Alternatives and similar repositories for pentest-scripts

Users that are interested in pentest-scripts are comparing it to the libraries listed below

• carlospolop / Leakos
  ☆74Updated last year
• carlospolop / Pastos
  ☆57Updated 3 years ago
• HernanRodriguez1 / ScanReflectedXSS
  ☆45Updated 2 weeks ago
• securebinary / o365sprayer
  An offensive security tool used to enumerate and spray passwords for O365 accounts on both Managed and Federated AD services.
  ☆48Updated 3 years ago
• Liodeus / swaggerHole
  A python3 script searching for secret on swaggerhub
  ☆66Updated 3 years ago
• brosck / Pingoor
  「🚪」Linux Backdoor based on ICMP protocol
  ☆63Updated 11 months ago
• hueristiq / xsubfind3r
  A command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information f…
  ☆116Updated this week
• AmoloHT / CVE-2022-33891
  「💥」CVE-2022-33891 - Apache Spark Command Injection
  ☆26Updated 3 years ago
• ZephrFish / GoogD0rk
  ☆43Updated 6 months ago
• emadshanab / Red-Team-Resources-collection
  ☆77Updated 4 years ago
• j3ssie / cdnstrip
  Striping CDN & WAF IPs from a list of IP Addresses
  ☆79Updated 6 months ago
• redhuntlabs / Hunt4Spring
  A "Spring4Shell" vulnerability scanner.
  ☆49Updated 10 months ago
• kljunowsky / XXElixir
  This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.
  ☆81Updated last year
• AmoloHT / TTWAF
  「🧱」Test a list of payloads and see if you can bypass it
  ☆61Updated 3 years ago
• DritzPS / PentestingTools
  Tools used for Pentesting
  ☆22Updated 2 years ago
• execveat / burp-brief-editor-tab
  Burp Suite extension that makes your life easier by tucking the headers out of the way, so you can see the body content right away withou…
  ☆39Updated 2 years ago
• nowak0x01 / WPXStrike
  WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…
  ☆68Updated last year
• ferreiraklet / icmp_reverse_shell
  ☆45Updated 2 years ago
• gotr00t0day / F5-BIG-IP-Scanner
  F5 BIG-IP Scanner scans for servers on shodan and checks to see if they are vulnerable.
  ☆21Updated 2 years ago
• RodricBr / OffSec-MISC
  Offensive Security MISC Annotations and Payloads for Ethical Hackers / Security Researchers
  ☆29Updated 11 months ago
• fguisso / ga-recon
  Recon(Amass, Naabu, Nuclei) workflow with Github Actions
  ☆17Updated last year
• AmoloHT / XSS-Payload
  「💉」XSS Payload List
  ☆41Updated 2 years ago
• xnl-h4ck3r / auto-repeater
  Automated HTTP Request Repeating With Burp Suite
  ☆40Updated 2 years ago
• mathis2001 / ParamFirstCheck
  ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, …
  ☆34Updated last year
• edermi / gophish_mods
  Open-Source Phishing Toolkit
  ☆19Updated 4 years ago
• ExpLangcn / agartha
  a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …
  ☆49Updated 3 years ago
• V1n1v131r4 / webdiscover
  The purpose of this script is to automate the web enumeration process and search for exploits
  ☆114Updated 3 years ago
• cosad3s / hfinder
  Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE
  ☆54Updated last year
• nirsarkar / BurpSuite-Secret_Finder
  ☆28Updated 5 years ago
• sunw4r / creepedin
  Simple chrome extension for full name extraction and conversion to emails/usernames. Utilizes the 'people' tab of the target company on L…
  ☆27Updated 6 months ago