTTP intercepting proxy and fuzzer for penetration testing web applications.

• decker

  1 286 10.0 Go

  Declarative penetration testing orchestration framework (by stevenaldinger)

Decker - Penetration testing orchestration and automation framework, which allows writing declarative, reusable configurations capable of ingesting variables and using outputs of tools it has run as inputs to others.

• faraday

  8 4,615 5.0 Python

  Open Source Vulnerability Management Platform (by infobyte)

  

Faraday - Multiuser integrated pentesting environment for red teams performing cooperative penetration tests, security audits, and risk assessments.

• pupy

  3 8,129 3.7 Python

  Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Pupy - Cross-platform (Windows, Linux, macOS, Android) remote administration and post-exploitation tool.

• wappalyzer

  80 8,373 9.8 JavaScript

  Discontinued Identify technology on websites.

  

Wappalyzer - Wappalyzer uncovers the technologies used on websites.

• CrackMapExec

  8 7,438 8.7 Python

  Discontinued A swiss army knife for pentesting networks

  

CrackMapExec - Swiss army knife for pentesting networks.

• torsocks

  563 498 0.0 C

  Library to torify application - NOTE: upstream has been moved to https://gitweb.torproject.org/torsocks.git

Tor - Free software and onion routed overlay network that helps you defend against traffic analysis.

• ikeforce

  1 200 10.0 Python
  

IKEForce - Command line IPSEC VPN brute forcing tool for Linux that allows group name/ID enumeration and XAUTH brute forcing capabilities.

• legion

  4 983 5.8 Python

  Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems. (by GoVanguard)

  

Legion - Graphical semi-automated discovery and reconnaissance framework based on Python 3 and forked from SPARTA.

• PRET

  12 3,760 0.9 Python

  Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

  

Printer Exploitation Toolkit (PRET) - Tool for printer security testing capable of IP and USB connectivity, fuzzing, and exploitation of PostScript, PJL, and PCL printer language features.

• sslstrip

  7 1,857 0.0 Python

  A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.

sslstrip - Demonstration of the HTTPS stripping attacks.

• spiderfoot

  19 11,723 6.6 Python

  SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Spiderfoot - Multi-source OSINT automation tool with a Web UI and report visualizations.

• SigPloit

  1 - -

SigPloit - Signaling security testing framework dedicated to telecom security for researching vulnerabilites in the signaling protocols used in mobile (cellular phone) operators.

• SIET

  2 556 2.6 Python

  Smart Install Exploitation Tool

  

Smart Install Exploitation Tool (SIET) - Scripts for identifying Cisco Smart Install-enabled switches on a network and then manipulating them.

• john

  77 9,267 9.3 C

  John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

  

John the Ripper - Fast password cracker.

• thc-hydra

  18 8,997 5.8 C

  hydra

THC Hydra - Online password cracking tool with built-in support for many network protocols, including HTTP, SMB, FTP, telnet, ICQ, MySQL, LDAP, IMAP, VNC, and more.

• tsunami-security-scanner

  4 8,118 7.5 Java

  Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

  

Tsunami - General purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

• zarp

  1 1,415 0.0 Python

  Network Attack Tool

Zarp - Network attack tool centered around the exploitation of local networks.

• dnstwist

  23 4,535 7.8 Python

  Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dnstwist - Domain name permutation engine for detecting typo squatting, phishing and corporate espionage.

• impacket

  2 7,374 0.0 Python

  Discontinued Impacket is a collection of Python classes for working with network protocols. [Moved to: https://github.com/SecureAuthCorp/impacket] (by CoreSecurity)

  

impacket - Collection of Python classes for working with network protocols.

• PivotSuite

  1 422 2.8 Python

  Network Pivoting Toolkit

pivotsuite - Portable, platform independent and powerful network pivoting toolkit.

• routersploit

  1 9,697 0.8 Python

  Discontinued Exploitation Framework for Embedded Devices [Moved to: https://github.com/threat9/routersploit] (by reverse-shell)

  

routersploit - Open source exploitation framework similar to Metasploit but dedicated to embedded devices.

• rshijack

  1 431 5.3 Rust

  TCP connection hijacker, Rust rewrite of shijack

rshijack - TCP connection hijacker, Rust rewrite of shijack.

• anevicon

  1 32 0.0 Rust

  Discontinued :fire: The most powerful UDP-based load generator, written in Rust

Anevicon - Powerful UDP-based load generator, written in Rust.

• LOIC

  12 2,470 2.7 C#

  Discontinued Deprecated - Low Orbit Ion Cannon - An open source network stress tool, written in C#. Based on Praetox's LOIC project. USE ON YOUR OWN RISK. WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES. IF YOU GET V& IT IS YOUR FAULT.

Low Orbit Ion Canon (LOIC) - Open source network stress tool written for Windows.

• Metasploit

  117 32,790 10.0 Ruby

  Metasploit Framework

  

Metasploit - Software for offensive security teams to help verify vulnerabilities and manage security assessments.

• Memcrashed-DDoS-Exploit

  3 1,302 0.0 Python

  DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API

Memcrashed - DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API.

• slowloris

  3 2,335 2.8 Python

  Low bandwidth DoS tool. Slowloris rewrite in Python.

SlowLoris - DoS tool that uses low bandwidth on the attacking side.

• t50

  1 - -

T50 - Faster network stress tool.

• ufonet

  2 2,071 0.0 JavaScript

  UFONet - Denial of Service Toolkit

UFONet - Abuses OSI layer 7 HTTP to create/manage 'zombies' and to conduct different attacks using; GET/POST, multithreading, proxies, origin spoofing methods, cache evasion techniques, etc.

• ACLight

  2 763 10.0 PowerShell

  A script for advanced discovery of Privileged Accounts - includes Shadow Admins

  

ACLight - Script for advanced discovery of sensitive Privileged Accounts - includes Shadow Admins.

• blackarch

  13 2,675 9.8 Shell

  An ArchLinux based distribution for penetration testers and security researchers.

  

BlackArch - Arch GNU/Linux-based distribution for penetration testers and security researchers.

• aquatone

  4 4,974 0.0 Go

  Discontinued A Tool for Domain Flyovers

AQUATONE - Subdomain discovery tool utilizing various open sources producing a report that can be used as input to other tools.

• CloudFail

  1 2,120 2.0 Python

  Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

CloudFail - Unmask server IP addresses hidden behind Cloudflare by searching old database records and detecting misconfigured DNS.

• masscan

  64 22,637 7.8 C

  TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Mass Scan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

• bettercap

  28 15,681 1.0 Go

  The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

  

BetterCAP - Modular, portable and easily extensible MITM framework.

• amass

  19 11,185 6.9 Go

  In-depth attack surface mapping and asset discovery

  

OWASP Amass - Subdomain enumeration via scraping, web archives, brute forcing, permutations, reverse DNS sweeping, TLS certificates, passive DNS data sources, etc.

• ScanCannon

  1 405 5.8 Shell

  External attack surface discovery, enumeration and reconnaissance for massive networks

ScanCannon - Python script to quickly enumerate large networks by calling masscan to quickly identify open ports and then nmap to gain details on the systems/services on those ports.

• xray

  3 2,143 0.0 Go

  XRay is a tool for recon, mapping and OSINT gathering from public networks. (by evilsocket)

XRay - Network (sub)domain discovery and reconnaissance automation tool.

• dnsenum

  2 553 10.0 Perl

  dnsenum is a perl script that enumerates DNS information

dnsenum - Perl script that enumerates DNS information from a domain, attempts zone transfers, performs a brute force dictionary style attack, and then performs reverse look-ups on the results.

• dnsmap

  1 110 10.0 C

  fork of http://code.google.com/p/dnsmap/source/checkout

dnsmap - Passive DNS network mapper.

• dnsrecon

  5 2,477 7.6 Python

  DNS Enumeration Script

dnsrecon - DNS enumeration script.

• SQLMap

  40 30,560 8.7 Python

  Automatic SQL injection and database takeover tool

  

SQLmap - Automatic SQL injection and database takeover tool.

• fierce

  4 1,506 1.5 Python

  A DNS reconnaissance tool for locating non-contiguous IP space.

fierce - Python3 port of the original fierce.pl DNS reconnaissance tool for locating non-contiguous IP space.

• passivedns-client

  1 195 0.0 Ruby

  passivedns-client provides a library and a query tool for querying several passive DNS providers

passivedns-client - Library and query tool for querying several passive DNS providers.

• prototype-pollution-explained

  3 75 0.0 JavaScript

  Prototype Pollution in JavaScript

Snyk Vulnerability DB - Detailed information and remediation guidance for vulnerabilities known by Snyk.

• passivedns

  1 1,642 0.0 C

  A network sniffer that logs all DNS server replies for use in a passive DNS setup

passivedns - Network sniffer that logs all DNS server replies for use in a passive DNS setup.

• HexFiend

  10 5,165 9.1 Objective-C

  A fast and clever hex editor for macOS

  

Hex Fiend - Fast, open source, hex editor for macOS with support for viewing binary diffs.

• RustScan

  26 12,178 4.2 Rust

  🤖 The Modern Port Scanner 🤖

  

RustScan - Lightweight and quick open-source port scanner designed to automatically pipe open ports into Nmap.

• scanless

  2 1,063 0.0 Python

  Discontinued online port scan scraper

scanless - Utility for using websites to perform port scans on your behalf so as not to reveal your own IP.

• smbmap

  2 1,686 7.0 Python

  SMBMap is a handy SMB enumeration tool

smbmap - Handy SMB enumeration tool.

• subbrute

  3 3,241 0.0 Python

  A DNS meta-query spider that enumerates DNS records, and subdomains.

subbrute - DNS meta-query spider that enumerates DNS records, and subdomains.

• mitmproxy

  152 34,347 9.4 Python

  An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

  

mitmproxy - Interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

• awesome-pcaptools

  4 2,983 2.3

  A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.

See also awesome-pcaptools.

• Dshell

  2 5,441 5.4 Python

  Dshell is a network forensic analysis framework.

  

Dshell - Network forensic analysis framework.

• netzob

  2 747 0.0 Python

  Netzob: Protocol Reverse Engineering, Modeling and Fuzzing

  

Netzob - Reverse engineering, traffic generation and fuzzing of communication protocols.

• netsniff-ng

  2 1,177 0.0 C

  A Swiss army knife for your daily Linux network plumbing.

  

netsniff-ng - Swiss army knife for network sniffing.

• sniffglue

  5 1,049 6.8 Rust

  Secure multithreaded packet sniffer

sniffglue - Secure multithreaded packet sniffer.

• Kaitai Struct

  44 3,830 7.5 Shell

  Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby

  

Kaitai Struct - File formats and network protocols dissection language and web IDE, generating parsers in C++, C#, Java, JavaScript, Perl, PHP, Python, Ruby.

• hping

  1 1,366 0.0 C

  hping network tool

hping3 - Network tool able to send custom TCP/IP packets.

• pig

  1 453 1.8 C

  A Linux packet crafting tool. (by rafael-santiago)

pig - GNU/Linux packet crafting tool.

• hashcat

  103 19,873 8.8 C

  World's fastest and most advanced password recovery utility

  

Hashcat - The more fast hash cracker.

• scapy

  26 10,028 9.3 Python

  Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

  

scapy - Python-based interactive packet manipulation program and library.

• habu

  1 855 0.0 Python

  Hacking Toolkit

Habu - Python utility implementing a variety of network attacks, such as ARP poisoning, DHCP starvation, and more.

• lambda-proxy

  1 38 10.0 Python

  Lambda-Proxy creates an HTTP proxy listening on localhost port 8082. When it receives an HTTP POST request with a very specific structure , it will parse the request, extract the relevant data required for the test, and will invoke your AWS Lambda function using the AWS SDK client.invoke() method. It was created for testing AWS Lambda functions with SQLMap as described here: https://www.puresec.io/blog/automated-sql-injection-testing-of-serverless-functions-on-a-shoestring-budget-and-some-good-m

  

Lambda-Proxy - Utility for testing SQL Injection vulnerabilities on AWS Lambda serverless functions.

• MITMf

  8 3,186 0.0 Python

  Discontinued Framework for Man-In-The-Middle attacks

MITMf - Framework for Man-In-The-Middle attacks.

• i2p.i2p

  114 1,870 9.4 Java

  I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.

  

I2P - The Invisible Internet Project.

• morpheus

  2 830 10.0 HTML

  Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)

Morpheus - Automated ettercap TCP/IP Hijacking tool.

• gophish

  58 10,634 2.8 Go

  Open-Source Phishing Toolkit

  

Gophish - Open-source phishing framework.

• ssh-mitm

  2 1,581 0.0 C

  SSH man-in-the-middle tool

SSH MITM - Intercept SSH connections with a proxy; all plaintext passwords and sessions are logged to disk.

• dnschef

  1 845 0.0 Python

  DNSChef - DNS proxy for Penetration Testers and Malware Analysts

dnschef - Highly configurable DNS proxy for pentesters.

• Cppcheck

  11 5,448 9.9 C++

  static analysis of C/C++ code

cppcheck - Extensible C/C++ static analyzer focused on finding bugs.

• evilgrade

  4 1,250 0.0 Perl

  Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.

  

evilgrade - Modular framework to take advantage of poor upgrade implementations by injecting fake updates.

• mallory

  1 319 2.0 Go

  HTTP/HTTPS proxy over SSH

mallory - HTTP/HTTPS proxy over SSH.

• iodine

  58 5,790 5.1 C

  Official git repo for iodine dns tunnel

Iodine - Tunnel IPv4 data through a DNS server; useful for exfiltration from networks where Internet access is firewalled, but DNS queries are allowed.

• oregano

  1 21 10.0 Python

  Discontinued Man-in-the-middle against Tor bridges

oregano - Python module that runs as a machine-in-the-middle (MITM) accepting Tor client requests.

• lynis

  72 12,507 7.8 Shell

  Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

  

Lynis - Auditing tool for UNIX-based systems.

• sslyze

  10 3,138 7.5 Python

  Fast and powerful SSL/TLS scanning library.

SSLyze - Fast and comprehensive TLS/SSL configuration analyzer to help identify security mis-configurations.

• crackpkcs12

  1 135 10.0 Shell

  A multithreaded program to crack PKCS#12 files (p12 and pfx extensions)

  

crackpkcs12 - Multithreaded program to crack PKCS#12 files (.p12 and .pfx extensions), such as TLS/SSL certificates.

• mimikatz

  25 18,703 5.2 C

  A little tool to play with Windows security

mimikatz - Credentials extraction tool for Windows operating system.

• awesome-dva

  19 31 0.0 JavaScript

  A curated list of "damn vulnerable apps" and exploitable VMs / wargames. See contributing.md for information.

Awesome Penetration Testing

• angr

  13 7,203 9.7 Python

  A powerful and user-friendly binary analysis platform!

  

angr - Platform-agnostic binary analysis framework.

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Suggest a related project