Passive recon & attack surface mapper — zero requests sent
☆39May 5, 2026Updated 5 months ago
Alternatives and similar repositories for PenScope
Users that are interested in PenScope are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Burp extension that easily allows for switching a request's session (headers, cookies) on the fly☆33Jun 17, 2026Updated 4 months ago
- Offline pentest workflow tracker — turns nmap output into a port-aware, KB-matched recon checklist in under 30 seconds. Self-hosted, sing…☆61Aug 8, 2026Updated 2 months ago
- Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, ev…☆152Updated this week
- Official Black Hat Arsenal Security Tools Repository☆15Dec 7, 2017Updated 8 years ago
- Extract subdomains from CSP headers☆12Jul 10, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This repository is a collection of write-ups that I read every day.☆13Jan 4, 2026Updated 9 months ago
- A request smuggling desync to global cache channel PoC to accompany paper on blog.malicious.group.☆15Jul 25, 2025Updated last year
- A jquery plugin which add loading indicators into buttons☆12Oct 23, 2020Updated 6 years ago
- The Jolly Executioner - a simple command execution proxy☆16Jun 9, 2024Updated 2 years ago
- OSCP CheatSheet☆12Sep 27, 2026Updated 3 weeks ago
- CVE-2022-25765 pdfkit <0.8.6 command injection.☆16Dec 21, 2022Updated 3 years ago
- DNSrecon tool with GUI for Kali Linux☆63Dec 12, 2022Updated 3 years ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- This is a compiled cheatsheet from my experience of OSCP 2023 journey. Won't say it is all-rounded but a good starting point if you wanna…☆15Oct 17, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Dockerized openconnect client. Compatible with Cisco Anyconnect (CSD). Exposes socks5 proxy.☆14Oct 16, 2020Updated 6 years ago
- Tools, Resources, Guides, Infographics, etc☆11Aug 17, 2024Updated 2 years ago
- A tool to find/download malware samples from various public repositories☆12Dec 22, 2021Updated 4 years ago
- Just some random stuff for AppLocker☆17Jan 30, 2019Updated 7 years ago
- A practical security workbook for reviewing source code, identifying vulnerabilities, validating findings with test cases, and automating…☆32Sep 4, 2026Updated last month
- ☆23Mar 4, 2025Updated last year
- A bash script to bind official Kali nethunter installation with Proot-distro.☆17Apr 20, 2024Updated 2 years ago
- Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.☆48Jul 20, 2022Updated 4 years ago
- A PoC code for JSON Smuggling technique to smuggle arbitrary files through JSON☆116Mar 27, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- C# Exe that can remotely retrieve C# assemblies for in-memory execution☆19Feb 22, 2019Updated 7 years ago
- Frida Python Tool☆14Sep 29, 2020Updated 6 years ago
- PlasmaPup is designed to help central and departmental IT personnel understand their exposures in Active Directory by showing which accou…☆29Apr 10, 2024Updated 2 years ago
- OSWE-like machines☆11Dec 28, 2020Updated 5 years ago
- Validate AD credentials over NTLM and Kerberos - passwords, hashes, keys, and tickets☆17Oct 8, 2026Updated 2 weeks ago
- Unofficial API for multcloud which supports multiple accounts to remotely upload to GDrive.☆10Jan 27, 2022Updated 4 years ago
- oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning☆78Dec 5, 2024Updated last year
- CVE-2021-41773 | CVE-2021-42013 Exploit Tool (Apache/2.4.49-2.4.50)☆10Apr 8, 2022Updated 4 years ago
- Advanced XSS covers techniques to bypass modern web security measures like blacklists, filters, and Content Security Policy (CSP). It foc…☆23Mar 6, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Purple Team Strategies, Published by Packt☆17Apr 22, 2026Updated 6 months ago
- Red Team Initial Access Guide: Recon, exploitation, C2 setup, lateral movement, persistence, evasion techniques, and real-world case stud…☆14Jun 8, 2025Updated last year
- OSWE-cheat sheet module by module with updated syllabus☆13May 25, 2021Updated 5 years ago
- KALI IOS FOR iSH☆23Feb 3, 2026Updated 8 months ago
- The ravens bring knowledge - Internet crowdsourced OSINT for device identification☆23Updated this week
- Tracking the availability of Kali Linux packages in NixOS☆11Dec 31, 2024Updated last year
- URILoot is a browser extension designed for Bug Bounty Hunters and Pentesters. Makes fetching uris easy from various sources.☆64Feb 15, 2026Updated 8 months ago