
sippts
Set of tools to audit SIP based VoIP Systems

Set of tools to audit SIP based VoIP Systems

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell…

Git All the Payloads! A collection of web attack payloads.

Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…

A ToolKit that automatically installs & configures all the Tools needed to turn your Daily Driver Linux Distro into a Pentesting Machine

Python framework for IT security tools

Wavestone's web interface for password cracking with hashcat

python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。

A Golang implant that uses Slack as a command and control server

A collection of useful links for Pentesters


Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

Bash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via LDAP, RPC,…