Alternatives and similar repositories for scriptsAndExploits:

Users that are interested in scriptsAndExploits are comparing it to the libraries listed below

• federicodotta / HandyCollaborator
  Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!
  ☆103Updated 6 years ago
• AppSecConsulting / Pentest-Tools
  Penetration Testing Tools Developed by AppSec Consulting.
  ☆48Updated 6 years ago
• Arno0x / WebDavC2
  A WebDAV PROPFIND C2 tool
  ☆119Updated 5 years ago
• ropnop / xxetimes
  An interactive OOB XXE data exfiltration tool
  ☆91Updated 7 years ago
• milo2012 / CVE-2018-0296
  Test CVE-2018-0296 and extract usernames
  ☆106Updated 6 years ago
• vulnersCom / burp-Dirbuster
  Dirbuster plugin for Burp Suite
  ☆70Updated 8 years ago
• kkirsche / CVE-2017-10271
  Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)
  ☆126Updated 2 years ago
• Coalfire-Research / sqlinator
  Automatically forward HTTP GET & POST requests to SQLMap's API to test for SQLi and XSS
  ☆83Updated 2 years ago
• hook-s3c / CVE-2018-11776-Python-PoC
  Working Python test and PoC for CVE-2018-11776, includes Docker lab
  ☆125Updated 6 years ago
• metalnas / loubia
  Python script to exploit java unserialize on t3 (Weblogic)
  ☆61Updated 7 years ago
• vvalien / SharpMeter
  ☆138Updated 7 years ago
• viperbluff / WAF_buster
  Disrupt WAF by abusing SSL/TLS Ciphers
  ☆48Updated 6 years ago
• n00py / Hwacha
  Deploy payloads to *Nix systems en masse
  ☆108Updated 5 years ago
• PortSwigger / replicator
  Burp extension to help developers replicate findings from pen tests
  ☆70Updated 9 months ago
• Stahlz / JQShell
  A weaponized version of CVE-2018-9206
  ☆62Updated 6 years ago
• nopernik / msfvenom-bc-generator
  Metasploit msfvenom Bash Completions Generator
  ☆42Updated 8 years ago
• OffXec / TheDoc
  TheDoc is a simple but very useful SQLMAP automator with built in admin finder, hash cracker(using hashca) and more!
  ☆98Updated 6 years ago
• viperbluff / PortWitness
  Tool for checking Whether a domain or its multiple sub-domains are up and running.
  ☆72Updated 6 years ago
• Intrinsec / comission
  WhiteBox CMS analysis
  ☆69Updated last year
• 0x09AL / DropboxC2C
  DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
  ☆150Updated 6 years ago
• s1kr10s / Apache-Struts-v4
  ☆206Updated 4 years ago
• shakenetwork / mimipenguin
  Mimipenguin密码抓取神器
  ☆26Updated 7 years ago
• SpiderLabs / Airachnid-Burp-Extension
  A Burp Extension to test applications for vulnerability to the Web Cache Deception attack
  ☆139Updated 4 years ago
• blacknbunny / mcreator
  Encoded Reverse Shell Generator With Techniques To Bypass AV's
  ☆146Updated 4 years ago
• milo2012 / portia
  Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…
  ☆171Updated 7 years ago
• immunIT / XIP
  XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF,…
  ☆76Updated 6 years ago
• nccgroup / BKScan
  BlueKeep scanner supporting NLA
  ☆167Updated 5 years ago
• cornerpirate / java-stager
  A PoC Java Stager which can download, compile, and execute a Java file in memory.
  ☆107Updated 6 years ago
• nccgroup / OutlookLeakTest
  The Outlook HTML Leak Test Project
  ☆132Updated 6 years ago
• ceh-tn / The-Axer
  ☆101Updated 6 years ago