#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
halildeniz/netprobeARP-based network scanner that discovers devices on a subnet, displaying IP addresses, MAC addresses, manufacturers, and device models with optional…
dviros/rat-via-telegramWindows Remote Post Breach Tool via Telegram
0xmoot/s3secCheck AWS S3 instances for read/write/delete access
josue87/boomerFramework for exploiting local vulnerabilities
logisek/evilmistEvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify…
nccgroup/outlookleaktestThe Outlook HTML Leak Test Project
d4vinci/bugz-toolsA collection of tools I wrote for bug bounty or hacking and don't mind publishing it :smile:
spyboy-productions/unve1lerA social engineering tool designed to seamlessly locate profiles using usernames while offering convenient reverse image search functionality.
graph-x/davscanFingerprints servers, finds exploits, scans WebDAV. May or may not also make coffee.
rub-nds/metadata-attackerA tool to generate media files with malicious metadata
tpt11fb/attacktomcatTomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取/包含
occamsec/cve-2023-2825GitLab CVE-2023-2825 PoC. This PoC leverages a path traversal vulnerability to retrieve the /etc/passwd file from a system running GitLab 16.0.0.
ccob/gssapi-abuseA tool for enumerating potential hosts that are open to GSSAPI abuse within Active Directory networks
shiva108/waesCPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
halildeniz/packetspyNetwork packet sniffer for real-time traffic capture, HTTP inspection, raw payload analysis, and device discovery with built-in man-in-the-middle…
e1abrador/sub.monitorSelf-hosted passive subdomain continous monitoring tool.
