Alternatives and similar repositories for pentest-scripts

Users that are interested in pentest-scripts are comparing it to the libraries listed below

• carlospolop / Leakos
  ☆74Updated this week
• HernanRodriguez1 / ScanReflectedXSS
  ☆46Updated last month
• carlospolop / Pastos
  ☆57Updated 3 years ago
• AmoloHT / TTWAF
  「🧱」Test a list of payloads and see if you can bypass it
  ☆61Updated 3 years ago
• redhuntlabs / Hunt4Spring
  A "Spring4Shell" vulnerability scanner.
  ☆49Updated 10 months ago
• V1n1v131r4 / webdiscover
  The purpose of this script is to automate the web enumeration process and search for exploits
  ☆114Updated 3 years ago
• ZephrFish / GoogD0rk
  ☆43Updated 7 months ago
• DritzPS / PentestingTools
  Tools used for Pentesting
  ☆22Updated 2 years ago
• sunw4r / creepedin
  Simple chrome extension for full name extraction and conversion to emails/usernames. Utilizes the 'people' tab of the target company on L…
  ☆28Updated 7 months ago
• securebinary / o365sprayer
  An offensive security tool used to enumerate and spray passwords for O365 accounts on both Managed and Federated AD services.
  ☆48Updated 3 years ago
• xnl-h4ck3r / auto-repeater
  Automated HTTP Request Repeating With Burp Suite
  ☆40Updated 2 years ago
• Liodeus / swaggerHole
  A python3 script searching for secret on swaggerhub
  ☆66Updated 3 years ago
• emadshanab / Red-Team-Resources-collection
  ☆77Updated 4 years ago
• AmoloHT / CVE-2022-33891
  「💥」CVE-2022-33891 - Apache Spark Command Injection
  ☆26Updated 3 years ago
• aniqfakhrul / lazyParam
  A simple automation tool to detect lfi, rce and ssti vulnerability
  ☆56Updated 3 years ago
• RodricBr / OffSec-MISC
  Offensive Security MISC Annotations and Payloads for Ethical Hackers / Security Researchers
  ☆29Updated last year
• mswell / burnrecon
  is a tool to automate and organize reconnaissance operations.
  ☆24Updated 2 years ago
• hueristiq / xsubfind3r
  A command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information f…
  ☆115Updated this week
• gotr00t0day / F5-BIG-IP-Scanner
  F5 BIG-IP Scanner scans for servers on shodan and checks to see if they are vulnerable.
  ☆21Updated 2 years ago
• sp34rh34d / GReal
  Gmail/GSuite account enumeration tool
  ☆54Updated last year
• Nickguitar / YAPS
  Yet Another PHP Shell - The most complete PHP reverse shell
  ☆82Updated 3 years ago
• kh4sh3i / ElasticSearch-Pentesting
  ElasticSearch exploit and Pentesting guide for penetration tester
  ☆29Updated 3 years ago
• execveat / burp-brief-editor-tab
  Burp Suite extension that makes your life easier by tucking the headers out of the way, so you can see the body content right away withou…
  ☆39Updated 2 years ago
• kljunowsky / XXElixir
  This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.
  ☆82Updated last year
• dragonked2 / 2fa
  my own 2fa bypass methodolgy
  ☆26Updated 2 years ago
• chaudharyarjun / JWTXposer
  An advanced JWT extraction & decoding tool for bug bounty hunters! 🏴‍☠️
  ☆45Updated 8 months ago
• D3Ext / go-recon
  External recon toolkit
  ☆53Updated 11 months ago
• nowak0x01 / WPXStrike
  WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…
  ☆69Updated last year
• ExpLangcn / agartha
  a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …
  ☆49Updated 3 years ago
• 000pp / WSOB
  😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.
  ☆27Updated 2 years ago