pentesting · GitHub Topics

#夺旗赛 (CTF) 和网络安全资源#sherlock 是一个社工查询工具，能从上百个社交网站中检索指定 username 的账号是否存在

OSINT reconnaissance Linux 命令行界面 sherlock Python redteam 工具 information-gathering Hacktoberfest Cybersecurity cti forensics pentesting

Python 66.06 k

1 个月前

sqlmapproject / sqlmap

#安全#sqlmap 是一个开源的渗透测试工具，可以用来自动化的检测，利用SQL注入漏洞，获取数据库服务器的权限。它具有功能强大的检测引擎,针对各种不同类型数据库的渗透测试的功能选项，包括获取数据库中存储的数据，访问操作系统文件甚至可以通过带外数据连接的方式执行操作系统命令。

sql-injection detection exploitation takeover Python 数据库 pentesting vulnerability-scanner sqlmap

Python 34.38 k

3 天前

bee-san / Ciphey

#夺旗赛 (CTF) 和网络安全资源#使用自然语言处理和人工智能以及一些全自动解密/解码/破解工具。

decryption 自然语言处理 Cryptography cipher 人工智能 ctf-tools ctf C++Python Hacking pentesting 深度神经网络 hashes cyberchef-magic encryptions encodings Hacktoberfest

Python 19.55 k

3 个月前

bee-san / RustScan

#端口扫描工具#🤖 一个现代的端口扫描器 🤖

安全 pentesting Hacking port scanning Network nmap Rust Docker Hacktoberfest

Rust 16.66 k

5 天前

smicallef / spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

footprinting OSINT threatintel Python Cybersecurity intelligence-gathering osint-reconnaissance pentesting threat-intelligence 安全 information-gathering cti osint-framework attacksurface osint-tool Hacking Reconnaissance

Python 14.61 k

6 个月前

sundowndev / hacker-roadmap

#新手入门#A collection of hacking tools, resources and references to practice ethical hacking.

Hacking hacking-tool penetration-testing 路线图框架 hacktools pentest web-hacking exploitation post-exploitation information-gathering pentesting 安全

14.25 k

2 年前

ffuf / ffuf

Fast web fuzzer written in Go

fuzzer pentesting Cybersecurity Web

Go 14.12 k

2 个月前

maurosoria / dirsearch

Web path scanner

fuzzer Fuzzing/Fuzz testing Python 安全 dirsearch Hacking pentesting penetration-testing Bug Bounty appsec wordlist hacking-tool Cybersecurity brute scanner enumeration pentest-tool red-teaming redteam

Python 13 k

3 天前

qeeqbox / social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

OSINT social-media analyzer username profile reconnaissance pentest information-gathering pentesting social-analyzer person-profile JavaScript Node.js Python 安全 analysis nodejs-cli 命令行界面 sosint

JavaScript 12.5 k

1 个月前

OWASP / owasp-mastg

#安卓#The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls...

mobile-app pentesting Android iOS runtime-analysis network-analysis static-analysis 逆向工程 dynamic-analysis mobile-security Hacking mstg mastg

Python 12.29 k

1 天前

OJ / gobuster

Gobuster是一款用于网站目录/文件、DNS、虚拟主机vhost暴力穷举的工具，使用Go编写

Go pentesting 工具 dns Web

Go 11.98 k

24 天前

juice-shop / juice-shop

#夺旗赛 (CTF) 和网络安全资源#OWASP Juice Shop：可能是最不安全的现代化，复杂的网站。用于漏洞学习目的，包含多种热门安全漏洞。

owasp JavaScript vulnerable Hacking application-security owasp-top-10 owasp-top-ten pentesting vulnapp appsec ctf Hacktoberfest 24pullrequests 安全

TypeScript 11.34 k

2 天前

vanhauser-thc / thc-hydra

hydra

penetration-testing password-cracker network-security hydra thc pentesting pentest pentest-tool brute-force brute-force-passwords bruteforce-attacks brute-force-attacks bruteforcing bruteforcer bruteforce password-cracking

C 10.5 k

4 天前

HackTricks-wiki / hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hacktricks pentesting Hacking peass

JavaScript 9.94 k

5 天前

infosecn1nja / Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

red-team Hacking Cybersecurity pentesting

9.59 k

2 个月前

1N3 / Sn1per

Attack Surface Management Platform

sn1per attack-surface Cybersecurity pentest-tool pentesting-tools pentest-scripts pentest-tools hacking-tools osint-tool osint-framework attacksurface penetration-testing pentesting 安全 attack-surface-management Hacking

Shell 8.81 k

12 天前

byt3bl33d3r / CrackMapExec

A swiss army knife for pentesting networks

Python active-directory pentesting Windows PowerShell networks

Python 8.77 k

2 年前

n1nj4sec / pupy

#安卓#Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

pupy Python remote-access post-exploitation pentesting Windows Linux Android rat Shell reverse-shell reflective-injection backdoor payload meterpreter remote-admin-tool

Python 8.73 k

1 年前

blacklanternsecurity / bbot

The recursive internet scanner for hackers. 🧡

Python 8.64 k

2 天前

OWASP / wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

best-practices guide owasp Bug Bounty penetration-testing pentesting application-security 安全 Hacktoberfest appsec Hacking

Dockerfile 8.04 k

9 天前