scanner

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

database apt exploit scanner hacking password poc brute-force pentest bypass crack privilege-escalation 0day getshell netscan

Updated Jul 28, 2022
PowerShell

yogeshojha / rengine

Sponsor

Star

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

osint scanner hacking penetration-testing bug-bounty infosec pentesting recon bugbounty scanning information-gathering rengine security-tools reconnaissance scanner-web recon-engine

Updated Aug 26, 2022
JavaScript

infoslack / awesome-web-hacking

Star

A list of web application security

security scanner hacking owasp penetration-testing vulnerability web-security pentesting vulnerabilities appsec metasploit web-hacking hacking-tools

Updated Jun 14, 2022

andresriancho / w3af

Star

w3af: web application attack and audit framework, the open source web vulnerability scanner.

security scanner sql-injection appsec cross-site-scripting

Updated Mar 11, 2022
Python

urbanadventurer / WhatWeb

Star

Next generation web scanner

Updated Aug 12, 2022
Ruby

yaklang / yakit

Star

Cyber Security ALL-IN-ONE Platform

golang security exploit scanner hacking pentest burpsuite blueteam redteam hacking-tools redteam-tools

Updated Aug 26, 2022
TypeScript

elceef / dnstwist

Star

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dns osint scanner phishing domains fuzzing threat-hunting typosquatting threat-intelligence homograph-attack idn

Updated Aug 22, 2022
Python

k8gege / Ladon

Star

大型内网渗透扫描器&Cobalt Strike，Ladon9.1.8内置160个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

security tools hack exploit scanner hacking password poc brute-force pentest portscan security-scanner exp security-tools ladon ipscanner getshell netscan

Updated Aug 24, 2022
C#

ysrc / xunfeng

Star

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

security security-audit scanner exploits infosec pentesting vulnerability-detection vulnerability-scanners vulnerability-assessment

Updated Mar 16, 2021
Python

Arachni / arachni

Star

Web Application Security Scanner Framework

javascript ruby crawler security-audit modular hack dom analysis scanner detection hacking xss audit web-application penetration-testing sql-injection vulnerability-detection arachni scanners

Updated May 29, 2022
Ruby

RetireJS / retire.js

Star

scanner detecting the use of JavaScript libraries with known vulnerabilities

javascript chrome-extension security scanner grunt-plugins firefox-extension build-tool vulnerabilities software-composition-analysis vulnerable-libraries insecure-libraries

Updated Aug 24, 2022
JavaScript

six2dez / reconftw

Sponsor

Star

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities