Stars
Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!
A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
a package of Pentest scripts I have made or commonly use
HackBox is a powerful and comprehensive tool that combines a variety of techniques for web application and network security assessments, including XSS testing, subdomain scanning, SSRF injection, a…
Automation library for Metasploit
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
Modified hostapd to facilitate AP impersonation attacks
Android USB Camera Driver/Bridge for GNU/Linux
WoeUSB is a simple tool that enable you to create your own usb stick windows installer from an iso image or a real DVD. It is a fork of Congelli501's WinUSB.
😉 用于在插上U盘后自动按需复制该U盘的文件。”备份&偷U盘文件的神器”（写作USBCopyer，读作USBCopier）
USBdriveby exploits the trust of USB devices by emulating an HID keyboard and mouse, installing a cross-platform firewall-evading backdoor, and rerouting DNS within seconds of plugging it in.
« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
DEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3
kadimus is a tool to check and exploit lfi vulnerability.
Network reconnaissance and vulnerability assessment tools.
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
Mikaayenson / pymetasploit
Forked from allfro/pymetasploitA full-fledged msfrpc library for Metasploit framework.
Specify targets and run sets of tools against them
A collection of wordlists dictionaries for password cracking