benpratt

benpratt's Stars

• smicallef/spiderfoot

  SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

  Language:Python12.7k3675902.2k

• librespeed/speedtest

  Self-hosted Speed Test for HTML5 and more. Easy setup, examples, configurable, mobile friendly. Supports PHP, Node, Multiple servers, and more

  Language:PHP12k2644652.2k

• future-architect/vuls

  Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

  Language:Go10.9k3265921.2k

• aboul3la/Sublist3r

  Fast subdomains enumeration tool for penetration testers

  Language:Python9.7k2312162.1k

• GreyDGL/PentestGPT

  A GPT-empowered penetration testing tool

  Language:Python7k105132839

• infobyte/faraday

  Open Source Vulnerability Management Platform

  Language:Python4.9k253428894

• guelfoweb/knock

  Knock Subdomain Scan

  Language:Python3.8k13586856

• scipag/vulscan

  Advanced vulnerability scanning with Nmap NSE

  Language:Lua3.4k1350664

• vulnersCom/nmap-vulners

  NSE script based on Vulners.com API

  Language:Lua3.2k13551544

• mitre-attack/attack-navigator

  Web app that provides basic navigation and annotation of ATT&CK matrices

  Language:TypeScript2k94358585

• digininja/CeWL

  CeWL is a Custom Word List Generator

  Language:Ruby1.9k4167255

• ustayready/fireprox

  AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

  Language:Python1.9k3236264

• ine-labs/AWSGoat

  AWSGoat : A Damn Vulnerable AWS Infrastructure

  Language:PHP1.7k37251k

• dafthack/MFASweep

  A tool for checking if MFA is enabled on multiple Microsoft Services

  Language:PowerShell1.3k258177

• blacklanternsecurity/TREVORspray

  TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

  Language:Python1k1728146

• insidetrust/statistically-likely-usernames

  Wordlists for creating statistically likely username lists for use in password attacks and security testing

  907134128

• dafthack/MSOLSpray

  A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

  Language:PowerShell889233167

• leoloobeek/LAPSToolkit

  Tool to audit and attack LAPS environments

  Language:PowerShell798181117

• ine-labs/AzureGoat

  AzureGoat : A Damn Vulnerable Azure Infrastructure

  Language:Python755119166

• iknowjason/PurpleCloud

  A little tool to play with Azure Identity - Azure Active Directory lab creation tool

  Language:Python497252386

• rfidtool/ESP-RFID-Tool

  A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing installation. Provides access to a web based interface using WiFi in AP or Client mode. Will work with nearly all devices that contain a standard 5V Wiegand interface. Primary target group is 26-37bit HID Cards. Similar to the Tastic RFID Thief, Blekey, and ESPKey.

  Language:C++494371794

• MarkoH17/Spray365

  Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

  Language:Python3378957

• leoloobeek/COMProxy

  PoC for proxying COM objects when hijacking

  Language:C++1979030

• leafcloudhq/echoip

  IP address lookup service

  Language:Go1896029

• p3hndrx/B-B-Shuffle

  Dashboard for conducting Backdoors and Breaches sessions over Zoom.

  Language:JavaScript1087846

• ImpostorKeanu/BruteLoops

  Protocol agnostic online password guessing API.

  Language:Python797313

• alex14324/Turbolist3r

  Language:Python413111

• eNBeWe/Safe-Autodialer

  Language:C++14106

• RiverGumSecurity/PythonReferenceSheet

  61

• ad0nis/tools

  Operational toolset utilizing git's submodule feature

  Language:HTML1200