Commit Graph

250 Commits

Author SHA1 Message Date
Meitar M
ed7ebf1848
Add binwalk, fast and easy tool for reversing firmware images. 2017-07-12 00:04:18 -04:00
Meitar M
9749c6382d
Fix inconsistent capitalization in headings; "utils" -> "utilities." 2017-07-11 05:49:24 -04:00
Meitar M
32ff359418
Drop link to commercial-only VulnDB based off OSVDB. 2017-07-10 16:17:34 -04:00
Samar Dhwoj Acharya
d39cd608c6 Merge pull request #149 from meitar/compliance
Fix minor typos, capitalization issues, and term consistency.
2017-07-08 19:16:31 -05:00
Meitar M
9b037a9bbf Fix minor typos, capitalization issues, and term consistency. 2017-07-08 20:03:48 -04:00
Jericho
71d146979c touch-ups and clarifications for the VDB section 2017-07-08 16:45:34 -06:00
Samar Dhwoj Acharya
51949983f7 Merge pull request #145 from meitar/vuln-scanners
Reorganize Vulnerability Scanners section, add subheadings.
2017-07-08 15:01:12 -05:00
Meitar M
3c811415bc Style guide compliance pass focused on Vulnerability Databases section. (#144)
* Add CVE List to Vulnerability Databases section, since it was missing.

* Style guide compliance pass focused on Vulnerability Databases section.

* Whitelist the Inj3ct0r URLs.

The `0day.today` website sits behind an extremely aggressive Cloudflare
anti-bot checker, which causes `awesome-bot` to trigger an HTTP 503
response. This fails the build but is actually normal behavior.

Similarly, the Onion service is inaccessible except over Tor and our
Travis CI configuration does not (yet?) support checking Onion service
links. (Although, perhaps it should be updated to do so in a future PR.)
2017-07-08 13:52:24 -05:00
Samar Dhwoj Acharya
42aa8a29a3 Merge pull request #146 from meitar/fiddler
Add Fiddler, provide more detail on OWASP ZAP.
2017-07-08 13:48:46 -05:00
Meitar M
522863e27a
Add wafw00f, a web application firewall fingerprinter. 2017-07-08 01:06:39 -04:00
Meitar M
b1b77f40a9
Add Fiddler, provide more detail on OWASP ZAP. 2017-07-08 00:24:33 -04:00
Meitar M
d2825614c3
Reorganize Vulnerability Scanners section, add subheadings.
This commit provides more detail and context for the vulnerability
scanners section. It groups Web Scanners into its own subheading, and
moves scanning tools from the Web Exploitation section into this section
as these tools do not actually focus on *exploiting* websites.

Additionally, Static Analyzers are grouped, two new static analyzers
(cppcheck and FindBugs) have been added, and commercial tools are
appropriately described as such.
2017-07-07 22:18:09 -04:00
Meitar M
6ac7727def
Further "Awesome List" style guide compliance passes.
This commit focuses on terminological consistency, including:

* Use consistent capitalization for abbreviations (OSInt -> OSINT).
* Consistently expand ambiguous phrases (OS -> operating system).
* Settle on standard names (Wi-Fi -> WiFi, etc.) where a mix was used.
* Expand acronyms in item titles when doing so shortens the description.
* Replace descriptions that merely expanded acronyms with actual text.
* Remove duplicate items that have more than one URL (Commix project).
* Do not Title Case description text when description is simply prose.
2017-07-07 01:42:53 -04:00
Meitar M
266aad7120
Remove "A" at beginning of link description. (Missed from before.) 2017-07-06 01:53:54 -04:00
Meitar M
8a2bfb965b
Make grammar consistent: "command-line" -> "command line" and so on.
This commit tidies some minor issues with pull request #141, namely:

* fix style guide compliance from accidental reversion during merge.
* add a period to the last sentence of the introduction paragraph.
* make the table of contents's content match the headings in the doc.
* consistently spell open source without a dashed word ("open-source").
2017-07-06 01:04:08 -04:00
Samar Dhwoj Acharya
e2fe7cbef6 Merge branch 'master' into awesome-compliant 2017-07-05 23:47:22 -05:00
Meitar M
b742364f12
Remove duplicated linkback to Awesome List origin (it's a badge now). 2017-07-06 00:41:15 -04:00
Meitar M
7adf2fb0df
Add periods for link descriptions that were missing them. 2017-07-06 00:39:03 -04:00
Samar Dhwoj Acharya
9fb37de33a add sobelow - phoenix framework static analyzer 2017-07-05 23:37:46 -05:00
Meitar M
b40bbe3963
First round of making this list awesome compliant, for #86.
This commit is a first-pass attempt at adhering to the style guide of
the Awesome List contribution guidelines at
https://github.com/sindresorhus/awesome/blob/master/pull_request_template.md

Specificaly, I have:

* added a succinct description of the project/theme at top of README.
* added the awesome badge on the right side of the list heading.
* titled the table of contents `Contents`.
* moved the `CONTRIBUTING.md` file to the expected filesystem path.
* capitalized the first word of link descriptions, when present.
* added trailing periods to link descriptions, when not present.
* removed the "A" and "An" prepositions from link descriptions.
* removed the Travis CI build status badge.
* matched the heading levels to the style guide's recommendations.
2017-07-06 00:29:02 -04:00
Meitar M
0765f513d0
Add ctf-tools, quick installations of various pentest utils. 2017-07-05 21:51:54 -04:00
Sachin S. Kamath
e265e3bf4d Add OWTF to list of tools 2017-07-04 10:30:59 +05:30
Duncan Ogilvie
b667e06b81 x64_dbg -> x64dbg 2017-07-03 08:36:05 +02:00
Samar Dhwoj Acharya
38e34cdb1a add brakeman 2017-07-03 01:09:02 -05:00
Meitar M
065df08263
Add WiFi Pineapple to Physical Access Tools section. 2017-07-02 14:18:45 -04:00
Meitar M
132b1f79ad
Add Frhed. (The hex editor section is sort of lacking right now.) 2017-07-01 20:29:37 -04:00
Meitar Moscovitz
b1dd90ffd4
Add Catphish, a tool for phishing and corporate espionage. 2017-06-19 18:04:16 -04:00
Meitar Moscovitz
d46db068f9
Add another (new) Awesome List (awesome-lockpicking). 2017-06-18 17:34:17 -04:00
Meitar Moscovitz
65442ada5b
Add CloudFail, a utility to find IPs hidden behind Cloudflare proxies. 2017-06-18 13:32:26 -04:00
Meitar Moscovitz
ef2da9ddb5
Add scanless, a port scanning "proxy" multiplexing CLI utility. 2017-06-10 00:17:12 -04:00
Samar Dhwoj Acharya
f102f3020d update broken links 2017-06-04 01:42:59 -05:00
Meitar Moscovitz
c6faba670e
Add "Awesome Forensics" list by @Cugu.
Cugu's `awesome-forensics` because it emphasizes free (gratis) and
open-source tools. It contains numerous tools that are relevant to
pentesting but not directly in scope, such as The Sleuth Kit, etc.
2017-06-04 02:06:35 -04:00
Meitar Moscovitz
e09e827958
Add Praeda, a multi-function peripheral/printer data harvesting tool. 2017-05-23 02:12:15 -04:00
Samar Dhwoj Acharya
958913f3e8 update link for bella 2017-05-17 10:58:35 -05:00
Meitar Moscovitz
b18e4b2c52
Add SSH MITM. (The tool is an early release, but remarkably useful.) 2017-05-17 06:05:15 -04:00
Meitar Moscovitz
30fb77dc73
Add morpheus, a framework for automating complex ettercap filters. 2017-04-29 22:36:50 -04:00
Meitar Moscovitz
2a702ed329
Add Evilginx, recategorize wifiphisher under Social Engineering. 2017-04-27 08:17:27 -04:00
Meitar Moscovitz
abdab93bb7
Closes #123: Propose "Practice CTFs" link to already-existing resource. 2017-04-18 14:54:20 -04:00
Meitar Moscovitz
0e5987d22f
Add "Physical Access Tools" section with three example tools. 2017-04-14 19:10:36 -04:00
Meitar M
4479282832 Fix redsnarf link, remove duplicate Empire entry, recategorize ZAP. (#124) 2017-04-14 10:25:22 -05:00
Meitar M
94c4671eac Group OSINT collections (rather than tools) in their own section, add a new collection, fix link for HackThisSite.org. (#122)
* New section OSINT Resources for link-sites rather than actual tools.

This commit adds a new subsection under "Online Resources" called "OSInt
Resources" and moves a few entries from the "OSInt Tools" section there.
This is done because the OSInt Tools section has grown to expand entries
that are not actually tools, but rather lists/collections of other
tools. These OSINT resources are great, but are distinct from a single,
installable, or otherwise immediately-usable tools.

This commit also adds a new such resource, NetBoomcamp.org's listing of
OSINT tools and custom Web interfaces for some endpoints, like Facebook.

* Fix link to `HackThisSite.org`. (Should be `https://hackthissite.org/`.)
2017-04-13 19:20:24 -05:00
tarrenj
4464ded0e7 Additions (#121)
* Update README.md

Adds recon-ng to OSINT tools

* Update README.md

Adds zmap to Network Tools

* Revert "Update README.md"

This reverts commit 51dad977b2.

* Update README.md

Adds several things, moves Burp to Web Exploitation, removes LOIC

* Update README.md

Removes duplicate recon-ng entry in OSInt Tools.

* Update README.md

Adds more DoS tools

* Update README.md

Replaces LOIC at contributor request
2017-04-06 18:24:35 -05:00
Samar Dhwoj Acharya
62c302dce7 Merge branch 'master' into patch-1 2017-04-06 17:23:29 -05:00
tarrenj
97cd0e8556 Update README.md (#119)
* Update README.md

Adds recon-ng to OSINT tools

* Update README.md

Adds zmap to Network Tools

* Revert "Update README.md"

This reverts commit 51dad977b2.
2017-04-06 17:06:15 -05:00
Meitar M
4d4cb89049 Retitle "Crackers" to "Hash Cracking Tools" and add CeWL project. (#118) 2017-04-03 16:35:54 -05:00
Evan Lewis
c82c159160 Fixed broken metasploit link (#117)
* Fixed a dead link

404 error in Docker subsection regarding the docker-metasploit tool

* Fixed broken metasploit link

Changed docker-metasploit link (and thus author) due to a 404 error in the prior link
2017-03-13 23:25:26 -05:00
Meitar Moscovitz
bec64da1a5
Add Buscador, a Linux VM pre-configured for online investigators. 2017-03-13 21:59:15 -04:00
Meitar Moscovitz
67fedb4d30
CTF section: Add RsaCtfTool, improve description of Pwntools. 2017-03-11 02:01:03 -05:00
Meitar Moscovitz
502d1088a7
Add King Phisher, a phishing campaign toolkit and C2 interface. 2017-03-11 01:06:39 -05:00
Meitar Moscovitz
e3ba0632c5
Add wePWNise, Python tool to automate Windows/Office exploit mitigation. 2017-03-11 00:37:00 -05:00