Essential tool for finding blind injection attacks.
☆49Feb 6, 2019Updated 7 years ago
Alternatives and similar repositories for duct
Users that are interested in duct are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The Python Password-Protected Obfuscator☆32Jul 7, 2019Updated 7 years ago
- yet another dirbuster☆18Jan 14, 2021Updated 5 years ago
- DNS Enumeration with Asynchronicity☆45Oct 30, 2018Updated 8 years ago
- DrMITM is a program designed to globally log all traffic of a website.☆27Feb 10, 2019Updated 7 years ago
- Framework for exploiting local vulnerabilities☆83Nov 18, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Boxer: A fast directory bruteforce tool written in Python with concurrency.☆14Feb 26, 2021Updated 5 years ago
- Password Lense: reveal character types in a password☆23Oct 18, 2025Updated last year
- A threaded, recursive, web directory brute-force scanner over HTTP/2.☆37Feb 11, 2020Updated 6 years ago
- Disrupt WAF by abusing SSL/TLS Ciphers☆48Dec 19, 2018Updated 7 years ago
- HashCobra Hash Cracking tool.☆122Dec 1, 2020Updated 5 years ago
- A tool written in python for scraping firebase data☆43Apr 5, 2020Updated 6 years ago
- ☆25May 9, 2021Updated 5 years ago
- a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations…☆533Mar 27, 2022Updated 4 years ago
- Pown.js is a security testing an exploitation toolkit built on top of Node.js and NPM.☆260Apr 7, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An enumeration and exploitation toolkit using RFC calls to SAP☆41Jan 8, 2020Updated 6 years ago
- Interactive Post Exploitation Tool☆37Oct 1, 2019Updated 7 years ago
- A defense tool - detect web shells in local directories via md5sum☆33Jul 18, 2019Updated 7 years ago
- A simple XSS finding tool☆110Nov 9, 2018Updated 7 years ago
- ☆39Jul 3, 2020Updated 6 years ago
- Unofficial api for cve.mitre.org☆40Aug 28, 2021Updated 5 years ago
- Recursive DNS Subdomain Enumerator with dead-end avoidance system (BETA)☆146Apr 9, 2021Updated 5 years ago
- Linux, macOS and Windows Install scripts for cnquery & cnspec☆85Updated this week
- ☆14Aug 27, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses…☆145Apr 29, 2019Updated 7 years ago
- ☆176Jul 5, 2023Updated 3 years ago
- ☆90Dec 8, 2022Updated 3 years ago
- PostShell - Post Exploitation Bind/Backconnect Shell☆81Sep 9, 2019Updated 7 years ago
- SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing☆91May 10, 2020Updated 6 years ago
- Toolkit to detect and keep track on Blind XSS, XXE & SSRF☆342Aug 23, 2019Updated 7 years ago
- Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.☆290Nov 30, 2019Updated 6 years ago
- Search and download dictionaries for testing, bruteforcing, fuzzing and exploit-development.☆14Aug 11, 2021Updated 5 years ago
- Hayat is a script for report and analyze Google Cloud Platform resources.☆81Jan 7, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Automatic UAC-Bypassing for custom payloads during privilege escalation testing☆97Aug 13, 2022Updated 4 years ago
- Blind SQL Injection Tool with Golang☆88Dec 31, 2021Updated 4 years ago
- Hunt Open MongoDB instances☆78Sep 25, 2019Updated 7 years ago
- Reclaim control of your Burp Suite Repeater tabs with this powerful extension☆69Jun 19, 2026Updated 4 months ago
- CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE☆16Mar 11, 2019Updated 7 years ago
- Pentesting-related Bash Scripts☆12Jan 4, 2020Updated 6 years ago
- A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会☆163Aug 21, 2019Updated 7 years ago