Endpoint Scanner & Response Checker

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

Node.js reverse shell tool for educational and legal pentesting using Ngrok

Visualize Oracle DB user permissions with a network graph in the browser

DirBuster for Chrome as an extension

This repo is designed as an implant tracker for Red Teams. It provies a way to track different implant version used, in addition to where implants are deployed.

A collection of utility scripts leveraging the Corellium API and designed to facilitate mobile pentesting.

A HackBar for google chrome/firefox browser. Small tool for pentesting websercurity.

Lab to understand and test SSRF attacks

Pentest Reconnaissance Tool in Javascript based on Ricardo Longatto version.

This HTML file creates a CSRF PoC form to any HTTP request.

JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML source code — all directly in your browser.

🐱‍👤 The swiss army of hacking tools

Pentest Report Manager

⭐⭐⭐⭐⭐ 识别网站上使用的技术和组件，收集网站上泄露的敏感信息。

Android Pentest Framework

its like a tricorder, for your wireless world.

its like a tricorder, for your wireless world.

Google Chrome Extension automates testing fundamental Web Problems via Chrome