C4rt's Stars
psf/requests
A simple, yet elegant, HTTP library.
rapid7/metasploit-framework
Metasploit Framework
PowerShellMafia/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
openwall/john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
wireshark/wireshark
Read-only mirror of Wireshark's Git repository at https://gitlab.com/wireshark/wireshark. ⚠️ GitHub won't let us disable pull requests. ⚠️ THEY WILL BE IGNORED HERE ⚠️ Upload them at GitLab instead.
cuckoosandbox/cuckoo
Cuckoo Sandbox is an automated dynamic malware analysis system
google/grr
GRR Rapid Response: remote live forensics for incident response
ivre/ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
google/rekall
Rekall Memory Forensic Framework
Mysterie/uncompyle2
uncompyle2
darkoperator/Metasploit-Plugins
Plugins for Metasploit Framework
Laurelai/decompile-dump
Partial stuxnet source decompiled with hexrays, if anyone has better decompile tools feel free to contribute better versions.
bonsaiviking/NfSpy
ID-spoofing NFS client
WithSecureOpenSource/mittn
Mittn: Security test tool runner for test automation in CI
rlane/rbvmomi
Ruby interface to the VMware vSphere API. vmware/rbvmomi is the official repo.
SpiderLabs/jboss-autopwn
A JBoss script for obtaining remote shell access
ANSSI-FR/AD-permissions
Active Directory permissions (ACL/ACE) auditing tools
wpscanteam/CMSScanner
CMS Scanner Framework
carnal0wnage/Metasploit-Code
Metasploit modules that didn't make it into trunk for some reason or the other
mubix/Not-In-Pentesting-Class
The Dirty Secrets They Didn't Teach You In Pentesting Class
bdamele/miscellaneous
Miscellaneous tools and patches that I have written/hacked/forked over the years
jedisct1/6Jack
A framework for analyzing/testing/fuzzing network applications.
Oneiroi/sysadmin
Originally an all encompassing helper script, more now a library of scripts in bash and python to aid in Systems Administration tasks and extend functionality.
Oneiroi/PenTesting
A collection of scripts and tools I have authored to aid in Pentesting, provided under GNUv3, NOTE: I am not liable if you use them for illegal purposes, these scripts should only be used on your own systems or systems where you have express written consent from the owner.
iriusrisk/resty-burp
REST/JSON interface to Burp Suite
SpiderLabs/deface
A Java Server Faces (JSF) testing tool for decoding view state and creating view state attack vectors.
v-p-b/MSF-Addons
Modules, Scripts, Plugins for the Metasploit Framework
tomrittervg/separator-oracle
wireghoul/Jason
Tools for butchering password lists and passwords
mwielgoszewski/HTTPCacheTester
Test HTTP cache directives for various file types