Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.
☆274Aug 30, 2024Updated 2 years ago
Alternatives and similar repositories for sh00t
Users that are interested in sh00t are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆516Jul 29, 2020Updated 6 years ago
- WEB SERVICE SECURITY ASSESSMENT TOOL☆388Sep 24, 2021Updated 5 years ago
- Easy files and payloads delivery over DNS☆427Jan 3, 2026Updated 9 months ago
- A testing framework for mail security and filtering solutions.☆244Jul 24, 2023Updated 3 years ago
- Tricks for penetration testing☆590Apr 22, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- an asynchronous target enumeration tool☆252Dec 8, 2022Updated 3 years ago
- Burp Suite plugin which implement PyJFuzz for fuzzing web application.☆55Apr 10, 2017Updated 9 years ago
- R3con1z3r is a lightweight Web information gathering tool with an intuitive features written in python. it provides a powerful environmen…☆227Jul 24, 2019Updated 7 years ago
- Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of rel…☆425Oct 19, 2026Updated 2 weeks ago
- Kurukshetra - A framework for teaching secure coding by means of interactive problem solving.☆139Sep 23, 2024Updated 2 years ago
- Multi Tool Subdomain Enumeration☆721Apr 11, 2021Updated 5 years ago
- A tool to automate penetration tests☆384Mar 9, 2024Updated 2 years ago
- Tool for checking Whether a domain or its multiple sub-domains are up and running.☆71Jan 21, 2019Updated 7 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,818Apr 26, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆128May 22, 2023Updated 3 years ago
- Stealing CSRF tokens with CSS injection (without iFrames)☆320Feb 7, 2018Updated 8 years ago
- "PRinter Exploitation Toolkit" LAN automation tool☆217Oct 7, 2019Updated 7 years ago
- parsers to make life easier☆13Aug 21, 2020Updated 6 years ago
- Mobile application testing toolkit☆249Nov 8, 2018Updated 7 years ago
- Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, recon…☆1,054Nov 4, 2024Updated last year
- A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale v…☆449May 25, 2022Updated 4 years ago
- Web App Monitor☆225Sep 20, 2018Updated 8 years ago
- SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over…☆381Aug 17, 2018Updated 8 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Report Generation Tool for Security Assessment☆65Dec 31, 2018Updated 7 years ago
- CobaltStrike External C2 for Websockets☆195Jul 16, 2019Updated 7 years ago
- Penetration Testing Platform☆1,346Jul 6, 2022Updated 4 years ago
- A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或…☆674Jul 16, 2023Updated 3 years ago
- Tools for auditing WAFS☆466Nov 24, 2020Updated 5 years ago
- A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools☆163Oct 21, 2019Updated 7 years ago
- A powerful target reconnaissance framework powered by graph theory.☆421Oct 21, 2022Updated 4 years ago
- ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.☆2,477Jun 11, 2025Updated last year
- Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.☆1,873Nov 19, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Open-source pentesting management and automation platform by Salesforce Product Security☆598Feb 12, 2022Updated 4 years ago
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆36Dec 9, 2019Updated 6 years ago
- A Network Enumeration and Attack Toolset for Windows Active Directory Environments.☆246Sep 14, 2026Updated last month
- Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux☆123Apr 13, 2019Updated 7 years ago
- An interactive multi-user web JS shell☆364Jun 28, 2022Updated 4 years ago
- miscellaneous scripts mostly created for pentest purposes at first, but then for various IT tasks☆23Jun 30, 2025Updated last year
- Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.☆77Feb 27, 2020Updated 6 years ago