SQLMap is an open resource penetration tests tool that automates the course of action of detecting and exploiting SQL injection flaws and having about of databases servers. It comes with a impressive detection engine,...
Make a VPS on Google Cloud Platform or Digital Ocean conveniently with the docker for pentest included to launch the evaluation to the concentrate on. Needs Terraform put in Ansible put in SSH private...
hardcodes is a utility for searching strings hardcoded by builders in plans. It utilizes a modular tokenizer that can handle reviews, any selection of backslashes & practically any syntax you toss at it.Indeed, it...
wordlist_generator generates wordlists with unique words and phrases with procedures talked about in tomnomnom’s report “Who, What, The place, When”. It normally takes URLs from gau and splits them to get text in URLs....
h4rpy is an automated WPA/WPA2 PSK assault device, wrapper of aircrack-ng framework.h4rpy gives clear interface for automated cracking of WPA/WPA2 PSK networks. h4rpy enables monitor manner on picked wi-fi interface, scans the wireless room...
SNIcat is a proof of idea software that performs details exfiltration, using a covert channel approach by way of. Server Name Indicator, a TLS Shopper Hello Extension. The resource is composed of an agent...
[*] An OSINT CLI device desgined to quick monitor IP Reputation and Geo-locaton seem up for Security Analysts.SetupThis resource is compactible with: Any Linux Working Process (Debian, Ubuntu, CentOS) Termux Linux Set up git...
Bug Bounty Recon (bbrecon) is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date map of the Internet “safe harbor” attack surface, excluding out-of-scope targets.It...
SpaceSiren is a honey token supervisor and alert method for AWS. With this totally serverless application, you can generate and handle honey tokens at scale — up to 10,000 per SpaceSiren instance — at...
LOLBITS is a C2 framework that uses Microsoft’s Background Intelligent Transfer Service (BITS) to establish the communication channel between the compromised host and the backend. The C2 backend is hidden behind an apparently harmless...
What is “Kill Chain”? From Wikipedia: The term kill chain was originally used as a military concept related to the structure of an attack; consisting of target identification, force dispatch to target, decision, order...
Yeti is a platform meant to organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository. Yeti will also automatically enrich observables (e.g. resolve domains, geolocate IPs) so that...
A security framework for enterprises and Red Team personnel, supports CobaltStrike’s penetration testing of other platforms (Linux / MacOS / …), supports custom modules, and includes some commonly used penetration modules.Only for internal use...
Did you ever wonder how you can move laterally through internal networks? or interact with remote machines without alerting EDRs?Let’s assume that we have a valid credentials, or an active session with access to...
Mihari is a helper to run queries & manage results continuously. Mihari can be used for C2, landing page and phishing hunting. How it works Mihari makes a query against Shodan, Censys, VirusTotal, SecurityTrails,...
