755 Open source projects that are alternatives of or similar to Tigershark

Exploit Pack -The next generation exploit framework

Penetration test Achieve Knowledge Unite Rapid Interface

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Domain name permutation engine written in Go

Attack Surface Management Platform | Sn1perSecurity LLC

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.

hydra

📱 🐟 An app to remote control SocialFish.

📌 Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

🔐 Docker Container for Penetration Testing & Security

Fully automated offensive security framework for reconnaissance and vulnerability scanning

Tool Information Gathering Write By Python.

JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)

network reconnaissance toolkit

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]

Responsive Command and Control System

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Automation for internal Windows Penetrationtest / AD-Security

This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs enabling attackers to read data they shouldn't be able to. This tool is originally based on Microsoft: https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

A collection of manifests that will create pods with elevated privileges.

A fast web directory/file enumeration tool written in Rust

Subdomain enumeration through various techniques

This repository contains writeups for various CTFs I've participated in (Including Hack The Box).

A tool to automate penetration tests

A pentesting tool inspired by mr robot and derived by zphisher

fireELF - Fileless Linux Malware Framework

Sifter aims to be a fully loaded Op Centre for Pentesters

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

Web Recon & Exploitation Tool.

Web path scanner

Ruby on Rails Phishing Framework

Hacking Toolkit

Pentesting suite for Maltego based on data in a Metasploit database

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

A Python-powered exploitation framework and botnet.

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Yet Another PHP Shell - The most complete PHP reverse shell

Forward shell generation framework

Penetration Testing Platform

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

👀 🖥️ Golang rewrite of eyes.sh. Let's you perform domain/IP address information gathering. Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?" 🔍 🕵️

iOS/macOS/Linux Remote Administration Tool

Let's you perform domain/IP information gathering... in BASH! Wasn't it esr who said "With enough eyeballs, all your IP info are belong to us?"

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

A tool to test security of json web token

A wrapper for Nmap to quickly run network scans

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

🔄 A collection of mitmproxy inline scripts

unix SSH post-exploitation 1337 tool

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

Multi OTP Spam Amp/Paralell threads

👶 BabySploit Beginner Pentesting Toolkit/Framework Written in Python 🐍

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Tool Information Gathering & social engineering Write By [Python,JS,PHP]

备考 OSCP 的各种干货资料/渗透测试干货资料