io-security-solutions Goto Github PK

api_wordlist

A wordlist of API names for web application assessments

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

autosubtakeover

A tool used to check if a CNAME resolves to the scope adress. If the CNAME resolves to a non-scope adress it might be worth checking out if subdomain takeover is possible.

bashbunny-payloads

Payloads for the Hak5 Bash Bunny

bloodhound

bloodhound-1

Six Degrees of Domain Admin

browsergather

Fileless web browser information extraction

brutescrape

A web scraper for generating password files based on plain text found

burpcommander

Ruby command-line interface to Burp Suite's REST API

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

commix

Automated All-in-One OS command injection and exploitation tool.

crackmapexec

A swiss army knife for pentesting networks

crafty

An interface for hping3 on the WiFi Pineapple

deepbluecli

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

dnscat2

easy-p

PowerShell Helper Tool

embedinhtml

Embed and hide any file in an HTML file

empire

Empire is a PowerShell and Python post-exploitation agent.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

furious

Golang IP/port scanner with SYN (stealth) scanning and device manufacturer identification

generatejenkinsexploit

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

gitrob

Reconnaissance tool for GitHub organizations

gobuster

Directory/file & DNS busting tool written in Go

greatsct

The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.

hostilesubbruteforcer

httpscreenshot

icmpshock

A scanning tool for the ShellShock bash vulnerability