A swiss army knife for pentesting networks

Malicious traffic detection system

Infection Monkey - An open-source adversary emulation platform

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Modular and decentralised honeypot

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

The most complete open-source tool for Twitter intelligence analysis

Analyze the security of any domain by finding all the information possible. Made in python.

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive …

A service that analyzes docker images and scans for vulnerabilities

Create actionable data from your Vulnerability Scans

Source code for the book "Violent Python" by TJ O'Connor. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues invo…

Domain Password Audit Tool for Pentesters

Red Team K8S Adversary Emulation Based on kubectl

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

Machinae Security Intelligence Collector

Python library using the MISP Rest API

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.

Python Security Scripts

Collecting & Hunting for IOCs with gusto and style

GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.

CryptoNice is both a command line tool and library which provides the ability to scan and report on the configuration of SSL/TLS for your internet or internal facing web services. Built using the s…

Puny Domain Name Check

Social Framework

Automated detection rule analysis utility