awesome-pentest
enaqx/awesome-pentestA collection of awesome penetration testing resources, tools and other shiny things
osintprivilege-escalationids-ips-evasion+9
26.9k25 days ago
Tools for bypassing Intrusion Detection and Prevention Systems (IDS/IPS) and network security controls.
enaqx/awesome-pentestA collection of awesome penetration testing resources, tools and other shiny things
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
matrixtm/mhddosBest DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
jpillora/chiselFast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
bunkerity/bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)
opnsense/coreOPNsense GUI, API and systems backend
ayoubfaouzi/al-khaserPublic malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
bc-security/empireEncrypted C2 and post-exploitation framework for red teams, with modular PowerShell/Python/C#/Go agents, many offensive modules, and easy…
masterking32/masterhttprelayvpnDomain-fronted HTTP/SOCKS5 proxy tunneling traffic through Google Apps Script with MITM TLS interception, HTTP/1-2 multiplexing, and DPI evasion.
wangyu-/udp2rawA Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP…
ultrafunkamsterdam/nodriverSuccessor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…
cifertech/esp32-divESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
zer0yu/awesome-cobaltstrikeList of Awesome CobaltStrike Resources
coreruleset/corerulesetGeneric attack detection rule set for web application firewalls, protecting against OWASP Top Ten and common vulnerabilities with minimal false…
corazawaf/corazaGo-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…
undeadsec/socialfishModern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…
trustedsec/unicornUnicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…