ziedsn Goto Github PK

fimap

fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.

finger-user-enum

Username guessing tool primarily for use against the default Solaris finger service. Also supports relaying of queries through another finger server.

friendli

ftp-user-enum

Username guessing tool for use against the default Solaris ftp service and GNU inetutils ftpd.

githacker

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

gitim

Clone all of your Github repositories, just single command from your terminal.

gosint

OSINT Swiss Army Knife

infoga

Infoga - Email Information Gathering

ios

Most usable tools for iOS penetration testing

it-sec-catalog

Automatically exported from code.google.com/p/it-sec-catalog

kadabra

[DEPRECATED] Kadabra is my automatic LFI Exploiter and Scanner, written in C++ and a couple extern module in Python.

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linksf1nd3r

web information gathering / Grab links

linux-kernel-exploitation

A bunch of links related to Linux kernel exploitation

luckystrike

A PowerShell based utility for the creation of malicious Office macro documents.

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

maliciousdllgenerator

DLL Generator for side loading attack

mana

Our mana toolkit for wifi rogue AP attacks and MitM - see hostapd-mana too

misc-scripts

misc scripts ive written to help me in my pentest workflow

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

nessus-downloader

net-creds

Sniffs sensitive data from interface or pcap

nothing

nullinux

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

ooo

owa-toolkit

Powershell module to assist in attacking Exchange/Outlook Web Access

packet-sniffer

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing

List of awesome penetration testing resources, tools and other shiny things