Beaconator
A beacon generator using Cobalt Strike and PEzor.
https://github.com/capt-meelo/Beaconator

Request smuggler
Http request smuggling vulnerability scanner
https://github.com/sh1yo/request_smuggler
HTTP Desync Attacks: Request Smuggling Reborn
https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn
#request_smuggler

Medusa is a cross-platform C2 agent compatible with Python 2.7 and 3.8, compatible with Mythic
https://github.com/MythicAgents/Medusa
#c2 #python #medusa

ShellShockHunter
Scan via Shodan search engine then try figure out Vulnerable or not
https://github.com/MrCl0wnLab/ShellShockHunter
#ShellShockHunter

Ghost Eye Informationgathering Footprinting Scanner and Recon Tool Release. Ghost Eye is an Information Gathering Tool I made in python 3. To run Ghost Eye, it only needs a domain or ip. Ghost Eye can work with any Linux distros if they support Python 3. Author: Jolanda de Koff
https://github.com/BullsEye0/ghost_eye
#Ghost_eye #informationGathering

#Exegol is a fully featured and community-driven hacking environment
It can be used in pentest engagements, #bugbounty, #CTF, #HackTheBox, #OSCP lab & exam and so on. Exegol's original fate was to be a ready-to-hack docker in case of emergencies during engagements.
https://github.com/ShutdownRepo/Exegol

QuickXSS
Automating XSS using Bash
https://github.com/theinfosecguy/QuickXSS
#xss #xsshunter

Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation
https://github.com/HuskyHacks/ShadowSteal
#LPE

https://us-cert.cisa.gov/ics/Downloading-and-Installing-CSET
https://github.com/cisagov/cset
#ICS #CSET

Authentication testing framework
https://github.com/DigeeX/raider

We developed GRAT2 Command & Control (C2) project for learning purpose.
https://github.com/r3nhat/GRAT2
https://hakin9.org/grat2-command-and-control-c2-tool-written-in-python3-and-the-client-in-net-4-0/
#C2 #python

DNS Reset Checker
Tools to assess the DNS security of web applications
https://github.com/The-Login/DNS-Reset-Checker
#DNS #Email

Recon Script in VB . In case Powershell is disabled
https://chaah.awankloud.my/recon-in-vb/
#Recon #VB #Powershell

Passive Security Tools Fingerprinting Framework
https://github.com/G4lB1t/pstf2
#fingerprint #passive

Interactive Shell via Bluetooth
https://www.tarlogic.com/blog/interactive-shell-via-bluetooth/
#shell #bluetooth

Win Brute Logon (Proof Of Concept)
https://github.com/DarkCoderSc/win-brute-logon
#win_brute_logon

https://github.com/urbanadventurer/Android-PIN-Bruteforce

#Android #Bruteforce

Top 30+ Most Popular Red Team Tools
لیست معروف ترین ابزارهای تست نفوذ ، Red team که مراحل
#Reconnaissance
#Weaponization
#Delivery
#Exploitation
#Privilege_escalation
#Lateral_movement
#C2
#Exfiltrate_and_complete
https://securitytrails.com/blog/red-team-tools
#redteam
#pentest_tools

Top 25 OSINT Tools for Penetration Testing
https://securitytrails.com/blog/osint-tools
#OSINT

Testimo is PowerShell module for running health checks for Active Directory (and later on any other server type) against a bunch of different tests
https://github.com/EvotecIT/Testimo
#powershell #activedirectory #Testimo