Maligno is an open source penetration testing tool that serves Metasploit payloads. It generates shellcode with msfvenom and transmits it ...
Dradis v2.9 - Information Sharing For Security Assessments
Dradis is an open source framework to enable effective information sharing, specially during security assessments. It’s a tool specifically...
The Mole - Automatic SQL Injection Exploitation Tool
The Mole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect ...
SmartSPLAT - Tool to troubleshoot Checkpoint firewall issues and perform management tasks
Smart SPLAT is a freeware software to troubleshoot Checkpoint firewall issues and perform management tasks. It periodically checks for an up...
Smart Pentester - An SSH based Penetration Testing Framework
Smart Pentester is an SSH based Penetration Testing Framework. It provides a GUI for well known tools like nmap, hping, tcpdump, volatility,...
Hexorbase - Multiple Database Management and Audit Tool
HexorBase is a database application designed for administering and auditing multiple database servers simultaneously from a centralized lo...
WebSiteSniffer v1.41 - Captures all Web site files downloaded by your Web browser while browsing the Internet
WebSiteSniffer is a packet sniffer tool that captures all Web site files downloaded by your Web browser while browsing the Internet, and s...
HackPorts - Mac OS X Penetration Testing Framework and Tools
HackPorts was developed as a penetration testing framework with accompanying tools and exploits that run natively on Mac platforms. HackPo...
Wireless Network Watcher - Show who is connected to your wireless network
Wireless Network Watcher is a small utility that scans your wireless network and displays the list of all computers and devices that are cu...
Wireless Network Watcher - Show who is connected to your wireless network
Wireless Network Watcher is a small utility that scans your wireless network and displays the list of all computers and devices that are cu...
Remote DLL - Simple & Free Tool to Inject or Remove DLL from Remote Process
RemoteDLL is the simple tool to Inject DLL or Remove DLL from Remote Process. It is based on popular Dll Injection technique. It suppor...
ArchAssault - Arch Linux ISO for Penetration Testers
The ArchAssault Project is an Arch Linux derivative for penetration testers, security professionals and all-around Linux enthusiasts. Thi...
wpbf - WordPress Brute Force
The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and rel...
Automater v2.0 - URL/Domain, IP Address, and Md5 Hash OSINT Tool
Automater is a URL/Domain, IP Address, and Md5 Hash OSINT tool aimed at making the analysis process easier for intrusion Analysts. Given a ...
Windows Autologin Password Dumper & Manager v2.0
Windows Autologin Password is the free command-line tool to quickly dump and manage the Windows Automatic Logon Password. Automatic Logon ...
Hooker - Automated Dynamic Analysis of Android Applications
Hooker is an opensource project for dynamic analysis of Android applications. This project provides various tools and applications that ca...
Passive Spider - Information Gathering from Search Engine Tool
Passive Spider uses search engines (currently only Bing supported) to find interesting information about a target domain. INSTALL git clone ...
YASAT - Yet Another Stupid Audit Tool
YASAT (Yet Another Stupid Audit Tool) is a simple stupid audit tool. Its goal is to be as simple as possible with minimum binary dependencie...
HashMyFiles - Calculate MD5/SHA1/CRC32 hashes of your files
HashMyFiles is small utility that allows you to calculate the MD5 and SHA1 hashes of one or more files in your system. You can easily copy ...
Shellter - A Dynamic ShellCode Injector
Shellter is a dynamic shellcode injection tool, and probably the first dynamic PE infector ever created. It can be used in order to inject ...
PAExec - The Redistributable PsExec (Launch Remote Windows Apps)
PAExec lets you launch Windows programs on remote Windows computers without needing to install software on the remote computer first. For ...
DarunGrim - A Patch Analysis and Binary Diffing Tool
DarunGrim is a binary diffing tool. DarunGrim is a free diffing tool which provides binary diffing functionality. Binary diffing is a powerf...
XSSYA - Cross Site Scripting Scanner & Vulnerability Confirmation
XSSYA work by execute the payload encoded to bypass Web Application Firewall which is the first method request and response if it respond 2...
Nosql-Exploitation-Framework - A FrameWork For NoSQL Scanning and Exploitation Framework
A FrameWork For NoSQL Scanning, Enumeration and Exploitation. NoSQL Databases are schema less databases. They were invented to store data ea...
Antak WebShell - A webshell which utilizes PowerShell
Antak is a webshell written in C#.Net which utilizes powershell. Antak is a part of Nishang and updates could be found here: https://github...
Moo0 File Monitor - Monitor file access easily
Moo0 File Monitor lets you easily monitor the file access activities on your system. Have you ever wondered what's going on with your d...
OWASP Mantra Security Toolkit - Browser Based Security Framework
OWASP Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration ...
Xenotix xBOT - A Cross Platform PoC Bot that abuse certain Google Services to implement it's C&C
Xenotix xBOT is a proof of concept cross platform (Linux, Windows, Mac) bot written in Python that abuse certain Google Services to impleme...
Snoopy - A distributed tracking and data interception framework
Snoopy is a distributed tracking and profiling framework which can perform interesting tracking and profiling of mobile users through the...
sb0x-project - A simple and Lightweight framework for Penetration testing
sb0x-project is A Lightweight Framework for PenTesting Written in Python Platforms: Linux BSD "Or Unix System" Download sb0x
Bing Heartbleed Scan - Tool to extract sites from a bing search and check if are vulnerables
A simple scan in bash to extract sites from a bing search and check if is vulnerable. Download Bing Heartbleed Scan
ByWaf - Web Application Penetration Testing Framework
ByWaf is a Web Application Penetration Testing Framework (WAPTF). It consists of a command-line interpreter and a set of plugins. This pr...
WebCookiesSniffer - Capture Web site cookies
WebCookiesSniffer is a packet sniffer tool that captures all Web site cookies sent between the Web browser and the Web server and displays t...
Webfwlog - Firewall Log Analyzer
Webfwlog is a flexible web-based firewall log analyzer and reporting tool. It supports standard system logs for linux, FreeBSD, OpenBSD, ...