tjsquishface

tjsquishface's Stars

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python61.1k1.8k014.6k

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP58.2k1.9k26723.9k

• rapid7/metasploit-framework

  Metasploit Framework

  Language:Ruby34.1k2.1k6.1k14k

• sqlmapproject/sqlmap

  Automatic SQL injection and database takeover tool

  Language:Python32.4k1.1k5.2k5.7k

• enaqx/awesome-pentest

  A collection of awesome penetration testing resources, tools and other shiny things

  21.7k1.2k394.5k

• gentilkiwi/mimikatz

  A little tool to play with Windows security

  Language:C19.4k9163833.7k

• PowerShellMafia/PowerSploit

  PowerSploit - A PowerShell Post-Exploitation Framework

  Language:PowerShell11.9k7811884.6k

• beefproject/beef

  The Browser Exploitation Framework Project

  Language:JavaScript9.8k4442.2k2.2k

• apenwarr/sshuttle

  Wrong project! You should head over to http://github.com/sshuttle/sshuttle

  Language:Python8.9k3280628

• byt3bl33d3r/CrackMapExec

  A swiss army knife for pentesting networks

  Language:Python8.4k3065581.6k

• hslatman/awesome-threat-intelligence

  A curated list of Awesome Threat Intelligence resources

  8k562311.5k

• meirwah/awesome-incident-response

  A curated list of tools for incident response

  7.6k461141.5k

• misterch0c/shadowbroker

  The Shadow Brokers "Lost In Translation" leak

  Language:Python4.2k43826507

• huntergregal/mimipenguin

  A tool to dump the login password from the current linux user

  Language:C3.8k15231633

• netbiosX/Checklists

  Red Teaming & Pentesting checklists for various engagements

  2.5k771508

• joaomatosf/jexboss

  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

  Language:Python2.4k9560638

• sensepost/mana

  *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM

  Language:HTML1.1k13794275

• GhostPack/KeeThief

  Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

  Language:C#926341150

• EnableSecurity/sipvicious

  SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

  Language:Python8904358159

• Kevin-Robertson/Tater

  Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec

  Language:PowerShell448266116

• tatanus/SPF

  SpeedPhishing Framework

  Language:Python4374025134

• darkoperator/Posh-SecMod

  PowerShell Module with Security cmdlets for security work

  Language:PowerShell43550686

• SpiderLabs/ikeforce

  Language:Python235251172

• SmeegeSec/HashTag

  Password Hash Identification

  Language:Python21724553

• percx/Praeda

  Language:Perl18723140

• praetorian-inc/gladius

  Automated Responder/secretsdump.py cracking

  Language:Python18121545

• WebBreacher/untappdScraper

  Script to scrape untappd.com content

  Language:Python144171325

• NotSoSecure/docker_fetch

  Data extraction tool for Docker Registry API

  Language:Python1234037

• cloudnull/turbolift

  If you have found yourself in a situation where you needed to upload, download, delete, modify, or checkout a whole bunch of files/objects, this is what you are looking for. Turbolift is a client which was designed to access Cloud Files - Swift - quickly.

  Language:Python113138034

• actuated/sslscanalyzer

  Shell script for converting an input file containing one or more sslscan results into HTML tables.

  Language:Shell13302