Meitar M
d2d1e2d9ff
Add Bash Bunny and Packet Squirrel from Hak5. Closes #203 .
2018-11-02 10:49:33 -04:00
Meitar M
3297075b7e
Fix Travis CI build errors, largely due to stale links.
...
This commit fixes numerous CI build issues related to stale or broken
links. These include:
* Removal of Zoom username enumeration tool, covered by WPScan anyway.
* Removal of old Google dork database that is unmaintained/has vanished.
* Removal of `OSVDB.org` zone, which no longer resolves via DNS.
* Fix link to NoSQLmap tool (domain expired, use GitHub.com link now).
* Update link to Social Engineering in IT book from legacy URL.
* Update link to OWASP's AppSecUSA conference; now uses second-level domain.
Further, this commit simplifies the `.travis.yml` file in order to use a
plainer (more standard) certificates bundle. Two URLs have been added to
the whitelist: `www.shodan.io`, which returns a 403 Forbidden error when
accessed by Awesome Bot, and `www.mhprofessional.com`, which generates
an SSLv3 certificate validation error.
Prior to this commit, a custom SSL certificate bundle was generated and
then placed in the `/tmp` directory for use, but this is no longer
required as the latest `ca-certificates` bundle shipped with Ubuntu
contains the root certificates needed for the domains that once required
this custom bundle to be used.
2018-11-01 14:48:34 -04:00
Meitar M
dcfc07e36b
Add "AT Commands" Python scripts for exploiting Android devices.
2018-11-01 14:22:08 -04:00
Meitar M
ccdba4d647
Add CertGraph, crawl TLS certs for certificate alternative names.
...
This tool can connect to a domain over HTTP or SMTP, or search Certificate
Transparency (CT) logs in order to create a directed graph that
visualizes a domain's certificate's certificate alternative names. These
are other domain names that the certificate can be used to authenticate,
even if those domain names are not in public DNS records. Can be used as
an OSINT investigative tool as a task in the reconnaisance phase of a
pentesting engagement in order to easily discover additional targets.
2018-10-30 13:42:03 -04:00
Brainfuck
4592571df4
Update README.md
2018-10-24 14:07:13 +02:00
Samar Dhwoj Acharya
85b403f870
Merge pull request #255 from meitar/regex-dos
...
Add RegEx-DoS, an analyzer for regular expressions susceptible to DoS attacks.
2018-10-19 15:42:37 -04:00
Meitar M
b60ae1b320
Add RegEx-DoS, an analyzer for regular expressions susceptible to DoS attacks.
2018-10-19 14:43:31 -04:00
HrushikeshK
cd27f6c85b
Add OS in Penetration Testing Distributions
...
Add Android Tamer OS in Penetration Testing Distributions.
2018-10-08 12:26:09 +05:30
Samar Dhwoj Acharya
0e279aa90f
Merge pull request #252 from meitar/hex-editors
...
Add some good hex editors for GNU/Linux: Bless, wxHexEditor, `hexedit`.
2018-10-01 15:15:21 -05:00
Meitar M
18fd39ab5c
Add some good hex editors for GNU/Linux: Bless, wxHexEditor, hexedit.
2018-10-01 15:20:56 -04:00
Samar Dhwoj Acharya
e1261ffa31
Merge pull request #251 from meitar/dns-tools
...
Amass is now an official OWASP project. Add Python3 port of `fierce`.
2018-09-18 18:39:03 -05:00
Meitar M
7b861e1f8a
Amass is now an official OWASP project. Add Python3 port of fierce.
2018-09-18 15:55:50 -04:00
Samar Dhwoj Acharya
877a84cfca
Merge pull request #250 from l50/master
...
Update WebGoat docker entry
2018-09-18 14:42:55 -05:00
Samar Dhwoj Acharya
1de7eb13ce
Merge branch 'master' into master
2018-09-18 14:42:47 -05:00
Samar Dhwoj Acharya
b65f9eb109
Merge pull request #249 from meitar/templates-and-docker-fixes
...
Templates and docker fixes.
2018-09-18 14:39:45 -05:00
Jayson Grace
233d9596e3
Update WebGoat docker entry
...
Add official WebGoat docker images
- 7.1 (older and best-known by the security community)
- 8.0 (newest release with numerous changes and revisions)
2018-09-10 10:03:20 -07:00
Meitar M
f5d3b0ff04
Fix the Docker for Penetration Testing section: punctuation, etc.
2018-09-06 13:47:24 -04:00
Meitar M
a7e3fdb18e
Fix the Pentesting Report Template.
...
This commit removes items from the Pentesting Report Template section
that are either not templates or have been removed from the source.
Further, line items are updated to use meaningful descriptions and to
follow the Awesome List style guides (capitalization and punctuation).
2018-09-06 13:44:59 -04:00
Samar Dhwoj Acharya
300ae73467
Merge pull request #248 from sundaysec/patch-2
...
Added Awesome list
2018-08-23 11:54:09 -05:00
PHILEMON SUNDAY JOEL
5688f8dd1e
Added Awesome list
...
Android Exploitation and Hacks
2018-08-23 10:17:23 +03:00
Samar Dhwoj Acharya
86b673b941
Merge pull request #246 from meitar/evilosx
...
Add EvilOSX, a macOS RAT with several out-of-the-box exfil tools.
2018-08-08 16:54:39 -05:00
Samar Dhwoj Acharya
fcfd2d9d14
Merge pull request #247 from meitar/tools
...
Add several new phishing and anonymity tools:
2018-08-08 16:54:02 -05:00
Meitar M
8b73e1251f
Add several new phishing and anonymity tools:
...
* SocialFish, a social media phishing framework.
* ShellPhish, a social media site cloner built on SocialFish.
* dos-over-tor, a torifid DoS and stress test tool.
* oregano, a MITM proxy that accepts direct Tor client requests.
2018-08-08 16:01:47 -04:00
Meitar M
306458f22e
Add EvilOSX, a macOS RAT with several out-of-the-box exfil tools.
2018-08-08 15:47:16 -04:00
Samar Dhwoj Acharya
c9c1df653f
Merge pull request #245 from meitar/scomdecrypt
...
Add SCOMDecrypt, a tool to retrieve and decrypt stored RunAs creds.
2018-08-05 17:47:39 -05:00
Samar Dhwoj Acharya
4c254776ab
Merge pull request #244 from meitar/stegcracker
...
Add StegCracker, tool that brute forces steganographic data in files.
2018-08-05 17:47:09 -05:00
Meitar M
07e6025a12
Add SCOMDecrypt, a tool to retrieve and decrypt stored RunAs creds.
2018-08-05 17:25:42 -04:00
Meitar M
e3c19c6d98
Add StegCracker, tool that brute forces steganographic data in files.
2018-08-05 17:10:22 -04:00
Samar Dhwoj Acharya
a276857a73
Merge pull request #243 from fheuer/patch-1
...
Added Btfm book
2018-08-01 20:01:34 -05:00
Florian Heuer
c88b19587d
Added Btfm book
2018-08-01 16:59:22 +02:00
Samar Dhwoj Acharya
16ccc45735
Merge pull request #240 from abhishekbundela/master
...
Added pentestbox.
2018-07-31 19:48:37 -05:00
Samar Dhwoj Acharya
33dcacdde4
Update README.md
2018-07-31 19:48:15 -05:00
Samar Dhwoj Acharya
c77337ef0e
Merge pull request #241 from meitar/ruler
...
Add Ruler, a tool to abuse client-side Outlook features to pwn Exchange.
2018-07-31 19:46:06 -05:00
Samar Dhwoj Acharya
35257be346
Merge pull request #242 from meitar/bella
...
Fix link for Bella, a post-exploitation agent for MacOS.
2018-07-31 19:45:22 -05:00
Meitar M
081241efc6
Fix link for Bella, a post-exploitation agent for MacOS.
2018-07-31 17:17:00 -04:00
Meitar M
f0cba27bf0
Add Ruler, a tool to abuse client-side Outlook features to pwn Exchange.
2018-07-31 16:57:03 -04:00
Abhishek bundela
c14d026566
Added pentestbox.
2018-07-31 18:05:47 +05:30
Samar Dhwoj Acharya
e922b9da06
Merge pull request #239 from sundaysec/patch-2
...
Added MITMF
2018-07-30 12:51:31 -05:00
Samar Dhwoj Acharya
ecab02ad15
Merge pull request #238 from evyatarmeged/patch-1
...
Add Raccoon under Web Exploitation category
2018-07-30 12:50:45 -05:00
Samar Dhwoj Acharya
7ae9d0ed32
Merge pull request #235 from meitar/blueteam
...
New awesome list: "Cybersecurity Blue Team"
2018-07-30 12:50:09 -05:00
PHILEMON SUNDAY JOEL
2a8c4a9a46
Added MITMF
...
A Framework for Man-In-The-Middle attacks
2018-07-27 16:00:23 +03:00
Evyatar Meged
121e9f8872
Add Raccoon under Web Exploitation category
...
I've added my new tool, Raccoon, to the Web Exploitation tools list
https://github.com/evyatarmeged/Raccoon
2018-07-25 21:22:55 +03:00
Samar Dhwoj Acharya
ccc3b5182d
Merge pull request #237 from meitar/foca
...
Add FOCA, an OSINT tool that uses three search engines.
2018-07-25 12:13:10 -05:00
Samar Dhwoj Acharya
f292ec467e
Merge pull request #236 from TheM4hd1/patch-1
...
Update README.md
2018-07-25 12:01:25 -05:00
Meitar M
60c06a2195
Add FOCA, an OSINT tool that uses three search engines.
2018-07-25 11:17:26 -04:00
Mahdi Makhdumi
a3e481f9a3
Update README.md
2018-07-25 13:42:50 +04:30
Mahdi Makhdumi
bb023efb72
Update README.md
2018-07-25 03:31:34 +04:30
Meitar M
71017d5b2a
New awesome list: "Cybersecurity Blue Team"
...
This is a companion/sister list to awesome-pentest intended to provide
the same level of quality resources for defenders rather than attackers.
2018-07-24 16:29:17 -04:00
Samar Dhwoj Acharya
d295832e00
Merge pull request #219 from meitar/cnnvd
...
Add CNNVD to Vulnerability Databases section.
2018-07-24 14:48:59 -05:00
Samar Dhwoj Acharya
8bb617b7d7
Merge pull request #232 from C-Sto/patch-1
...
Add recursebuster
2018-07-24 14:44:16 -05:00
