Решено Полезные URL для пентеста

Razer

Участник
Anonymously Hiding Tools
Anonmously Surf (https://github.com/Und3rf10w/kali-anonsurf)
Multitor (https://github.com/trimstray/multitor)
Information gathering tools
Network Map (nmap) (https://github.com/nmap/nmap)
Dracnmap (https://github.com/Screetsec/Dracnmap)

Port scanning
Host to IP
Xerosploit (https://github.com/LionSec/xerosploit)
RED HAWK (All In One Scanning) (https://github.com/Tuhinshubhra/RED_HAWK)
ReconSpider(For All Scanning) (https://github.com/bhavsec/reconspider)
IsItDown (Check Website Down/Up)
Infoga - Email OSINT (https://github.com/m4ll0k/Infoga)
ReconDog (https://github.com/s0md3v/ReconDog)
Striker (https://github.com/s0md3v/Striker)
SecretFinder (like API & etc) (https://github.com/m4ll0k/SecretFinder)
Find Info Using Shodan (https://github.com/m4ll0k/Shodanfy.py)
Port Scanner - rang3r (Python 2.7) (https://github.com/floriankunushevci/rang3r)
Port Scanner - Ranger Reloaded (Python 3+) (https://github.com/joeyagreco/ranger-reloaded)
Breacher (https://github.com/s0md3v/Breacher)

Wordlist Generator
Cupp (https://github.com/Mebus/cupp.git)
WordlistCreator (https://github.com/Z4nzu/wlcreator)
Goblin WordGenerator (https://github.com/UndeadSec/GoblinWordGenerator.git)
Password list (1.4 Billion Clear Text Password)
(https://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got)

Wireless attack tools
WiFi-Pumpkin (https://github.com/P0cL4bs/wifipumpkin3)
pixiewps (https://github.com/wiire/pixiewps)
Bluetooth Honeypot GUI Framework (https://github.com/andrewmichaelsmith/bluepot)
Fluxion (https://github.com/thehackingsage/Fluxion)
Wifiphisher (https://github.com/wifiphisher/wifiphisher)
Wifite (https://github.com/derv82/wifite2)
EvilTwin (https://github.com/Z4nzu/fakeap)
Fastssh (https://github.com/Z4nzu/fastssh)

SQL Injection Tools
Sqlmap tool (https://github.com/sqlmapproject/sqlmap)
NoSqlMap (https://github.com/codingo/NoSQLMap)
Damn Small SQLi Scanner (https://github.com/stamparm/DSSS)
Explo (https://github.com/dtag-dev-sec/explo)
Blisqy - Exploit Time-based blind-SQL injection (https://github.com/JohnTroony/Blisqy)
Leviathan - Wide Range Mass Audit Toolkit (https://github.com/leviathan-framework/leviathan)
SQLScan (https://github.com/Cvar1984/sqlscan)

Phishing attack tools
Setoolkit (https://github.com/trustedsec/social-engineer-toolkit)
SocialFish (https://github.com/UndeadSec/SocialFish)
HiddenEye (https://github.com/DarkSecDevelopers/HiddenEye)
Evilginx2 (https://github.com/kgretzky/evilginx2)
I-See_You(Get Location using phishing attack) (https://github.com/Viralmaniar/I-See-You)
SayCheese (Grab target's Webcam Shots) (https://github.com/hangetzzu/saycheese)
QR Code Jacking (https://github.com/cryptedwolf/ohmyqr)
ShellPhish (https://github.com/An0nUD4Y/shellphish)
BlackPhish (https://github.com/iinc0gnit0/BlackPhish)

Web Attack tools
Web2Attack (https://github.com/santatic/web2attack)
Skipfish
SubDomain Finder (https://github.com/aboul3la/Sublist3r)
CheckURL (https://github.com/UndeadSec/checkURL)
Blazy(Also Find ClickJacking) (https://github.com/UltimateHackers/Blazy)
Sub-Domain TakeOver (https://github.com/m4ll0k/takeover)
Dirb (https://gitlab.com/kalilinux/packages/dirb)

Post exploitation tools
Vegile - Ghost In The Shell (https://github.com/Screetsec/Vegile)
Chrome Keylogger (https://github.com/UndeadSec/HeraKeylogger)

Forensic tools
Autopsy
Wireshark
Bulk extractor (https://github.com/simsong/bulk_extractor)
Disk Clone and ISO Image Acquire (https://guymager.sourceforge.io/)
Toolsley (https://www.toolsley.com/)

Payload creation tools
The FatRat (https://github.com/Screetsec/TheFatRat)
Brutal (https://github.com/Screetsec/Brutal)
Stitch (https://nathanlopez.github.io/Stitch)
MSFvenom Payload Creator (https://github.com/g0tmi1k/msfpc)
Venom Shellcode Generator (https://github.com/r00t-3xp10it/venom)
Spycam (https://github.com/indexnotfound404/spycam)
Mob-Droid (https://github.com/kinghacker0/Mob-Droid)
Enigma (https://github.com/UndeadSec/Enigma)
Exploit framework
RouterSploit (https://github.com/threat9/routersploit)
WebSploit (https://github.com/The404Hacking/websploit)
Commix (https://github.com/commixproject/commix)
Web2Attack (https://github.com/santatic/web2attack)

Reverse engineering tools
Androguard (https://github.com/androguard/androguard)
Apk2Gold (https://github.com/lxdvs/apk2gold)
JadX (https://github.com/skylot/jadx)
DDOS Attack Tools
SlowLoris
Asyncrone | Multifunction SYN Flood DDoS Weapon (https://github.com/fatihsnsy/aSYNcrone)
UFOnet (https://github.com/epsylon/ufonet)
GoldenEye (https://github.com/jseidl/GoldenEye)
Remote Administrator Tools (RAT)
Stitch (https://github.com/nathanlopez/Stitch)
Pyshell (https://github.com/knassar702/pyshell)
XSS Attack Tools
DalFox(Finder of XSS) (https://github.com/hahwul/dalfox)
XSS Payload Generator (https://github.com/capture0x/XSS-LOADER.git)
Extended XSS Searcher and Finder (https://github.com/Damian89/extended-xss-search)
XSS-Freak (https://github.com/PR0PH3CY33/XSS-Freak)
XSpear (https://github.com/hahwul/XSpear)
XSSCon (https://github.com/menkrep1337/XSSCon)
XanXSS (https://github.com/Ekultek/XanXSS)
Advanced XSS Detection Suite (https://github.com/UltimateHackers/XSStrike)
RVuln (https://github.com/iinc0gnit0/RVuln)
Cyclops (https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking)
Steganograhy tools
SteganoHide
StegnoCracker
StegoCracker (https://github.com/W1LDN16H7/StegoCracker)
Whitespace (https://github.com/beardog108/snow10)
Other tools
SocialMedia Bruteforce
Instagram Attack (https://github.com/chinoogawa/instaBrute)
AllinOne SocialMedia Attack (https://github.com/Matrix07ksa/Brute_Force)
Facebook Attack (https://github.com/Matrix07ksa/Brute_Force)
Application Checker (https://github.com/jakuta-tech/underhanded)
Android Hacking tools
Keydroid (https://github.com/F4dl0/keydroid)
MySMS (https://github.com/papusingh2sms/mysms)
Lockphish (Grab target LOCK PIN) (https://github.com/JasonJerry/lockphish)
DroidCam (Capture Image) (https://github.com/kinghacker0/WishFish)
EvilApp (Hijack Session) (https://github.com/crypticterminal/EvilApp)
HatCloud(Bypass CloudFlare for IP) (https://github.com/HatBashBR/HatCloud)
IDN Homograph Attack
EvilURL (https://github.com/UndeadSec/EvilURL)
Email Verify tools
Knockmail (https://github.com/4w4k3/KnockMail)
Hash cracking tools
Hash Buster (https://github.com/s0md3v/Hash-Buster)
Wifi Deauthenticate
WifiJammer-NG (https://github.com/MisterBianco/wifijammer-ng)
KawaiiDeauther (https://github.com/aryanrtm/KawaiiDeauther)
SocialMedia Finder
Find SocialMedia By Facial Recognation System (https://github.com/Greenwolf/social_mapper)
Find SocialMedia By UserName (https://github.com/xHak9x/finduser)
Sherlock (https://github.com/sherlock-project/sherlock)
SocialScan | Username or Email (https://github.com/iojw/socialscan)
Payload Injector
Debinject (https://github.com/UndeadSec/Debinject)
Pixload (https://github.com/chinarulezzz/pixload)
Web crawling
Gospider (https://github.com/jaeles-project/gospider)
 
Назад
Верх Низ