448 Commits

Author	SHA1	Message	Date
Samar Dhwoj Acharya	5f7d5482d1	Merge pull request #264 from kpcyrd/patch-1 ... Add badtouch, sniffglue, rshijack and boxxy	2018-11-24 12:58:32 -06:00
kpcyrd	9437337b63	Add badtouch, sniffglue, rshijack and boxxy	2018-11-23 09:03:29 +01:00
n00py	6aa80c89ae	Adding Hwacha to GNU/Linux utilities ... Hwacha is a post-exploitation (credentials or keys obtained) tool that uses SSH to execute payloads or collect artifacts from one or multiple hosts at a time.	2018-11-18 20:24:36 +09:00
Samar Dhwoj Acharya	410f64c957	Merge pull request #262 from meitar/periods ... Style guide conformance fixes, mostly adding periods to end of lines.	2018-11-10 17:27:07 -06:00
Samar Dhwoj Acharya	3bfdb24a10	Merge pull request #261 from meitar/dwf ... Add Distributed Weakness Filing, a researcher-run distributed CNA.	2018-11-10 17:26:38 -06:00
Beyar	ab16921114	Update README.md ... Changed the link to their open-source project instead.	2018-11-10 21:55:35 +01:00
Meitar M	55323c516b	Style guide conformance fixes, mostly adding periods to end of lines.	2018-11-09 14:10:49 -05:00
Meitar M	b91c0fdd0c	Add Distributed Weakness Filing, a researcher-run distributed CNA.	2018-11-05 13:02:19 -05:00
Samar Dhwoj Acharya	500664df21	Merge branch 'master' into hak5-tools	2018-11-03 15:09:21 -05:00
Samar Dhwoj Acharya	a327e76a2d	Merge pull request #259 from meitar/ci-fixes ... Fix Travis CI build errors, largely due to stale links.	2018-11-03 15:07:27 -05:00
Samar Dhwoj Acharya	2165117198	Merge pull request #258 from meitar/at-commands ... Add "AT Commands" Python scripts for exploiting Android devices.	2018-11-03 15:07:07 -05:00
Samar Dhwoj Acharya	93ec5e7b67	Merge pull request #254 from HrushikeshK/master ... Add OS in Penetration Testing Distributions	2018-11-03 15:06:44 -05:00
Samar Dhwoj Acharya	a562c85830	Merge pull request #257 from meitar/certgraph ... Add CertGraph, crawl TLS certs for certificate alternative names.	2018-11-03 15:04:47 -05:00
Meitar M	d2d1e2d9ff	Add Bash Bunny and Packet Squirrel from Hak5. Closes #203.	2018-11-02 10:49:33 -04:00
Meitar M	3297075b7e	Fix Travis CI build errors, largely due to stale links. ... This commit fixes numerous CI build issues related to stale or broken links. These include: * Removal of Zoom username enumeration tool, covered by WPScan anyway. * Removal of old Google dork database that is unmaintained/has vanished. * Removal of `OSVDB.org` zone, which no longer resolves via DNS. * Fix link to NoSQLmap tool (domain expired, use GitHub.com link now). * Update link to Social Engineering in IT book from legacy URL. * Update link to OWASP's AppSecUSA conference; now uses second-level domain. Further, this commit simplifies the `.travis.yml` file in order to use a plainer (more standard) certificates bundle. Two URLs have been added to the whitelist: `www.shodan.io`, which returns a 403 Forbidden error when accessed by Awesome Bot, and `www.mhprofessional.com`, which generates an SSLv3 certificate validation error. Prior to this commit, a custom SSL certificate bundle was generated and then placed in the `/tmp` directory for use, but this is no longer required as the latest `ca-certificates` bundle shipped with Ubuntu contains the root certificates needed for the domains that once required this custom bundle to be used.	2018-11-01 14:48:34 -04:00
Meitar M	dcfc07e36b	Add "AT Commands" Python scripts for exploiting Android devices.	2018-11-01 14:22:08 -04:00
Meitar M	ccdba4d647	Add CertGraph, crawl TLS certs for certificate alternative names. ... This tool can connect to a domain over HTTP or SMTP, or search Certificate Transparency (CT) logs in order to create a directed graph that visualizes a domain's certificate's certificate alternative names. These are other domain names that the certificate can be used to authenticate, even if those domain names are not in public DNS records. Can be used as an OSINT investigative tool as a task in the reconnaisance phase of a pentesting engagement in order to easily discover additional targets.	2018-10-30 13:42:03 -04:00
Brainfuck	4592571df4	Update README.md	2018-10-24 14:07:13 +02:00
Meitar M	b60ae1b320	Add RegEx-DoS, an analyzer for regular expressions susceptible to DoS attacks.	2018-10-19 14:43:31 -04:00
HrushikeshK	cd27f6c85b	Add OS in Penetration Testing Distributions ... Add Android Tamer OS in Penetration Testing Distributions.	2018-10-08 12:26:09 +05:30
Meitar M	18fd39ab5c	Add some good hex editors for GNU/Linux: Bless, wxHexEditor, hexedit.	2018-10-01 15:20:56 -04:00
Meitar M	7b861e1f8a	Amass is now an official OWASP project. Add Python3 port of fierce.	2018-09-18 15:55:50 -04:00
Samar Dhwoj Acharya	1de7eb13ce	Merge branch 'master' into master	2018-09-18 14:42:47 -05:00
Jayson Grace	233d9596e3	Update WebGoat docker entry ... Add official WebGoat docker images - 7.1 (older and best-known by the security community) - 8.0 (newest release with numerous changes and revisions)	2018-09-10 10:03:20 -07:00
Meitar M	f5d3b0ff04	Fix the Docker for Penetration Testing section: punctuation, etc.	2018-09-06 13:47:24 -04:00
Meitar M	a7e3fdb18e	Fix the Pentesting Report Template. ... This commit removes items from the Pentesting Report Template section that are either not templates or have been removed from the source. Further, line items are updated to use meaningful descriptions and to follow the Awesome List style guides (capitalization and punctuation).	2018-09-06 13:44:59 -04:00
PHILEMON SUNDAY JOEL	5688f8dd1e	Added Awesome list ... Android Exploitation and Hacks	2018-08-23 10:17:23 +03:00
Samar Dhwoj Acharya	86b673b941	Merge pull request #246 from meitar/evilosx ... Add EvilOSX, a macOS RAT with several out-of-the-box exfil tools.	2018-08-08 16:54:39 -05:00
Meitar M	8b73e1251f	Add several new phishing and anonymity tools: ... * SocialFish, a social media phishing framework. * ShellPhish, a social media site cloner built on SocialFish. * dos-over-tor, a torifid DoS and stress test tool. * oregano, a MITM proxy that accepts direct Tor client requests.	2018-08-08 16:01:47 -04:00
Meitar M	306458f22e	Add EvilOSX, a macOS RAT with several out-of-the-box exfil tools.	2018-08-08 15:47:16 -04:00
Samar Dhwoj Acharya	c9c1df653f	Merge pull request #245 from meitar/scomdecrypt ... Add SCOMDecrypt, a tool to retrieve and decrypt stored RunAs creds.	2018-08-05 17:47:39 -05:00
Meitar M	07e6025a12	Add SCOMDecrypt, a tool to retrieve and decrypt stored RunAs creds.	2018-08-05 17:25:42 -04:00
Meitar M	e3c19c6d98	Add StegCracker, tool that brute forces steganographic data in files.	2018-08-05 17:10:22 -04:00
Florian Heuer	c88b19587d	Added Btfm book	2018-08-01 16:59:22 +02:00
Samar Dhwoj Acharya	16ccc45735	Merge pull request #240 from abhishekbundela/master ... Added pentestbox.	2018-07-31 19:48:37 -05:00
Samar Dhwoj Acharya	33dcacdde4	Update README.md	2018-07-31 19:48:15 -05:00
Samar Dhwoj Acharya	c77337ef0e	Merge pull request #241 from meitar/ruler ... Add Ruler, a tool to abuse client-side Outlook features to pwn Exchange.	2018-07-31 19:46:06 -05:00
Meitar M	081241efc6	Fix link for Bella, a post-exploitation agent for MacOS.	2018-07-31 17:17:00 -04:00
Meitar M	f0cba27bf0	Add Ruler, a tool to abuse client-side Outlook features to pwn Exchange.	2018-07-31 16:57:03 -04:00
Abhishek bundela	c14d026566	Added pentestbox.	2018-07-31 18:05:47 +05:30
Samar Dhwoj Acharya	e922b9da06	Merge pull request #239 from sundaysec/patch-2 ... Added MITMF	2018-07-30 12:51:31 -05:00
Samar Dhwoj Acharya	ecab02ad15	Merge pull request #238 from evyatarmeged/patch-1 ... Add Raccoon under Web Exploitation category	2018-07-30 12:50:45 -05:00
Samar Dhwoj Acharya	7ae9d0ed32	Merge pull request #235 from meitar/blueteam ... New awesome list: "Cybersecurity Blue Team"	2018-07-30 12:50:09 -05:00
PHILEMON SUNDAY JOEL	2a8c4a9a46	Added MITMF ... A Framework for Man-In-The-Middle attacks	2018-07-27 16:00:23 +03:00
Evyatar Meged	121e9f8872	Add Raccoon under Web Exploitation category ... I've added my new tool, Raccoon, to the Web Exploitation tools list https://github.com/evyatarmeged/Raccoon	2018-07-25 21:22:55 +03:00
Samar Dhwoj Acharya	ccc3b5182d	Merge pull request #237 from meitar/foca ... Add FOCA, an OSINT tool that uses three search engines.	2018-07-25 12:13:10 -05:00
Meitar M	60c06a2195	Add FOCA, an OSINT tool that uses three search engines.	2018-07-25 11:17:26 -04:00
Mahdi Makhdumi	a3e481f9a3	Update README.md	2018-07-25 13:42:50 +04:30
Mahdi Makhdumi	bb023efb72	Update README.md	2018-07-25 03:31:34 +04:30
Meitar M	71017d5b2a	New awesome list: "Cybersecurity Blue Team" ... This is a companion/sister list to awesome-pentest intended to provide the same level of quality resources for defenders rather than attackers.	2018-07-24 16:29:17 -04:00
Samar Dhwoj Acharya	d295832e00	Merge pull request #219 from meitar/cnnvd ... Add CNNVD to Vulnerability Databases section.	2018-07-24 14:48:59 -05:00
Samar Dhwoj Acharya	8bb617b7d7	Merge pull request #232 from C-Sto/patch-1 ... Add recursebuster	2018-07-24 14:44:16 -05:00
Samar Dhwoj Acharya	9a2fb6b9c7	Merge pull request #234 from sundaysec/patch-1 ... Added awesome tools	2018-07-24 14:42:29 -05:00
PHILEMON SUNDAY JOEL	eb69db65bf	Added awesome tools	2018-07-24 22:01:13 +03:00
Meitar M	9040ae7742	Add numerous tools: ... * ScanCannon - `masscan` and `nmap` multiplexer. * RID_ENUM - null session cycling attack for Windows user enumeration. * MailSniper - recon toolkit for MS Exchange (OWA/EWS) environments. * FiercePhish - full-fledged phishing campaign management platform. * Hunter.io - data broker providing internal company emails.	2018-07-23 15:44:49 -04:00
C_Sto	c7d8034e58	Add recursebuster ... https://github.com/c-sto/recursebuster Content discovery/recursive web directory bruteforcer	2018-07-15 14:50:40 +08:00
Florian Heuer	ceb54f3b7d	Update README.md ... Added VaaS SambaCry in Docker for Penetration Testing	2018-05-18 15:50:26 +02:00
Meitar M	12b9636a43	Add PacketTotal near Virus Total, a similar service for PCAP analysis.	2018-05-12 12:22:49 -04:00
Meitar M	fc8b826142	Add THC Hydra, a famous online network protocol password cracker.	2018-05-04 22:52:53 -04:00
Samar Dhwoj Acharya	25eac5cd9b	Merge pull request #222 from alichtman/master ... Removed Duplicate Kali Linux Docker Link	2018-04-30 09:13:50 -05:00
Meitar M	062e214ebf	Sub-categorize "Network Tools" section, clarify "Defense," add Iodine. ... Iodine is a DNS tunnel and useful for data exfiltration. The Network Tools section became very long, so I chunked it up with subcategories that pertain to the sort of tool. ("Network Tools" is itself somewhat vague, and multi-paradigm/multi-function tools were retained in the root of the category.) Finally, "Defense Evasion Tools" was renamed to "Anti-virus Evasion Tools" because every utility listed there was actually an AV or host-based defense evasion tool, which is distinct from the network evasion tools (exfiltration utilities) already listed in the "Network Tools" section, above. I believe this clarity will help a reader more quickly find the specific type of "defense evasion" utility they are actually looking for.	2018-04-14 15:27:31 -04:00
Meitar M	ee32aff5c3	Add Shellter dynamic shellcode injection tool (anti-virus evasion tool). (#226)	2018-04-12 17:55:18 -05:00
Meitar M	0929ede5d4	Add PCILeech, a Direct Memory Access attack tool. (#225)	2018-04-04 13:58:10 -05:00
Jeff Foley	46dacfca0a	Amass being added to the OSINT category (#224) ... * added Amass to the OSINT section of the list * updated the Amass entry within the OSINT category #223	2018-04-03 22:15:30 -05:00
alichtman	137e8649a0	removed duplicate Kali Linux docker command + link	2018-03-30 02:27:02 -05:00
Emily Ann	9eb26c04ff	Updated ... Added 2 tools to web vulnerability scanning category. Zoom- an advanced wordpress username enumerator with infinite scanning (much more powerful than the user name enumeration module in wpscan) Sqlmate- a friend of sqlmap that identifies sqli vulnerabilities based on given dork and website (optional)	2018-03-24 12:36:03 -07:00
Meitar M	ddfc8ae7fb	Add Memcrashed DRDoS (Distributed Reflection Denial of Service) attack tool.	2018-03-22 14:20:34 -04:00
Meitar M	dd8ef7a41c	Add CNNVD to Vulnerability Databases section.	2018-03-15 14:43:55 -04:00
Meitar M	3f44886460	Add AutoSploit, automated mass exploit tool.	2018-02-07 12:33:08 -05:00
Samar Dhwoj Acharya	6d5730f286	Update README.md	2018-01-19 17:26:53 -06:00
Nhoya	c3b318062a	Added gOSINT	2018-01-17 20:58:14 +01:00
Samar Dhwoj Acharya	69050dae22	Merge pull request #211 from eric-therond/master ... Add Progpilot	2018-01-10 22:17:30 -06:00
Samar Dhwoj Acharya	8d2c7a381a	Update README.md	2018-01-10 22:17:13 -06:00
Samar Dhwoj Acharya	ddde98e77f	Merge pull request #214 from meitar/crackpkcs12 ... Add crackpkcs12, a fast and multithreaded program to crack p12 (TLS) certs.	2018-01-10 22:16:44 -06:00
Samar Dhwoj Acharya	8b6377be1c	Merge pull request #212 from meitar/dnstwist ... Add dnstwist.	2018-01-10 22:16:20 -06:00
Meitar M	06aea06df5	Add crackpkcs12, a fast and multithreaded program to crack p12 (TLS) certs.	2018-01-10 20:51:06 -05:00
Meitar M	66cf701dd0	Add Hex Fiend.	2018-01-10 20:46:34 -05:00
Meitar M	e358a12bc8	Add dnstwist. ... This commit also conforms several other Network Tools line items to the Awesome List style guide (remove the introductory "A" preposition).	2018-01-08 12:52:27 -05:00
forgesecurity	43b703abc3	Add Progpilot	2017-12-16 14:54:29 +01:00
Seth	728f8bed4a	Remove Dead Link From List- "Hack3rcon" ... Remove line 562 "* [Hack3rCon](http://hack3rcon.org/) - Annual US hacker conference." because the link leads to a domain squatting website rather than an actual hacker conference.	2017-12-14 19:45:41 -05:00
Nick Raienko	d924f889f4	Various updates	2017-12-11 08:28:19 +02:00
Samar Dhwoj Acharya	3b0d0cba72	fix formatting	2017-11-28 10:57:00 -06:00
Asaf Hecht	a1a1644ed4	Adding ACLight tool ... Adding ACLight tool - A script for advanced discovery of sensitive Privileged Accounts - includes Shadow Admins	2017-11-28 15:31:11 +02:00
Samar Dhwoj Acharya	6e9599f57c	Merge pull request #199 from DzasterAbz/patch-3 ... Added Beelogger	2017-11-19 22:40:44 -06:00
techgaun	f30958f5b2	fix wappalyzer link	2017-11-19 22:33:45 -06:00
techgaun	5ff68d4970	add various tools suggested on #204 and fix link for sobelow ... closes #204	2017-11-19 22:31:45 -06:00
Meitar M	02becfc3a1	Add MITRE's ATT&CK, a superbly organized wiki of attack techniques.	2017-11-01 00:11:37 -04:00
Meitar M	4a3bf603c4	Add WiGLE.net, a huge OSINT database about wireless and Wi-Fi networks.	2017-10-31 00:20:22 -04:00
Jonathan Cran	a19f14ac88	Add intrigue to OSINT tools	2017-10-28 20:06:23 -07:00
Sai Abhiram	d9d72f8da1	Added Beelogger	2017-10-26 07:23:44 -04:00
Tijme Gommers	70057403e4	Added ACSTIS to Web Scanners ... [ACSTIS](https://github.com/tijme/angularjs-csti-scanner) helps you to scan certain web applications for AngularJS Client-Side Template Injection (sometimes referred to as CSTI, sandbox escape or sandbox bypass). It supports scanning a single request but also crawling the entire web application for the AngularJS CSTI vulnerability.	2017-10-25 16:54:52 +02:00
Michael	ba7909d764	Added NoSQL Map and VHostScan	2017-10-24 16:44:28 +10:00
Ryan Shipp	0ba0f8fc4f	Add awesome-yara to related lists	2017-10-17 15:16:51 -05:00
Meitar M	3b590db063	Add FireEye's new rVMI dynamic malware analysis tool.	2017-09-19 04:31:36 -04:00
Meitar M	c1030eeb07	Descriptions should have periods at the end for style guide compliance.	2017-09-19 04:31:13 -04:00
phocean	30a4d54e65	Update README.md	2017-09-15 09:45:32 +02:00
Rick Daalhuizen	1897b67ef9	Added New Hash Cracking Tools ... jwt-cracker: https://github.com/lmammino/jwt-cracker rar-crack: https://github.com/ziman/rarcrack bruteforce-wallet: https://github.com/glv2/bruteforce-wallet	2017-09-08 16:02:55 +02:00
Nick Raienko	d118a65d32	Put back netsparker header	2017-09-07 15:03:46 +03:00
Samar Dhwoj Acharya	c4d1da3874	Update README.md	2017-09-01 12:49:36 -05:00
sheimo	4943d9908c	Update README.md ... Added a Penetration Testing Report section with links to them respectively.	2017-08-31 16:58:30 -05:00