Automatic SQL injection and database takeover tool

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

Web path scanner

A swiss army knife for pentesting networks

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Web Pentesting Fuzz 字典,一个就够了。

Automated All-in-One OS command injection and exploitation tool.

The Leading Security Assessment Framework for Android.

A high performance offensive security tool for reconnaissance and vulnerability scanning

File upload vulnerability scanner and exploitation tool.

Know the dangers of credential reuse attacks.

An evil RAT (Remote Administration Tool) for macOS / OS X.

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

📡 A python program to create a fake AP and sniff data.

SSRF (Server Side Request Forgery) testing resources

A powerful and useful hacker dictionary builder for a brute-force attack

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

Study Notes For Web Hacking / Web安全学习笔记

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Automate getting Domain Admin using Empire

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

The iOS Security Testing Framework

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

⛔ offsec batteries included

Find web directories without bruteforce

A simple keylogger for Windows, Linux and Mac

online port scan scraper

Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns