A webshell framework for penetration testers.
☆298Aug 10, 2025Updated last year
Alternatives and similar repositories for novahot
Users that are interested in novahot are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆137Jul 13, 2017Updated 9 years ago
- Next Generation Firewall Audit and Bypass Tool☆267Apr 24, 2017Updated 9 years ago
- An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector☆1,023Sep 11, 2017Updated 9 years ago
- Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.☆400May 20, 2020Updated 6 years ago
- Forward local or remote tcp ports through SMB pipes.☆296Mar 7, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- unix wildcard attacks☆137May 25, 2018Updated 8 years ago
- Local UNIX PrivEsc Aggregation☆242Apr 9, 2016Updated 10 years ago
- From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras☆423Feb 18, 2020Updated 6 years ago
- A PowerShell based utility for the creation of malicious Office macro documents.☆1,109Nov 3, 2017Updated 9 years ago
- A collection of post-exploitation tools for network red teaming.☆138Dec 7, 2018Updated 7 years ago
- A WebDAV PROPFIND covert channel to deliver payloads☆52Nov 14, 2017Updated 8 years ago
- Cgiemail - Source Code Disclosure/LFI☆15Oct 21, 2016Updated 10 years ago
- A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale v…☆449May 25, 2022Updated 4 years ago
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆384Jun 25, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal compute…☆331Apr 19, 2017Updated 9 years ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- Automated Linux evil maid attack☆436Dec 22, 2015Updated 10 years ago
- Exploits and Security Tools Framework 2.0.1☆306Sep 18, 2022Updated 4 years ago
- Automates some pentest jobs via nmap xml file☆325Sep 7, 2018Updated 8 years ago
- Neet - Network Enumeration and Exploitation Tool☆169Nov 30, 2016Updated 9 years ago
- Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec☆456Apr 22, 2016Updated 10 years ago
- A Ruby framework designed to aid in the penetration testing of WordPress systems.☆1,042Nov 24, 2019Updated 6 years ago
- Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)☆760Jan 28, 2019Updated 7 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Local Privilege Escalation☆207Feb 28, 2017Updated 9 years ago
- ☆336Nov 23, 2016Updated 9 years ago
- RedSnarf is a pen-testing / red-teaming tool for Windows environments☆1,221Sep 14, 2020Updated 6 years ago
- WAFNinja is a tool which contains two functions to attack Web Application Firewalls.☆833Aug 11, 2026Updated 2 months ago
- PowerShell Runspace Post Exploitation Toolkit☆1,551Aug 2, 2019Updated 7 years ago
- PowerShell Empire Web Interface☆331May 20, 2023Updated 3 years ago
- NetRipper - Smart traffic sniffing for penetration testers☆1,388Jun 17, 2022Updated 4 years ago
- XXRF Shots - Useful for testing SSRF vulnerability☆75Feb 18, 2023Updated 3 years ago
- Rainmap Lite - Responsive web based interface that allows users to launch Nmap scans from their mobiles/tablets/web browsers!☆233Dec 11, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- OWASP VBScan is a Black Box vBulletin Vulnerability Scanner☆325Jun 16, 2019Updated 7 years ago
- Kerberos / Windows AD / Linux PAM password change check against breached lists (HIBP), and other rules☆159Feb 2, 2023Updated 3 years ago
- AntiVirus Evasion Tool☆1,761Apr 23, 2025Updated last year
- SMB Relay Attack Script☆145Dec 6, 2018Updated 7 years ago
- Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.☆938May 8, 2019Updated 7 years ago
- Tools for auditing WAFS☆466Nov 24, 2020Updated 5 years ago
- BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.☆176Dec 1, 2022Updated 3 years ago