penetration-testing-tools · GitHub Topics

Next generation web scanner

翻译 - 下一代网络扫描仪

安全 Web scanner Ruby penetration-testing kali-linux owasp penetration-testing-tools penetration-test Hacking hacking-tools network-security Reconnaissance appsec application-security pentesting pentesting-tools pentest web-hacking

Ruby 5.76 k

8 个月前

drk1wi / Modlishka

Modlishka. Reverse Proxy.

翻译 - Modlishka。反向代理。

phishing penetration-testing-tools mitm reverse-proxy 安全

Go 4.93 k

1 年前

cdk-team / CDK

📦 Make security testing of K8s, Docker, and Containerd easier.

翻译 - CDK是一个开放源代码的容器渗透工具包，可在不依赖任何操作系统的情况下，在不同的瘦容器中进行稳定利用。它带有有用的网络工具，许多强大的PoC / EXP可帮助您轻松逃脱容器并接管K8s集群。

penetration penetration-testing-tools Kubernetes Docker hacktools k8s-penetration-toolkit Linux Exploit cloud-native blackhat hitb cloud-native-security container container-security kernel-exploitation kubernetes-security privilege-escalation vulnerabilities

Go 4.1 k

4 天前

t3l3machus / Villain

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them ...

Open Source pentest pentesting readteaming redteam-tools redteam Cybersecurity offensive-security c2 Hacking hacking-tool penetration-testing penetration-testing-tools

Python 3.94 k

2 个月前

kelvinBen / AppInfoScanner

#安卓#一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

安全 Python 工具 apk apk-dex Android ipa scanner web-hacking Hacking hacking-tool penetration-testing-tools penetration-test network-security

Python 3.3 k

2 年前

BishopFox / cloudfox

Automating situational awareness for cloud penetration tests.

Amazon Web Services cloud cloud-security Go penetration-testing-tools 安全

Go 2.05 k

2 个月前

NHAS / reverse_ssh

SSH based reverse shell

reverse-shell ssh Go scp proxy Shell pentesting sftp tunnel Hacking pentest penetration-testing-tools 安全终端

Go 1.05 k

18 天前

rhaidiz / broxy

An HTTP/HTTPS intercept proxy written in Go.

翻译 - 用Go编写的HTTP / HTTPS拦截代理。

wapt proxy interceptor broxy http-interceptor Hacking 安全 http-proxy qt5-gui Go websecurity penetration-testing penetration-testing-tools

Go 1.01 k

3 年前

vladko312 / SSTImap

Automatic SSTI detection tool with interactive interface

Cybersecurity penetration-testing penetration-testing-tools pentest pentest-tool pentesting pentesting-tools rce Python

Python 999

5 个月前

Fahrj / reverse-ssh

Statically-linked ssh server with reverse shell functionality for CTFs and such

翻译 - 静态链接的 ssh 服务器，具有 CTF 等的反向 shell 功能

ssh 安全 Hacking penetration-testing penetration-testing-tools reverse-shell Go remote-admin-tool remote-shell backdoor 终端

Go 954

2 年前

Hackmanit / Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

翻译 - Web Cache Vulnerability Scanner 是一个基于 Go 的 CLI 工具，用于测试 Web 缓存中毒。它由 Hackmanit GmbH (http://hackmanit.de/) 开发。

vulnerability-scanners web-cache 安全 security-scanner pentesting penetration-testing-tools penetration-testing Bug Bounty Hacking scanner hacking-tool

Go 938

3 个月前

Esc4iCEscEsc / skanuvaty

Dangerously fast DNS/network/port scanner

penetration-testing penetration-testing-tools pentesting pentest dns dns-client subdomain-scanner subdomain-enumeration scanner Rust 安全 Cybersecurity osint-tool hacking-tools redteam redteam-tools

Rust 897

3 年前

x364e3ab6 / DudeSuite

Dude Suite Web Security Tools

browser hacker packet penetration-testing-tools scan scanner-web GUI hydra nmap 工具 sqlmap awvs

857

5 天前

sinfulz / JustTryHarder

JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)

oscp Testing penetration penetration-testing penetration-test penetration-testing-tools pentesting pentest pentest-tool pentest-scripts pentesting-windows pentesters pentesting-networks pentesting-tools pentest-tools pentest-environment Hacktoberfest hacktoberfest-accepted

Python 800

2 年前

R0X4R / Garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

Bug Bounty bugbountytips bugbounty-tool reconnaissance subdomain-takeover Go Bash penetration-testing penetration-testing-tools vulnerability vulnerability-scanner

Shell 783

2 年前

jwt1399 / Sec-Tools

🍉一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能。

Python Django 安全 scan-tool vulnerability-scanners penetration-testing-tools

Python 763

1 年前

MattKeeley / Spoofy

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

application-security appsec Cybersecurity dmarc emails penetration-testing penetration-testing-tools pentesting Python redteam 安全 spf phishing

Python 662

5 个月前

Cgboal / SonarSearch

A rapid API for the Project Sonar dataset

subdomain enumeration Bug Bounty penetration-testing penetration-testing-tools dns subdomain-enumeration OSINT osint-tool

Go 643

2 年前

hueristiq / xurlfind3r

A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directl...

OSINT penetration-testing penetration-testing-tools Bug Bounty bug-bounty-tools ethical-hacking ethical-hacking-tools osint-tools red-teaming red-teaming-tools web-security reconnaissance Go

Go 590

15 天前

InfosecMatter / Minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

PowerShell brute-force penetration-testing Windows penetration-testing-tools security-automation 安全 smb active-directory portscanner port-scanner port-scanning portscan

PowerShell 558

3 年前