Skip to content

@pentest-tools Pentest Tools

Change the repository type filter

All

    Repositories list

    425 repositories

    • sifter

      Public
      Sifter is a recon tool, originally designed to check the status. Further recon can then be done on your target using various powerfull osint and recon tools, su…
      Shell
      •128•1•0•0•Updated Aug 31, 2021Aug 31, 2021

    • awesome-go

      Public
      A curated list of awesome Go frameworks, libraries and software
      Go
      •
      MIT License
      •13k•0•0•0•Updated Aug 19, 2020Aug 19, 2020

    • Awesome-WAF

      Public
      🔥 Everything awesome about web-application firewalls (WAF).
      Python
      •
      Apache License 2.0
      •1.2k•0•0•0•Updated Aug 15, 2020Aug 15, 2020

    • tsunami-security-scanner

      Public
      Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
      Java
      •
      Apache License 2.0
      •921•0•0•0•Updated Jul 14, 2020Jul 14, 2020

    • shad0w

      Public
      A post exploitation framework designed to operate covertly on heavily monitored enviroments
      C
      •
      MIT License
      •336•1•0•0•Updated Jun 22, 2020Jun 22, 2020

    • CEHv10StudyGuide

      Public
      Study Guide for the CEH v10
      Apache License 2.0
      •256•1•0•0•Updated Jun 22, 2020Jun 22, 2020

    • LinkFinder

      Public
      A python script that finds endpoints in JavaScript files
      Python
      •
      MIT License
      •654•0•0•0•Updated Jun 22, 2020Jun 22, 2020

    • filebuster

      Public
      An extremely fast and flexible web fuzzer
      Perl
      •
      GNU General Public License v3.0
      •48•0•0•0•Updated Jun 21, 2020Jun 21, 2020

    • JSScanner

      Public
      You can read the writeup on this script here
      Shell
      •65•0•0•0•Updated Jun 19, 2020Jun 19, 2020

    • git-secrets

      Public
      Prevents you from committing secrets and credentials into git repositories
      Shell
      •
      Apache License 2.0
      •1.2k•0•0•0•Updated Jun 18, 2020Jun 18, 2020

    • pentest-book

      Public
      629•1•0•0•Updated Jun 18, 2020Jun 18, 2020

    • fuzzmost

      Public
      all manner of wordlists
      22•0•0•0•Updated Jun 17, 2020Jun 17, 2020

    • tensorflow

      Public
      An Open Source Machine Learning Framework for Everyone
      C++
      •
      Apache License 2.0
      •75k•0•0•0•Updated Jun 17, 2020Jun 17, 2020

    • Bug-Bounty-Scripts

      Public
      The scripts I write to help me on my bug bounty hunting
      Shell
      •
      GNU General Public License v3.0
      •28•0•0•0•Updated Jun 17, 2020Jun 17, 2020

    • subscraper

      Public
      Subdomain enumeration through various techniques
      Python
      •
      GNU General Public License v3.0
      •107•0•0•0•Updated Jun 16, 2020Jun 16, 2020

    • bing-ip2hosts

      Public
      bingip2hosts is a Bing.com web scraper that discovers websites by IP address
      Shell
      •
      GNU General Public License v3.0
      •29•0•0•0•Updated Jun 12, 2020Jun 12, 2020

    • httpie

      Public
      As easy as HTTPie /aitch-tee-tee-pie/ 🥧 Modern command-line HTTP client – user-friendly curl alternative with intuitive UI, JSON support, syntax highlighting, …
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •3.8k•0•0•0•Updated Jun 11, 2020Jun 11, 2020

    • ReconPi

      Public
      ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
      Shell
      •
      MIT License
      •111•0•0•0•Updated Jun 11, 2020Jun 11, 2020

    • recox

      Public
      Master script for web reconnaissance
      Shell
      •
      GNU General Public License v3.0
      •70•0•0•0•Updated Jun 10, 2020Jun 10, 2020

    • shellspec

      Public
      BDD unit testing framework for bash, zsh, dash and all POSIX shell scripts with coverage reporting
      Shell
      •
      MIT License
      •75•0•0•0•Updated Jun 10, 2020Jun 10, 2020

    • Shodanfy.py

      Public
      Get ports,vulnerabilities,informations,banners,..etc for any IP with Shodan (no apikey! no rate-limit!)
      Python
      •
      GNU General Public License v3.0
      •95•0•0•0•Updated Jun 10, 2020Jun 10, 2020

    • Impost3r

      Public
      👻Impost3r -- A linux password thief
      C
      •
      MIT License
      •122•0•0•0•Updated Jun 10, 2020Jun 10, 2020

    • patch-checker

      Public
      Web-based check for Windows privesc vulnerabilities
      Python
      •31•0•0•0•Updated Jun 10, 2020Jun 10, 2020

    • evilpdf

      Public
      Embedding executable files in PDF Documents
      Shell
      •
      GNU General Public License v3.0
      •145•0•0•0•Updated Jun 10, 2020Jun 10, 2020

    • nodejsscan

      Public
      nodejsscan is a static security code scanner for Node.js applications.
      CSS
      •
      GNU General Public License v3.0
      •343•0•0•0•Updated Jun 9, 2020Jun 9, 2020

    • CORS-Scanner

      Public
      Go
      •13•0•0•0•Updated Jun 9, 2020Jun 9, 2020

    • Gf-Patterns

      Public
      GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
      304•0•0•0•Updated Jun 7, 2020Jun 7, 2020

    • reconness

      Public
      ReconNess Web App Tool
      C#
      •
      MIT License
      •39•0•0•0•Updated Jun 6, 2020Jun 6, 2020

    • Reconcobra

      Public
      Ultimate Recon Software for Information Gathering
      Prolog
      •133•0•0•0•Updated Jun 6, 2020Jun 6, 2020

    • BabyShark

      Public
      Basic C2 Server
      HTML
      •30•0•0•0•Updated Jun 4, 2020Jun 4, 2020