Commit Graph

584 Commits

Author SHA1 Message Date
fabacab
d5bc3fcc83
New section for privesc tools, remove trailing whitespace. 2020-08-23 15:17:00 -04:00
nil0x42
bd4e52fab6 Add duplicut, C Tool to remove duplicates, without changing the order, and without getting OOM on huge wordlists.
duplicut is a C tool, highly optimized for a single task:
Removing duplicate entries from a wordlist, without changing the order, and without getting OOM on huge wordlists whose size exceeds available memory.

It's trivial to remove duplicates by sorting, but duplicut is the only tool capable of removing them without changing the order, to assist the creation of statictically optimized wordlists for password cracking purposes.
2020-08-23 15:09:52 -04:00
Samar Dhwoj Acharya
aabcdb14fe
Merge pull request #382 from brandonskerritt/master
Add Ciphey
2020-08-23 09:47:43 -05:00
Samar Dhwoj Acharya
cbed3521aa
update description to be more accurate 2020-08-23 09:27:23 -05:00
smackhack
e43bea4cc4
Add RustScan 2020-08-04 16:29:19 -07:00
Brandon
641d7af6d6
Add Ciphey
https://github.com/Ciphey/Ciphey
2020-08-04 23:24:16 +01:00
fabacab
29347c4a99
Add Google's Tsunami security scanner to Network Tools list. 2020-07-15 18:05:16 -04:00
Philip Barwikowski
86f8df1b6f
Update link to shellphish
Shellphish should either be removed or the link updated as the original repository is not available anymore
2020-07-08 14:59:01 +02:00
fabacab
918ed510f0
Add Inveigh, a modern PowerShell/C# version of Responder. 2020-05-14 19:31:12 -04:00
Meitar M
a30bb4d017
Add Rubeus, a Kerberos ticket cracker for Windows environments. 2020-05-14 17:05:32 -04:00
Shao Qi Xu
05aa966c20 Update Asia Conferences and Event 2020-05-07 10:43:51 +08:00
Meitar M
44c7ee9961
Alphabetize and tweak description for LFISuite. 2020-05-04 14:29:37 -04:00
socketz
3f5f2edefb
Modified Kadabra to LFISuite
It's very old but the author points to LFISuite
2020-05-04 12:07:49 +02:00
Joep van Gassel
a35c6218e6
Update README.md
wrong URL for kali docker
2020-04-23 07:41:29 +02:00
Meitar M
37c63af3a5
Add TRRespass fuzzer, a DRAM side-channel (rowhammer) fuzzer suite. 2020-04-20 15:04:23 -04:00
Meitar M
4c52d39bd1
Remove in-browser LOIC link (site no longer exists), fix LOIC line item. 2020-04-06 17:09:48 -04:00
0xACAB
8f4e5dabba
Merge pull request #363 from meitar/fridax
Rephrase Fridax, alphabetize.
2020-04-06 17:08:11 -04:00
0xACAB
f64f87ac08
Merge pull request #362 from meitar/ghsa
Add GitHub Security Advisories database.
2020-04-06 17:07:47 -04:00
Meitar M
129823c510
Rephrase Fridax, alphabetize. 2020-04-06 17:04:31 -04:00
Meitar M
987a0e6d9a
Add GitHub Security Advisories database. 2020-04-06 16:57:45 -04:00
Tijme Gommers
6c5abf2344
Add Fridax to the Reverse Engineering Tools.
https://github.com/NorthwaveNL/fridax
2020-04-06 12:59:01 +02:00
0xACAB
64e7782611
Merge pull request #359 from meitar/gocrack
Add GoCrack, Web frontend for distributed hashcat cracking jobs.
2020-04-05 14:50:31 -04:00
0xACAB
40d117028c
Add GoCrack, Web frontend for distributed hashcat cracking jobs. 2020-04-04 11:53:31 -04:00
Meitar M
772a0ed63c
Add Tavis Ormandy's Windows ctftool exploration/exploit tool. 2020-03-24 22:24:31 -04:00
Meitar M
9a79d68079
Remove deprected Evilginx, leave only its successor, Evilginx2. 2020-03-18 21:31:13 -04:00
Samar Dhwoj Acharya
3886a7ba2c
Merge pull request #355 from meitar/ncrack
Add Ncrack, an `nmap`-like authentication cracking tool.
2020-03-17 20:31:47 -05:00
Meitar M
b89cf272ca
Closes #288: Props to @lMaxTl.
This is a new commit in the interests in speed and brevity; the original
PR contained numerous extranneous commits. I asked the original
submitter to clean it a little bit, but they never responded, and now
their commit history requires quite a bit of conflict resolution before
it will merge cleanly. I'm taking the initiative to re-do their work in
a single, new commit just to have it done.
2020-03-16 19:40:06 -04:00
Meitar M
ba368240e5
Add Ncrack, an nmap-like authentication cracking tool. 2020-03-16 19:27:59 -04:00
Meitar M
f1d061e61d
OWASP ZAP has a new homepage; update its URL on this list. 2020-03-15 18:36:47 -04:00
Meitar M
9e17d5bff1
Remove DWF; the project ended due to lack of community involvement. 2020-03-13 20:20:19 -04:00
Meitar M
90b5156caa
Add PSKracker, a fast WPA/WPA2/WPS cracking tool for pentesters. 2020-03-13 20:14:42 -04:00
Meitar M
312d7019d7
Add Snyk's vuln DB. 2020-02-27 13:50:03 -05:00
Meitar M
60ff773d44
Closes #345: Use original repository for RsaCtfTool. 2020-02-26 15:58:10 -05:00
Meitar M
92a965fd4c
Add Postenum, a simple privesc suggester for GNU/Linux. 2020-02-23 19:10:27 -05:00
Meitar M
d90ab4440d
Add SGX-Step, a framework for attacking secure enclaves via side channels. 2020-02-20 03:07:37 -05:00
Meitar M
f7178b07d3
Add Thunderclap, an open source DMA and IOMMU auditing platform. 2020-02-10 14:27:44 -05:00
Meitar M
53bd2a5815
Remove numerous whitelisted URLs since they now redirect safely. 2020-01-26 21:34:44 -05:00
Meitar M
b5a6fba17b
Fix HTTP 404 Not Found errors, remove Intel Techniques tools.
The Intel Techniques online tools collection no longer exists and has
been removed by the author.
2020-01-26 21:13:32 -05:00
Meitar M
0ccb2304fd
Add subbrute, move AQUATONE and OWASP Amass to net recon section.
Both AQUATONE and OWASP Amass are not actually direct network device
discovery tools, but OSINT and DNS-specific mass querying tools. A
domain (or subdomain) is not technicall a network device, and thus I
feel like these tools were mis-categorized by being grouped with actual
network device discovery search engines like Shodan.
2020-01-26 20:56:34 -05:00
Meitar M
b9829cf461
Move Dradis, Lair to Collaboration Tools section. Remove KarmaHostage. 2020-01-16 15:07:16 -05:00
Quinten De Swaef
3890acf0af
Update README.md 2020-01-15 16:03:52 +01:00
Samar Dhwoj Acharya
deda18c6dd
Merge pull request #333 from Dormidera/patch-1
conference: add honeycon.eu
2019-11-26 13:45:32 -06:00
Meitar M
8631ba01b2
Remove old, unmaintained tools shellsploit and Dripcap. 2019-11-26 12:06:42 -05:00
Meitar M
14c03986d8
Add Skiptracer, OSINT scraping framework that avoids data-for-pay needs. 2019-11-26 11:28:33 -05:00
1024Megas
3ea7fac64d
Update README.md 2019-11-25 14:34:06 +01:00
Meitar M
33aa9686ac
Start categorization of OSINT tools list. 2019-11-07 22:45:04 -05:00
Meitar M
4a722fbf64
Add two anonymity and two file format tools. 2019-11-06 13:58:59 -05:00
Meitar M
131b5eef40
Link to conference homepages instead of past year's events. 2019-11-03 23:28:08 -05:00
Meitar M
ff9ab7b5de
Subcategorize "Conferences" section by continent. 2019-11-03 23:18:04 -05:00
Meitar M
a7abf275c4
Fix typo in hacker con name. 2019-11-03 15:48:37 -05:00
Samar Dhwoj Acharya
8de54d12cb
Merge pull request #326 from meitar/hacker-cons
Add two NYC-based hacker cons.
2019-11-03 14:46:29 -06:00
Meitar M
36a30d3738
Add two NYC-based hacker cons. 2019-11-03 15:43:27 -05:00
Meitar M
7533e7dde8 Merge branch 'yar' of https://github.com/aubrel/awesome-pentest into aubrel-yar 2019-11-03 15:37:31 -05:00
aubrel
c04c853ae3
Added Yar, an OSINT tool. 2019-11-03 09:23:40 -05:00
Samar Dhwoj Acharya
e8db1b5ff4
Merge pull request #321 from hangmansROP/patch-1
Add AWS Tool Arsenal
2019-11-03 00:28:13 -05:00
Samar Dhwoj Acharya
7e836fbfe6
Merge pull request #322 from jimender2/jimender2-patch-1-Cyber-Summit
Add National Cyber Summit Conference to the Conference List
2019-11-03 00:27:34 -05:00
Samar Dhwoj Acharya
95cd5cbd9c
Merge pull request #323 from ducksecops/patch-1
Update README.md
2019-11-03 00:26:30 -05:00
Meitar M
c6e1712b67
Update link for dos-over-tor tool. 2019-11-02 22:28:37 -04:00
Meitar M
05a5198fa2
Add SIET, tool for manipulating insecure Cisco Smart Install switches. 2019-11-02 22:20:03 -04:00
ducksecops
9e86c5e764
Update README.md
Co-Authored-By: Samar Dhwoj Acharya <coolsamar207@gmail.com>
2019-10-31 23:53:00 +00:00
ducksecops
7f7a7748c7
Update README.md
Co-Authored-By: Samar Dhwoj Acharya <coolsamar207@gmail.com>
2019-10-31 23:52:43 +00:00
ducksecops
e93ae412de
Update README.md
Added steelcon to list of conference for UK readers and also the excellent collection of sessions recorded by cooper at a range of different security conferences.
2019-10-29 23:06:48 +00:00
Jonathan Meredith
43e2c99ad8
Add National Cyber Summit Conference to the List 2019-10-17 19:34:53 -04:00
hangmansROP
694b0b698d
Add AWS Tool Arsenal
Recommend this list of AWS tools for offensive and defensive teams.
2019-10-17 20:36:30 +01:00
Meitar M
f9a63461b1
Fix URL for CarolinaCon. 2019-10-12 23:21:53 -04:00
Meitar M
4d02410ee6
Add hate_crack, a wrapper for Hashcat to automate cracking methods. 2019-10-12 22:06:28 -04:00
Meitar M
761465cba4
Add pwnagotchi, an "AI" that augments BetterCAP for Wi-Fi cracking. 2019-09-26 12:29:25 -04:00
Samar Dhwoj Acharya
ef6693cb33
Update README.md 2019-09-23 10:05:51 -05:00
SecureThisShit
95811e5046
Add WinPwn, Internal Penetrationtest Script 2019-09-21 21:50:07 +02:00
Meitar M
37235ae8eb
Add dnscat2, a command and control channel over the DNS protocol. 2019-09-21 00:11:24 -04:00
Meitar M
bcd02be15e
Update URL for recon-ng, which has moved to GitHub from BitBucket. 2019-09-12 21:28:20 -04:00
Meitar M
29bb5a5464
Add pivotsuite, a portable, standalone client-server pivot toolkit. 2019-09-12 21:20:48 -04:00
Meitar M
49db1f671c
Add dorkbot, modular CLI tool to find vulnerabilities based on SERPs. 2019-09-04 12:59:59 -04:00
Meitar M
c5208dbb01
Add CarbonCopy code signing spoofer tool used for AV evasion. 2019-08-29 14:56:11 -04:00
Meitar M
1095a01786
Update URL for mitmproxy. 2019-08-10 21:33:12 -04:00
Meitar M
2b22b33b56
Update URLs for No Starch Press (www.nostarch.com -> nostarch.com). 2019-08-07 16:15:16 -04:00
Meitar M
559d7d9001
Add TrevorC2, a masked C2 and data exfil tool using "legitimate" HTTP. 2019-08-07 16:10:33 -04:00
Meitar M
3f96c213e8
Update the URL for Immunity Debugger. 2019-08-05 00:20:53 -04:00
Meitar M
e7f89e9b85
Add new section for Android-based software, and three tools to it. 2019-08-05 00:10:32 -04:00
Meitar M
6a964e150f
Add WhatBreach, script to find database breaches based on email address. 2019-07-30 15:46:29 -04:00
Meitar M
f656127663
Move hping3, pig, and scapy to new, more specific section. 2019-07-26 14:29:24 -04:00
Meitar M
365786a014
Add TraceWrangler, a powerful pcap and pcapng file editor. 2019-07-26 14:26:39 -04:00
Meitar M
fb35ce1de1
Add new section ("Network Packet Replay…") with three tools. 2019-07-26 14:19:22 -04:00
Meitar M
62066aa565
Add Vulmon.com, a vulnerability search engine and database. 2019-07-24 17:27:53 -04:00
Meitar M
980c85e77c
Add sylkie, replace ampersand with full word and. 2019-07-16 14:22:27 -04:00
Meitar M
0943194460
Reword the description of cwe_checker for clarity and style conformance. 2019-07-10 18:55:01 -04:00
Thomas Barabosch
49f8be6734
Added cwe_checker
cwe_checker finds vulnerable patterns in binary executables
2019-07-04 08:47:37 +02:00
Meitar M
a65a9a07d3
Merge pull request #296 from meitar/master
Add celerystalk.
2019-05-07 18:11:27 -04:00
Meitar M
0307260feb
Add celerystalk. 2019-05-07 18:06:45 -04:00
Jake Jarvis
d4875dbe93
Add Shodan search queries list 2019-04-26 09:49:45 -04:00
Meitar M
89b6134ff6
Closes #293: Removes OSINT-SPY. 2019-04-10 12:59:01 -04:00
Meitar M
52a2c73e72
Add "See also" link to another good ICS security list. 2019-04-08 11:34:44 -04:00
Meitar M
2bf587dcad
Add Covenant, fix grammar, move Commando VM to Windows section. 2019-04-03 00:15:44 -04:00
Opentuned
da73b5a93f
Adding Command VM
Saw an article about a new windows VM for red team testing that might be useful...
2019-04-02 09:05:09 +01:00
Meitar M
52db8f18d3
Move oregano to the MITM tools section, alphabetize the Network Tools. 2019-03-29 03:48:11 -04:00
Meitar M
1265b15c53
This commit proposes a massive reorganization of the list categories.
In this commit, the primary change is alphabetizing both the table of
contents as well as the line items for each category. This is done in
order to make it easier for readers to locate their desired information
with their naked eyes. The list is long, and as such should at least
have a consistent scheme for ordering the items within it.
Alphabetization also side-steps the issue of favoritism since the sort
order is lexicographical.

Additionally, this commit changes several headings to more clearly
describe its contents. For example, most of the subheadings under the
"Online Resources" category have been renamed to "Online [Topic]
Resources", where "[Topic]" was the old heading. Similarly, I split the
Docker Container section into two, one for distros and for tools, since
the previous section muddled those two distinct categories of containers
together. (The main list does not do this, so that was anomalous.)

Another major change is the removal of the top-level "Tools" section.
This section had clearly become a catch-all and also prevented us from
being able to use sub-headings to more intelligently categorize the
individual tools without running afoul of the Awesome List guidelines
that restrict us to one level of subheading per category. This continues
the work that was begun in #290 of moving, e.g., the "Network Tools"
section to its own top-level heading.

Further, I have removed several tools that are strictly either forensics
or malware analysis utilities, such as cuckoo sandbox. I feel that this
more accurately aligns this list with its stated purpose: Penetration
Testing. While related, listing forensics of malware analysis tools that
cannot also be used for vulnerability discovery or exploit development
seems like an invitation to suffer from scope creep. Instead of listing
those tools directly, I have therefore added "See also" lines with links
to more appropriate places (often other Awesome lists) for their topic.

Finally, several links were upgraded from their listed HTTP to HTTPS
versions, after I confirmed that those Web servers did indeed respond to
TLS requests. I also removed `www.defcon.org` from the `awesome_bot`'s
white list, since that link works just fine for me as well.
2019-03-28 15:47:23 -04:00
ZJ
19a96f2e22
regroup some of the netowrk tools, based on awesome-lint headers 2019-03-27 13:06:58 -04:00
ZJ
6f072af3ad
awesome-lint: reformat docker-pull links 2019-03-27 12:56:59 -04:00
ZJ
2dbb9edc6e
awesome-lint: fix header levels 2019-03-27 12:37:31 -04:00
Meitar M
c1b2d06543
Re-add ZoomEye.org to whitelist (403'ing again), remove 404'd ExploitPack link. 2019-03-19 00:09:40 -04:00