Commit Graph

596 Commits

Author SHA1 Message Date
fabacab
49cfdff19e
Fix redirecting links to Microsoft resources. 2020-08-23 15:43:07 -04:00
fabacab
c420b16390
Remove now-obsolete heading. 2020-08-23 15:37:15 -04:00
fabacab
11a21c2050
Consolidate Books sections, offload tangentially related topics. 2020-08-23 15:31:40 -04:00
fabacab
1eff0b8c08
Consolidate generic "OSINT Tools" section, fix ToC. 2020-08-23 15:17:01 -04:00
fabacab
52a8310da9
Collect shellcoding topics. 2020-08-23 15:17:01 -04:00
fabacab
384290ae8a
Consolidate various OSINT sections. 2020-08-23 15:17:01 -04:00
fabacab
685c7c91a4
Fix link for Paterva's Maltego tool; its new homepage is maltego.com. 2020-08-23 15:17:01 -04:00
fabacab
7b154ef4b2
Consoldiate sections, remove redundancies in Docker sections.
This commit consolidates the Social Engineering resources into a new
dedicated category for SE topics. It also replaces the Docker Containers
section entirely by removing redundant tools and creating a new
"Intentionally Vulnerable Systems" section in which Docker containers of
such setups are now placed. The thinking here is that it should not be
our responsibility to separately track Docker containers for attack
tools independently of the tool itself; we should only list the tool
itself and users can find a Docker image that packages it if they want.

This commit also continues the topical consolidation by moving books
about specifically Web exploitation techniques into a new subsection of
the pre-existing Web Exploitation section.
2020-08-23 15:17:01 -04:00
fabacab
2d67eb6528
Move privesc section to appropriate place, consolidate RE resources. 2020-08-23 15:17:01 -04:00
fabacab
3424cd0dce
Remove ShellPhish, it errors 404 and is unmaintained since 2018. 2020-08-23 15:17:00 -04:00
fabacab
43f8367e52
Fix more minor issues, also replace lock picking refs with other list.
This commit removes the various areas of the list containing information
about Lock Picking and replaces them with a single top-level section
that refers interested readers to the dedicated Awesome Lockpicking list
because that list contains all the information we had, and more.
2020-08-23 15:17:00 -04:00
fabacab
a4b46e319a
Reorganize some sprawling categories, fix a ToC link, heading levels.
This commit fixes several minor issues including the heading levels for
sections such as RE tools, and fixes a broken link to the Online Social
Engineering Resources section, and correctly alphabetizing sections.

It also begins the process of culling the rather uncatgorized "other
lists elsewhere" section by inserting "see also" links to those other
lists in the appropriate section of this Awesome List, as is standard
Awesome List practice.

Additionally, this commit reorganizes several tools into clearer
categories by creating subcategories (for Tor tools, for instance) or
moving subcategories to their own top-level categories (exfil tools).
2020-08-23 15:17:00 -04:00
fabacab
d5bc3fcc83
New section for privesc tools, remove trailing whitespace. 2020-08-23 15:17:00 -04:00
nil0x42
bd4e52fab6 Add duplicut, C Tool to remove duplicates, without changing the order, and without getting OOM on huge wordlists.
duplicut is a C tool, highly optimized for a single task:
Removing duplicate entries from a wordlist, without changing the order, and without getting OOM on huge wordlists whose size exceeds available memory.

It's trivial to remove duplicates by sorting, but duplicut is the only tool capable of removing them without changing the order, to assist the creation of statictically optimized wordlists for password cracking purposes.
2020-08-23 15:09:52 -04:00
Samar Dhwoj Acharya
aabcdb14fe
Merge pull request #382 from brandonskerritt/master
Add Ciphey
2020-08-23 09:47:43 -05:00
Samar Dhwoj Acharya
cbed3521aa
update description to be more accurate 2020-08-23 09:27:23 -05:00
smackhack
e43bea4cc4
Add RustScan 2020-08-04 16:29:19 -07:00
Brandon
641d7af6d6
Add Ciphey
https://github.com/Ciphey/Ciphey
2020-08-04 23:24:16 +01:00
fabacab
29347c4a99
Add Google's Tsunami security scanner to Network Tools list. 2020-07-15 18:05:16 -04:00
Philip Barwikowski
86f8df1b6f
Update link to shellphish
Shellphish should either be removed or the link updated as the original repository is not available anymore
2020-07-08 14:59:01 +02:00
fabacab
918ed510f0
Add Inveigh, a modern PowerShell/C# version of Responder. 2020-05-14 19:31:12 -04:00
Meitar M
a30bb4d017
Add Rubeus, a Kerberos ticket cracker for Windows environments. 2020-05-14 17:05:32 -04:00
Shao Qi Xu
05aa966c20 Update Asia Conferences and Event 2020-05-07 10:43:51 +08:00
Meitar M
44c7ee9961
Alphabetize and tweak description for LFISuite. 2020-05-04 14:29:37 -04:00
socketz
3f5f2edefb
Modified Kadabra to LFISuite
It's very old but the author points to LFISuite
2020-05-04 12:07:49 +02:00
Joep van Gassel
a35c6218e6
Update README.md
wrong URL for kali docker
2020-04-23 07:41:29 +02:00
Meitar M
37c63af3a5
Add TRRespass fuzzer, a DRAM side-channel (rowhammer) fuzzer suite. 2020-04-20 15:04:23 -04:00
Meitar M
4c52d39bd1
Remove in-browser LOIC link (site no longer exists), fix LOIC line item. 2020-04-06 17:09:48 -04:00
0xACAB
8f4e5dabba
Merge pull request #363 from meitar/fridax
Rephrase Fridax, alphabetize.
2020-04-06 17:08:11 -04:00
0xACAB
f64f87ac08
Merge pull request #362 from meitar/ghsa
Add GitHub Security Advisories database.
2020-04-06 17:07:47 -04:00
Meitar M
129823c510
Rephrase Fridax, alphabetize. 2020-04-06 17:04:31 -04:00
Meitar M
987a0e6d9a
Add GitHub Security Advisories database. 2020-04-06 16:57:45 -04:00
Tijme Gommers
6c5abf2344
Add Fridax to the Reverse Engineering Tools.
https://github.com/NorthwaveNL/fridax
2020-04-06 12:59:01 +02:00
0xACAB
64e7782611
Merge pull request #359 from meitar/gocrack
Add GoCrack, Web frontend for distributed hashcat cracking jobs.
2020-04-05 14:50:31 -04:00
0xACAB
40d117028c
Add GoCrack, Web frontend for distributed hashcat cracking jobs. 2020-04-04 11:53:31 -04:00
Meitar M
772a0ed63c
Add Tavis Ormandy's Windows ctftool exploration/exploit tool. 2020-03-24 22:24:31 -04:00
Meitar M
9a79d68079
Remove deprected Evilginx, leave only its successor, Evilginx2. 2020-03-18 21:31:13 -04:00
Samar Dhwoj Acharya
3886a7ba2c
Merge pull request #355 from meitar/ncrack
Add Ncrack, an `nmap`-like authentication cracking tool.
2020-03-17 20:31:47 -05:00
Meitar M
b89cf272ca
Closes #288: Props to @lMaxTl.
This is a new commit in the interests in speed and brevity; the original
PR contained numerous extranneous commits. I asked the original
submitter to clean it a little bit, but they never responded, and now
their commit history requires quite a bit of conflict resolution before
it will merge cleanly. I'm taking the initiative to re-do their work in
a single, new commit just to have it done.
2020-03-16 19:40:06 -04:00
Meitar M
ba368240e5
Add Ncrack, an nmap-like authentication cracking tool. 2020-03-16 19:27:59 -04:00
Meitar M
f1d061e61d
OWASP ZAP has a new homepage; update its URL on this list. 2020-03-15 18:36:47 -04:00
Meitar M
9e17d5bff1
Remove DWF; the project ended due to lack of community involvement. 2020-03-13 20:20:19 -04:00
Meitar M
90b5156caa
Add PSKracker, a fast WPA/WPA2/WPS cracking tool for pentesters. 2020-03-13 20:14:42 -04:00
Meitar M
312d7019d7
Add Snyk's vuln DB. 2020-02-27 13:50:03 -05:00
Meitar M
60ff773d44
Closes #345: Use original repository for RsaCtfTool. 2020-02-26 15:58:10 -05:00
Meitar M
92a965fd4c
Add Postenum, a simple privesc suggester for GNU/Linux. 2020-02-23 19:10:27 -05:00
Meitar M
d90ab4440d
Add SGX-Step, a framework for attacking secure enclaves via side channels. 2020-02-20 03:07:37 -05:00
Meitar M
f7178b07d3
Add Thunderclap, an open source DMA and IOMMU auditing platform. 2020-02-10 14:27:44 -05:00
Meitar M
53bd2a5815
Remove numerous whitelisted URLs since they now redirect safely. 2020-01-26 21:34:44 -05:00
Meitar M
b5a6fba17b
Fix HTTP 404 Not Found errors, remove Intel Techniques tools.
The Intel Techniques online tools collection no longer exists and has
been removed by the author.
2020-01-26 21:13:32 -05:00
Meitar M
0ccb2304fd
Add subbrute, move AQUATONE and OWASP Amass to net recon section.
Both AQUATONE and OWASP Amass are not actually direct network device
discovery tools, but OSINT and DNS-specific mass querying tools. A
domain (or subdomain) is not technicall a network device, and thus I
feel like these tools were mis-categorized by being grouped with actual
network device discovery search engines like Shodan.
2020-01-26 20:56:34 -05:00
Meitar M
b9829cf461
Move Dradis, Lair to Collaboration Tools section. Remove KarmaHostage. 2020-01-16 15:07:16 -05:00
Quinten De Swaef
3890acf0af
Update README.md 2020-01-15 16:03:52 +01:00
Samar Dhwoj Acharya
deda18c6dd
Merge pull request #333 from Dormidera/patch-1
conference: add honeycon.eu
2019-11-26 13:45:32 -06:00
Meitar M
8631ba01b2
Remove old, unmaintained tools shellsploit and Dripcap. 2019-11-26 12:06:42 -05:00
Meitar M
14c03986d8
Add Skiptracer, OSINT scraping framework that avoids data-for-pay needs. 2019-11-26 11:28:33 -05:00
1024Megas
3ea7fac64d
Update README.md 2019-11-25 14:34:06 +01:00
Meitar M
33aa9686ac
Start categorization of OSINT tools list. 2019-11-07 22:45:04 -05:00
Meitar M
4a722fbf64
Add two anonymity and two file format tools. 2019-11-06 13:58:59 -05:00
Meitar M
131b5eef40
Link to conference homepages instead of past year's events. 2019-11-03 23:28:08 -05:00
Meitar M
ff9ab7b5de
Subcategorize "Conferences" section by continent. 2019-11-03 23:18:04 -05:00
Meitar M
a7abf275c4
Fix typo in hacker con name. 2019-11-03 15:48:37 -05:00
Samar Dhwoj Acharya
8de54d12cb
Merge pull request #326 from meitar/hacker-cons
Add two NYC-based hacker cons.
2019-11-03 14:46:29 -06:00
Meitar M
36a30d3738
Add two NYC-based hacker cons. 2019-11-03 15:43:27 -05:00
Meitar M
7533e7dde8 Merge branch 'yar' of https://github.com/aubrel/awesome-pentest into aubrel-yar 2019-11-03 15:37:31 -05:00
aubrel
c04c853ae3
Added Yar, an OSINT tool. 2019-11-03 09:23:40 -05:00
Samar Dhwoj Acharya
e8db1b5ff4
Merge pull request #321 from hangmansROP/patch-1
Add AWS Tool Arsenal
2019-11-03 00:28:13 -05:00
Samar Dhwoj Acharya
7e836fbfe6
Merge pull request #322 from jimender2/jimender2-patch-1-Cyber-Summit
Add National Cyber Summit Conference to the Conference List
2019-11-03 00:27:34 -05:00
Samar Dhwoj Acharya
95cd5cbd9c
Merge pull request #323 from ducksecops/patch-1
Update README.md
2019-11-03 00:26:30 -05:00
Meitar M
c6e1712b67
Update link for dos-over-tor tool. 2019-11-02 22:28:37 -04:00
Meitar M
05a5198fa2
Add SIET, tool for manipulating insecure Cisco Smart Install switches. 2019-11-02 22:20:03 -04:00
ducksecops
9e86c5e764
Update README.md
Co-Authored-By: Samar Dhwoj Acharya <coolsamar207@gmail.com>
2019-10-31 23:53:00 +00:00
ducksecops
7f7a7748c7
Update README.md
Co-Authored-By: Samar Dhwoj Acharya <coolsamar207@gmail.com>
2019-10-31 23:52:43 +00:00
ducksecops
e93ae412de
Update README.md
Added steelcon to list of conference for UK readers and also the excellent collection of sessions recorded by cooper at a range of different security conferences.
2019-10-29 23:06:48 +00:00
Jonathan Meredith
43e2c99ad8
Add National Cyber Summit Conference to the List 2019-10-17 19:34:53 -04:00
hangmansROP
694b0b698d
Add AWS Tool Arsenal
Recommend this list of AWS tools for offensive and defensive teams.
2019-10-17 20:36:30 +01:00
Meitar M
f9a63461b1
Fix URL for CarolinaCon. 2019-10-12 23:21:53 -04:00
Meitar M
4d02410ee6
Add hate_crack, a wrapper for Hashcat to automate cracking methods. 2019-10-12 22:06:28 -04:00
Meitar M
761465cba4
Add pwnagotchi, an "AI" that augments BetterCAP for Wi-Fi cracking. 2019-09-26 12:29:25 -04:00
Samar Dhwoj Acharya
ef6693cb33
Update README.md 2019-09-23 10:05:51 -05:00
SecureThisShit
95811e5046
Add WinPwn, Internal Penetrationtest Script 2019-09-21 21:50:07 +02:00
Meitar M
37235ae8eb
Add dnscat2, a command and control channel over the DNS protocol. 2019-09-21 00:11:24 -04:00
Meitar M
bcd02be15e
Update URL for recon-ng, which has moved to GitHub from BitBucket. 2019-09-12 21:28:20 -04:00
Meitar M
29bb5a5464
Add pivotsuite, a portable, standalone client-server pivot toolkit. 2019-09-12 21:20:48 -04:00
Meitar M
49db1f671c
Add dorkbot, modular CLI tool to find vulnerabilities based on SERPs. 2019-09-04 12:59:59 -04:00
Meitar M
c5208dbb01
Add CarbonCopy code signing spoofer tool used for AV evasion. 2019-08-29 14:56:11 -04:00
Meitar M
1095a01786
Update URL for mitmproxy. 2019-08-10 21:33:12 -04:00
Meitar M
2b22b33b56
Update URLs for No Starch Press (www.nostarch.com -> nostarch.com). 2019-08-07 16:15:16 -04:00
Meitar M
559d7d9001
Add TrevorC2, a masked C2 and data exfil tool using "legitimate" HTTP. 2019-08-07 16:10:33 -04:00
Meitar M
3f96c213e8
Update the URL for Immunity Debugger. 2019-08-05 00:20:53 -04:00
Meitar M
e7f89e9b85
Add new section for Android-based software, and three tools to it. 2019-08-05 00:10:32 -04:00
Meitar M
6a964e150f
Add WhatBreach, script to find database breaches based on email address. 2019-07-30 15:46:29 -04:00
Meitar M
f656127663
Move hping3, pig, and scapy to new, more specific section. 2019-07-26 14:29:24 -04:00
Meitar M
365786a014
Add TraceWrangler, a powerful pcap and pcapng file editor. 2019-07-26 14:26:39 -04:00
Meitar M
fb35ce1de1
Add new section ("Network Packet Replay…") with three tools. 2019-07-26 14:19:22 -04:00
Meitar M
62066aa565
Add Vulmon.com, a vulnerability search engine and database. 2019-07-24 17:27:53 -04:00
Meitar M
980c85e77c
Add sylkie, replace ampersand with full word and. 2019-07-16 14:22:27 -04:00
Meitar M
0943194460
Reword the description of cwe_checker for clarity and style conformance. 2019-07-10 18:55:01 -04:00
Thomas Barabosch
49f8be6734
Added cwe_checker
cwe_checker finds vulnerable patterns in binary executables
2019-07-04 08:47:37 +02:00
Meitar M
a65a9a07d3
Merge pull request #296 from meitar/master
Add celerystalk.
2019-05-07 18:11:27 -04:00