griddd

canarytokens. Canarytokens helps track activity and actions on your network

bettercap. The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

kali-linux-cheatsheet. Kali Linux Cheat Sheet for Penetration Testers

awesome-exploit-development. A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

vulscan. Advanced vulnerability scanning with Nmap NSE

nmap-vulners. NSE script based on Vulners.com API

CodeExecutionOnWindows. A list of ways to execute code on Windows using legitimate Windows tools

PSKracker. An all-in-one WPA/WPS toolkit

krackattacks-scripts. C

airgeddon. This is a multi-use bash script for Linux systems to audit wireless networks.

Useful_Websites_For_Pentester. This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.

Awesome-Fuzzing. A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

parameth. This tool can be used to brute discover GET and POST parameters

backslash-powered-scanner. Finds unknown classes of injection vulnerabilities

Mobile-Security-Framework-MobSF. Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

mywebappscripts. A collection of all the lists, scripts and techniques I use while doing web application penetration tests.

pentest-bookmarks. a collection of handy bookmarks

tbhm. The Bug Hunters Methodology

tools-tbhm. Tools of "The Bug Hunters Methodology V2 by @jhaddix"

commix. Automated All-in-One OS Command Injection Exploitation Tool

lanturtle-modules. The Official LAN Turtle Module Repository

fuzzdb. Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

IMSI-catcher. This program show you IMSI numbers of cellphones around you.

big-list-of-naughty-strings. The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

Misc-PowerShell-Stuff. random powershell goodness

Cloakify. CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

sqlmap. Automatic SQL injection and database takeover tool

mana. *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM

beef. The Browser Exploitation Framework Project

routersploit. Exploitation Framework for Embedded Devices

metasploit-framework. Metasploit Framework

DependencyCheck. OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.