A collection of scripts and tools I have authored to aid in Pentesting, provided under GNUv3, NOTE: I am not liable if you use them for illegal purposes, these scripts should only be used on your own systems or systems where you have express written consent from the owner.
☆34Oct 23, 2018Updated 8 years ago
Alternatives and similar repositories for PenTesting
Users that are interested in PenTesting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scripts, tools, and proof-of-concepts to aid in a penetration test.☆96Jul 9, 2020Updated 6 years ago
- Various pentest scripts☆14Mar 17, 2014Updated 12 years ago
- miscellaneous handy pentesting tools☆62Jan 1, 2021Updated 5 years ago
- Simple script to automated the capture and merging process when using a hardware TAP☆15Mar 7, 2013Updated 13 years ago
- Command line tool that enables automated penetration testing in the Microsoft stack using OWASP ZAP☆20Feb 22, 2015Updated 11 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- REST/JSON interface to Burp Suite☆34Oct 12, 2020Updated 6 years ago
- ☆27Jul 18, 2017Updated 9 years ago
- Phishing attack w/HTML5 offline cache framework based on Squid proxy☆30Jan 28, 2012Updated 14 years ago
- Application Security Vulnerability Periodic Table☆14Aug 25, 2014Updated 12 years ago
- Evil snippets of Underhanded Red Team tactics☆11Jul 5, 2017Updated 9 years ago
- Python object interface to requests/responses recorded by Burp Suite☆37Jan 21, 2020Updated 6 years ago
- ☆13Oct 3, 2014Updated 12 years ago
- PFI (Port Forwarding Interceptor)☆46Jan 29, 2026Updated 9 months ago
- ☆13Aug 18, 2016Updated 10 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Useful pentesting scripts☆88Feb 1, 2025Updated last year
- Automates sslstrip arp spoofing MITM attack. FOR TESTING PURPOSES ONLY.☆37Dec 16, 2015Updated 10 years ago
- Simple tool to check whether a website is clickjackable☆12Mar 28, 2021Updated 5 years ago
- ☆16Oct 23, 2015Updated 11 years ago
- A Burp Suite extension that checks if a particular URL responds differently to various User-Agent headers☆15Sep 4, 2014Updated 12 years ago
- Find subfolders in the Windows folder which have bad ACL and allow write and execute☆14Oct 20, 2015Updated 11 years ago
- scripts used in my pentest work.☆44Jan 14, 2016Updated 10 years ago
- Android hacking tools☆14Apr 25, 2010Updated 16 years ago
- Find all cool documents on GOV and Info sites☆19Jul 30, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Ruby Oracle Security Scanner☆16Jul 9, 2012Updated 14 years ago
- Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients☆14Jul 3, 2013Updated 13 years ago
- Various tools, exploits and other short code snippets☆12Dec 25, 2018Updated 7 years ago
- My Android SuperHack app source.☆14Nov 14, 2025Updated 11 months ago
- Jython binding for Burp to facilitate realtime traffic analysis and modification using simple plugins.☆14Nov 1, 2012Updated 13 years ago
- NAT Pinning test suite tool for penetration testers.☆31Feb 17, 2014Updated 12 years ago
- Wax is a mediocre fuzzer I'm prototyping to test some ideas and get rid of others.☆17Jul 12, 2018Updated 8 years ago
- This is a fork of the Android emulator that allows spoofing of IMEI, IMSI, and phone number.☆26May 5, 2011Updated 15 years ago
- Android 802.11 pentesting tool☆104May 3, 2014Updated 12 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Forked from joomscan-owasp at 26/02/2015 to add new functionality☆14Feb 26, 2015Updated 11 years ago
- http-dir-enum is a tool for finding content that is not linked on a website. Its main use is for finding directories that exist on a serv…☆15Jun 13, 2021Updated 5 years ago
- Bypassing Android Pattern Lock☆73Apr 16, 2014Updated 12 years ago
- The great TCP Gender Changer (tgcd) tool compiled for Windows☆14Apr 18, 2016Updated 10 years ago
- Microsoft Office / COM Object DLL Planting☆15May 14, 2016Updated 10 years ago
- How to unlock iCloud locked Apple iPad 2, iPad 3, iPad 4, iPad Air, iPad mini, iPad mini with Retina with 3G☆23Oct 20, 2014Updated 12 years ago
- Burp plugin that clusters responses to show an overview of received responses☆14Jun 7, 2019Updated 7 years ago