A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The uncompromising Python code formatter

🕵️‍♂️ Offensive Google framework.

Most advanced XSS scanner.

The Rogue Access Point Framework

Web path scanner

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Install and Run Python Applications in Isolated Environments

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Framework for Man-In-The-Middle attacks

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

Mimikatz implementation in pure Python

OSINT tool for finding profiles by username

OSINT Tool for Finding Passwords of Compromised Email Addresses

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Reconnaissance Swiss Army Knife

Crack hashes in seconds.

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

The famous WPA precomputed cracker, Migrated from Google.

Patch Binaries via MITM: BackdoorFactory + mitmProxy.

CrackQ: A Python Hashcat cracking queue system

Python wrapper for AutoHotkey with full type support. Harness the automation power of AutoHotkey with the beauty of Python.

Python / C# Unmanaged PowerShell based RAT

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, si…