hapazores,github

shuriken

Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.

sigma

Generic Signature Format for SIEM Systems

sigmaui

SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)

silenttrinity

A post-exploitation agent powered by Python, IronPython, C#/.NET

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

sleuthql

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

smbetray

SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in cleartext.

smenu

Terminal utility that allows you to use words coming from the standard input to create a nice selection window just below the cursor. Once done, your selection will be sent to standard output. More in the Wiki

snmp-brute

Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

specucheck

SpecuCheck is a Windows utility for checking the state of the software mitigations against CVE-2017-5754 (Meltdown) and hardware mitigations against CVE-2017-5715 (Spectre)

spookflare

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

sprayingtoolkit

Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient

sshlooter

Script to steal passwords from ssh.

subfinder

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.