Top 23 pentesting-tool Open-Source Projects

• Scanners-Box

  2 7,967 6.4

  A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

• Sn1per

  5 7,517 6.1 Shell

  Attack Surface Management Platform

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• WhatWeb

  1 5,096 0.0 Ruby

  Next generation web scanner

• hoaxshell

  6 2,880 3.3 Python

  A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

Project mention: ExploitToolFinder | /r/hacking | 2023-06-16

• malicious-pdf

  13 2,585 0.0 Python

  💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Project mention: Securing PDF Generators Against SSRF Vulnerabilities | /r/netsec | 2023-05-30

Wrote a tool two years ago that does some of the PDF-tests. But more could be added: https://github.com/jonaslejon/malicious-pdf

• learn365

  1 1,513 0.0

  This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

• Lockdoor-Framework

  2 1,294 2.7 Python

  🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• frida-ios-hook

  2 809 4.5 JavaScript

  A tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform

• APTRS

  5 770 5.0 Python

  Automated Penetration Testing Reporting System

  

• DDexec

  1 768 2.3 Shell

  A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

• offensive-docker

  1 709 0.0 Dockerfile

  Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

• o365spray

  2 670 5.6 Python

  Username enumeration and password spraying tool aimed at Microsoft O365.

Project mention: o365Spray Attack Respond Rule | /r/SaaSy_MSP_Community | 2023-06-13

o365Spray is a python script that can be used to password spray attack Microsoft 365 email accounts very efficiently. Here is the link to the script: https://github.com/0xZDH/o365spray

• Firecrack

  1 654 0.0

  :fire: Firecrack pentest tools: Facebook hacking random attack, deface, admin finder, bing dorking:

• SSTImap

  5 644 3.1 Python

  Automatic SSTI detection and exploitation tool with interactive interface

• Offensive-OSINT-Tools

  1 504 7.1

  OffSec OSINT Pentest/RedTeam Tools

• keyFinder

  1 443 0.0 HTML

  Keyfinder🔑 is a tool that let you find keys while surfing the web!

• IoT-PT

  1 403 7.1

  A Virtual environment for Pentesting IoT Devices

  

• shotdroid

  1 331 3.2 Java

  ShotDroid is a pentesting tool for android. There are 3 tools that have their respective functions, Get files from Android directory, internal and external storage, Android Keylogger + Reverse Shell and Take a webcam shot of the face from the front camera of the phone and PC.

• Nimbo-C2

  1 296 8.3 Nim

  Nimbo-C2 is yet another (simple and lightweight) C2 framework

• jwtXploiter

  3 257 0.0 Python

  A tool to test security of json web token

• ICS-Pentesting-Tools

  1 237 3.6

  A curated list of tools related to Industrial Control System (ICS) security and Penetration Testing

• offsec-tools

  3 217 9.9 C#

  Compiled tools for internal assessments

  

• crimson

  1 212 8.0 Python

  Web Application Security Testing Tools

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

pentesting-tools related posts

• ExploitToolFinder
  2 projects | /r/hacking | 16 Jun 2023
• Securing PDF Generators Against SSRF Vulnerabilities
  1 project | /r/netsec | 30 May 2023
• AD Offsec Testing Tools Pre-Compiled, up to date, and ready to use
  3 projects | /r/netsec | 22 Feb 2023
• HoaxShell Beta - Integrated with RevShells.com
  1 project | /r/hacking | 17 Feb 2023
• Is MSF Venom - Metasploit a good investment for the long run in terms of RATs?
  2 projects | /r/Hacking_Tutorials | 28 Dec 2022
• Does anyone know how those YouTubers locate Indian scam call centers?
  2 projects | /r/hacking | 6 Dec 2022
• In need of frontend contributors for Open Source
  1 project | /r/learnprogramming | 13 Nov 2022
• A note from our sponsor - InfluxDB
  www.influxdata.com | 26 Apr 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com