
Thick-Client-Pentest-Checklist
A OWASP Based Checklist With 80+ Test Cases

A OWASP Based Checklist With 80+ Test Cases

Offensive 802.11 auditing tool that automates WPA/WPA2 handshake and PMKID capture using deauthentication, rogue-client, and channel-switch attacks,…

Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).


Passive hybrid fingerprinting engine — identify hosts without sending a single packet

NetRaptor is a GUI-based ARP poisoning tool built with Python that allows you to scan a network, select a target and gateway, and perform a…

📡 A python program to create a fake AP and sniff data.

Cheatsheet cataloging man-in-the-middle attacks across L2-L4 and wireless layers, with attack tools, detection methods, and mitigation techniques for…

Curated catalog of 364 Android pentesting and security APKs organized by category, covering forensics, MITM, sniffing, OSINT, wireless, and privacy…

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

Passive network security sniffer that analyzes 28 protocols (ARP, STP, OSPF, VLAN, SCADA) to detect vulnerabilities in network equipment without…

An automated Wireless RogueAP MITM attack framework.

A reconnaissance tool for capturing and displaying SSIDs from device's Preferred Network List.

Cross-platform network packet generator with full layer spoofing, pattern-based address randomization, and flood detection evasion for stress-testing…

A script to configure a TP-Link MR3040 running OpenWRT into a simple, yet powerful penetration-testing "dropbox".

A curated list of resources related to Industrial Control System (ICS) security.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.