Alternatives and similar repositories for pentest-tricks

Users that are interested in pentest-tricks are comparing it to the libraries listed below

• codewatchorg / PowerSniper
  Password spraying script and helper for creating password lists
  ☆34Updated 5 years ago
• W00t3k / inSp3ctor
  AWS S3 Bucket/Object Finder
  ☆25Updated 8 years ago
• ChrisTruncer / mikto
  Script to automate, manage, and multithread Nikto scans.
  ☆63Updated 5 years ago
• nccgroup / WebFEET
  Web Filter External Enumeration Tool (WebFEET)
  ☆77Updated 11 years ago
• obscuritylabs / OS-CFDB
  Open Source - Common Findings DataBase (JSON & MD)
  ☆67Updated 3 years ago
• Arno0x / WebDavDelivery
  A WebDAV PROPFIND covert channel to deliver payloads
  ☆52Updated 8 years ago
• joda32 / CertCrunchy
  Just a silly recon tool that uses data from SSL Certificates to find potential host names
  ☆29Updated 2 years ago
• carnal0wnage / malicious_file_maker
  malicious file maker/sender to create and send malicious attachments to test your email filter/alerting
  ☆70Updated 8 years ago
• gwen001 / testxss
  PHP tool to test XSS
  ☆22Updated 6 years ago
• Mr-Un1k0d3r / SearchIPOwner
  Search public IP owner through ARIN
  ☆61Updated 7 months ago
• gryhathack / PowerSploit_Sensitive_Info_Hunter
  Modifed PowerSploit/PowerView to search files and match RegEx for Sensitive info (PII, PCI, Passwords, Usernames, SNMP Strings, etc.)
  ☆14Updated 7 years ago
• diljith369 / avbypassGo
  AV Bypass
  ☆29Updated 7 years ago
• n00py / pOSt-eX
  Post-exploitation scripts for OS X persistence and privesc
  ☆73Updated 8 years ago
• vysecurity / basicAuth
  Basic Auth Phish page
  ☆25Updated 8 years ago
• DanMcInerney / msfbot
  WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin
  ☆64Updated 3 years ago
• nccgroup / ssh_user_enum
  SSH User Enumeration Script in Python Using The Timing Attack
  ☆94Updated 9 years ago
• evilmog / hashcat-hcstat
  A collection of hashcat-hcstat files
  ☆33Updated 7 years ago
• mikhbur / conformer
  Password Guessing for different Web Portals
  ☆29Updated 7 years ago
• tahmed11 / strutsy
  Strutsy - Mass exploitation of Apache Struts (CVE-2017-5638) vulnerability
  ☆10Updated 7 years ago
• deepseasred / pURL
  API testing tool written with Python
  ☆56Updated 8 years ago
• superkojiman / rfishell
  Provide a shell-like interface for exploiting Remote File Inclusion vulnerabilities.
  ☆46Updated 9 years ago
• vergl4s / pentesting-dump
  Scripts, tools, and proof-of-concepts to aid in a penetration test.
  ☆97Updated 5 years ago
• SpiderLabs / Firework
  Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.
  ☆44Updated 5 years ago
• dionach / PassHunt
  Search drives for documents containing passwords
  ☆65Updated 11 years ago
• Den1al / pymassdns
  A Pythonic wrapper to MassDNS
  ☆24Updated 7 years ago
• vysecurity / redteam-plan
  Issues to consider when planning a red team exercise.
  ☆15Updated 8 years ago
• Arno0x / ObfuscateCactusTorch
  When CactusTorch meets WebDavDelivery and obfuscation
  ☆63Updated 8 years ago
• ins1gn1a / NetNTLM-Hashcat
  Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.
  ☆34Updated 6 years ago
• ihack4falafel / SLAE32
  Collection of things made during my SLAE 32-bit journey
  ☆14Updated 3 years ago
• hvqzao / report-ng
  Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.
  ☆67Updated last year