pentesttoolz Goto Github PK

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

badlnk

Reverse Shell in Shortcut File (.lnk)

bank

bolt

CSRF Scanner

cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

crykex

Linux Memory Cryptographic Keys Extractor

dirhunt

Find web directories without bruteforce

dsinternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

evildll

Malicious DLL (Reverse Shell) generator for DLL Hijacking

evilpdf

Embedding executable files in PDF Documents

evilreg

Reverse shell using Windows Registry files (.reg)

extended-xss-search

A better version of my xssfinder tool - scans for different types of xss on a list of urls.

hikpwn

HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8.

impacket

Impacket is a collection of Python classes for working with network protocols.

injectus

CRLF and open redirect fuzzer

invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

libssh-authentication-bypass

LibSSH Authentication Bypass CVE-2018-10933

modlishka

Modlishka. Reverse Proxy.

pentestpackage

a package of Pentest scripts I have made or commonly use

pixy

Pixy is a scanner static code analysis tools that scans PHP applications for security vulnerabilities.

scripthunter

Tool to find JavaScript files on Websites

sharpmapexec

shellshock-hunter-google

Search google for shellshock vulnerable sites

shimit

A tool that implements the Golden SAML attack

spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

ssrfmap

Automatic SSRF fuzzer and exploitation tool

ssrfuzz

SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities

sub404

A python tool to check subdomain takeover vulnerability

telnet-bruteforce

Python script to bruteforce telnet user and passwords