shanelawrence Goto Github PK

automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-sec-talks

A collected list of awesome security talks

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

ctf

cve_manager_vs

A collection of python apps and shell scripts to email an xlsx spreadsheet of new vulnerabilities in the NIST CVE database and their associated products on a daily schedule.

dc22-dc801-party-badge

dc24partybadge

DefCon 24 Party badge hardware and software files

dc25partybadge

DC25 Party Badge

defcon23

dnscewl

A DNS Bruteforcing Wordlist Generator

egressbuster

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

hackertrackertracks

http-script-generator

ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)

interlace

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

netdiscover

netdiscover

nipper-ng

Automatically exported from code.google.com/p/nipper-ng

nosqlmap

Automated NoSQL database enumeration and web application exploitation tool.

openrelaymagic

Tool to find SMTP servers vulnerable to open relay

rainmap-lite

Rainmap Lite - Responsive web based interface that allows users to launch Nmap scans from their mobiles/tablets/web browsers!

reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

springbok

A tool for analyzing firewall rules

vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.