General Python programming.
PythonOtheractive
Awesome Pentest
Search 257 Pentest projects →257 projects53 categories
- 27%active
- 16%steady
- 27%slowing
- 30%dormant
Sourced fromenaqx/awesome-pentest
Projects 1–60 of 257, most starred first
Collection of multiple types of lists used during security assessments.
PHPMIT Licenseactive
One of the main language for open source security tools.
MIT Licenseactive
Curated list of delightful Node.js packages and resources.
Creative Commons Zero v1.0 Universalsteady
Feature-rich hex editor for reverse engineers and programmers.
C++GNU General Public License v2.0active
App to comfortably monitor your Internet traffic.
RustApache License 2.0active
Command line frameworks, toolkits, guides and gizmos.
Creative Commons Zero v1.0 Universalsteady
In-browser development and scripting.
active
The List of the Lists.
Rubyslowing
Fast and customizable vulnerability scanner based on simple YAML based DSL.
GoMIT Licenseactive
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
CGNU Affero General Public License v3.0steady
Software framework for Microsoft Windows platform development.
Creative Commons Zero v1.0 Universalsteady
Next-generation crawling and spidering framework.
GoMIT Licenseactive
E-mail, subdomain and people names harvester.
Pythonactive
Tutorials, tools, and resources.
MIT Licenseslowing
Standalone Machine-in-the-Middle (MitM) reverse proxy attack framework for setting up phishing pages capable of defeating most forms of 2FA security schemes.
GoBSD 3-Clause "New" or "Revised" Licenseactive
Open source pentesting framework designed for social engineering featuring a number of custom attack vectors to make believable attacks quickly.
Pythonactive
Software, libraries, documents, and other resources.
MIT Licensesteady
Web path scanner.
Pythonactive
Fast passive subdomain enumeration tool.
GoMIT Licenseactive
The de-facto language for writing exploits.
active
Lean multipurpose brute force search/fuzzing tool for Web (and DNS) reconnaissance.
GoApache License 2.0active
Rapid exploit development framework built for use in CTFs.
PythonOtheractive
PowerShell Post-Exploitation Framework.
PowerShellOtherdormantarchived
Python-based interactive packet manipulation program and library.
PythonGNU General Public License v2.0active
Agentless vulnerability scanner for GNU/Linux and FreeBSD, written in Go.
GoGNU General Public License v3.0active
Online password cracking tool with built-in support for many network protocols, including HTTP, SMB, FTP, telnet, ICQ, MySQL, LDAP, IMAP, VNC, and more.
CGNU Affero General Public License v3.0active
Capture The Flag frameworks, libraries, etc.
JavaScriptCreative Commons Zero v1.0 Universalslowing
Program for determining types of files for Windows, Linux and MacOS.
JavaScriptMIT Licenseactive
Command and control server for delivering exploits to commandeered Web browsers.
JavaScriptactive
Credentials recovery project.
PythonGNU Lesser General Public License v3.0steady
1N3/Sn1per on GitHub, opens in a new tab
10.8KstarsAutomated Pentest Recon Scanner.
ShellOtheractive
GDB plug-in that eases debugging with GDB, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers, and exploit developers.
PythonMIT Licenseactive
Noisy but fast black box web server and web application vulnerability scanner.
PerlOtheractive
Honeypots, tools, components, and more.
PythonArtistic License 2.0active
Curated list of public penetration test reports released by several consulting firms and academic security groups.
HTMLactive
Collection of Android security related resources.
MakefileApache License 2.0active
List of tools for testing and securing AWS environments.
ShellApache License 2.0active
Collection of setup scripts to install various security research tools easily and quickly deployable to new machines.
NixBSD 3-Clause "New" or "Revised" Licenseactive
Deep reinforcement learning based AI that learns from the Wi-Fi environment and instruments BetterCAP in order to maximize the WPA key material captured.
PythonOthersteady
Swiss army knife for pentesting networks.
PythonBSD 2-Clause "Simplified" Licenseslowingarchived
Cross-platform (Windows, Linux, macOS, Android) remote administration and post-exploitation tool.
PythonOtherslowingarchived
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
PHPslowing
General purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
JavaApache License 2.0active
List of Awesome Red Teaming Resources.
MIT Licenseslowing
Scripted local Linux enumeration and privilege escalation checker useful for auditing a host and during CTF gaming.
ShellMIT Licenseslowing
Multi-use bash script for Linux systems to audit wireless networks.
ShellGNU General Public License v3.0active
Uses PCIe hardware devices to read and write from the target system memory via Direct Memory Access (DMA) over PCIe.
CGNU Affero General Public License v3.0active
Awesome list of useful, funny, and depressing search queries for Shodan.
Creative Commons Zero v1.0 Universalslowing
Static analysis security vulnerability scanner for Ruby on Rails applications.
RubyOtheractive
Resources for learning about application security.
PHPMIT Licenseslowing
Website fingerprinter.
RubyGNU General Public License v2.0steady
Multiuser integrated pentesting environment for red teams performing cooperative penetration tests, security audits, and risk assessments.
PythonGNU General Public License v3.0active
Identifies and fingerprints Web Application Firewall (WAF) products.
PythonBSD 3-Clause "New" or "Revised" Licensesteady
Extensible debugger UI toolkit written in Python.
PythonMIT Licenseslowing
Fast port scanner written in Go with focus on reliability.
GoMIT Licenseactive
Unprivileged Linux process sniffer that monitors commands and cron jobs as they execute via procfs scans and inotify.
GoGNU General Public License v3.0steady
Python Exploit Development Assistance for GDB.
PythonOtherslowing
Subdomain discovery tool utilizing various open sources producing a report that can be used as input to other tools.
GoMIT Licensedormantarchived
Suite of automated social engineering based WPA attacks.
HTMLGNU General Public License v3.0active