Repositories list

• cloudsploit

  Public
  Cloud Security Posture Management (CSPM)

  JavaScript

  •

  GNU General Public License v3.0

  •728•0•0•0•Updated Oct 16, 2023Oct 16, 2023

• managed-kubernetes-auditing-toolkit

  Public
  All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.

  Go

  •

  Apache License 2.0

  •25•0•0•0•Updated Oct 9, 2023Oct 9, 2023

• kube-bench

  Public
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

  Go

  •

  Apache License 2.0

  •1.3k•0•0•0•Updated Aug 9, 2021Aug 9, 2021

• kube-hunter

  Public
  Hunt for security weaknesses in Kubernetes clusters

  Python

  •

  Apache License 2.0

  •603•0•0•0•Updated Jul 30, 2021Jul 30, 2021

• wstg

  Public
  The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

  Shell

  •

  Creative Commons Attribution Share Alike 4.0 International

  •1.5k•0•0•0•Updated Sep 7, 2020Sep 7, 2020

• metasploit-framework

  Public
  Metasploit Framework

  Ruby

  •

  Other

  •15k•0•0•0•Updated Sep 3, 2020Sep 3, 2020

• PwnAuth

  Public
  Python

  •

  Apache License 2.0

  •98•0•0•0•Updated Jun 5, 2020Jun 5, 2020

• aws_public_ips

  Public
  Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services

  Ruby

  •

  MIT License

  •88•0•0•0•Updated May 18, 2020May 18, 2020

• evil-winrm

  Public
  The ultimate WinRM shell for hacking/pentesting

  Ruby

  •

  GNU Lesser General Public License v3.0

  •655•0•0•0•Updated Mar 27, 2020Mar 27, 2020

• syncthing

  Public
  Open Source Continuous File Synchronization

  Go

  •

  Mozilla Public License 2.0

  •4.8k•0•0•0•Updated Nov 21, 2019Nov 21, 2019

• ScoutSuite

  Public
  Multi-Cloud Security Auditing Tool

  Python

  •

  GNU General Public License v2.0

  •1.2k•0•0•0•Updated Nov 13, 2019Nov 13, 2019

• my-arsenal-of-aws-security-tools

  Public
  List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

  Shell

  •

  Apache License 2.0

  •1.6k•0•0•0•Updated Nov 8, 2019Nov 8, 2019

• discover

  Public
  Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

  Shell

  •

  MIT License

  •864•0•0•0•Updated Nov 4, 2019Nov 4, 2019

• WebMap

  Public
  WebMap-Nmap Web Dashboard and Reporting

  Python

  •

  GNU General Public License v3.0

  •283•0•0•0•Updated Oct 31, 2019Oct 31, 2019

• PayloadsAllTheThings

  Public
  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Python

  •

  MIT License

  •16k•0•0•0•Updated Oct 26, 2019Oct 26, 2019

• hcxdumptool

  Public
  Small tool to capture packets from wlan devices.

  C

  •

  MIT License

  •411•0•0•0•Updated Oct 1, 2019Oct 1, 2019

• hcxtools

  Public
  Portable solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = capture, convert and calculate candidates, x = different hashtypes

  C

  •

  MIT License

  •421•0•0•0•Updated Oct 1, 2019Oct 1, 2019

• recon-ng

  Public
  Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

  Python

  •

  GNU General Public License v3.0

  •791•0•0•0•Updated Sep 13, 2019Sep 13, 2019

• atomic-red-team

  Public
  Small and highly portable detection tests based on MITRE's ATT&CK.

  PowerShell

  •

  MIT License

  •3k•0•0•0•Updated Aug 30, 2019Aug 30, 2019

• osquery

  Public
  SQL powered operating system instrumentation, monitoring, and analytics.

  C++

  •

  Other

  •2.5k•0•0•0•Updated Aug 29, 2019Aug 29, 2019

• sliver

  Public
  Implant framework

  Go

  •

  GNU General Public License v3.0

  •1.4k•0•0•0•Updated Aug 28, 2019Aug 28, 2019

• metasploit-payloads

  Public
  Unified repository for different Metasploit Framework payloads

  C

  •

  Other

  •708•0•0•0•Updated Aug 28, 2019Aug 28, 2019

• cuckoo

  Public
  Cuckoo Sandbox is an automated dynamic malware analysis system

  JavaScript

  •

  Other

  •1.7k•0•0•0•Updated Aug 27, 2019Aug 27, 2019

• BloodHound

  Public
  Six Degrees of Domain Admin

  PowerShell

  •

  GNU General Public License v3.0

  •1.8k•0•0•0•Updated Aug 26, 2019Aug 26, 2019

• SecLists

  Public
  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  PHP

  •

  MIT License

  •25k•0•0•0•Updated Aug 25, 2019Aug 25, 2019

• pacu

  Public
  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

  Python

  •

  BSD 3-Clause "New" or "Revised" License

  •763•0•0•0•Updated Aug 22, 2019Aug 22, 2019

• AggressorScripts

  Public
  Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

  C#

  •308•0•0•0•Updated Aug 21, 2019Aug 21, 2019

• beef

  Public
  The Browser Exploitation Framework Project

  JavaScript

  •2.3k•0•0•0•Updated Aug 21, 2019Aug 21, 2019

• ptf

  Public
  The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

  Python

  •1.3k•0•0•0•Updated Aug 19, 2019Aug 19, 2019

• SprayingToolkit

  Public
  Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient

  Python

  •

  GNU General Public License v3.0

  •273•0•0•0•Updated Aug 18, 2019Aug 18, 2019