Tools

swisskyrepo/wordpresscan

WPScan rewritten in Python + some WPSeku ideas

byt3bl33d3r/crackmapexec

A swiss army knife for pentesting networks

nocoderrandom/sunsetscan

Local-network security auditing with EOL, CVE, device identity, and HTML reports

jehadalqurashi/blackdir-framework

Web Application Vulnerability Scanner

theunknownsoul/cve-2023-23397-pow

Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application.

byt3bl33d3r/pth-toolkit

Modified version of the passing-the-hash tool collection made to work straight out of the box

riskydissonance/sharpcookiemonster

C# tool to dump all cookies from Chrome/Edge browsers, including httpOnly and secure flags, for session hijacking and post-exploitation credential…

abacus-group-rto/legion

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance…

maaaaz/crackmapexecwin

The great CrackMapExec tool compiled for Windows

danmcinerney/pentest-machine

Automates some pentest jobs via nmap xml file

offensive-panda/lsassreflectdumping

This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created,…

randomrobbiebf/postgres-bruteforcer

This tool takes a list of default creds and tests it against a postgresql server and logs any that work and the databases it has access to.

kienquoc102/cve-2018-9995-2

Python exploit for CVE-2018-9995 targeting DVR/NVR devices with login bypass, supporting reconnaissance via Shodan and Zoomeye dorks.

szybnev/cve-2023-7028

This FORK of repository presents a proof-of-concept of CVE-2023-7028. I am only improve exploit usage

aseemjakhar/kcmd

Kankun Smart Socket Hijacker and Sniffer. The kankun smart socket and its mobile app use a hardcoded AES 256 bit key to encrypt and decrypt…