mgcfish Goto Github PK

androtickler

Penetration testing and auditing toolkit for Android apps.

angryfuzzer

Tools for information gathering

anti-csrf-plugin

Chrome extension for blocking x-origin cookies

apache-struts-v3

apache-struts2-cve-2017-5638

Demo Application and Exploit

apache-vulns

Pentest Scripts for Apache Vulnerabilities

api-fuzzer

API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api_wordlist

A wordlist of API names for web application assessments

apkurlgrep

Extract endpoints from APK files

apostille

applicationwhitelistbypasstechniques

A Catalog of Application Whitelisting Bypass Techniques

applocker-guidance

Configuration guidance for Windows AppLocker. iadgov

appsecezine

AppSec Ezine Public Repository.

apt2

automated penetration toolkit

aquatone

A Tool for Domain Flyovers

arachni

Web Application Security Scanner Framework

arachni-launching-script

Script intended to make launching of Arachni scanner a little bit more comfortable.

arachni-ui-web

Arachni's Web User Interface.

ardt

Akamai Reflective DDoS Tool - Attack the origin host behind the Akamai Edge hosts and DDoS protection offered by Akamai services.

arecibo

Endpoint for Out-of-Band Exfiltration (DNS & HTTP)

arp-spoofer

A Simple ARP Spoofer using Scapy

asnip

ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight

asphyx1a

Information gathering tools by neuro

assessment-mindset

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

assessment-scripts

Cross platform (i.e., Windows, Linux, Mac) assessment script. The script helps assess workstations for vulnerabilities and abnormalities.

assetnote-poc

(Proof of concept) push notifications for passive DNS data

atear

Wireless Hacking, WiFi Security, Vulnerability Analyzer, Pentestration

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attacking_mongodb

Files from Zeronights presentation.