Pentesting Tools

Silent Execution Of cmd.exe With Redirected STDERR And STDOUT

The ability to execute commands silently using cmd.exe while redirecting both standard output (STDOUT) and standard error (STDERR) is a…

4 weeks ago

OneScan : A Comprehensive Tool For Recursive Directory Scanning

OneScan is an innovative Burp Suite plugin designed to enhance vulnerability detection in deeply nested directories of web applications. Initially…

4 weeks ago

Burp-DeepSeek : A Beta-Stage Burp Suite Extension For AI-Driven Security Analysis

Burp-DeepSeek is an innovative extension designed for PortSwigger's Burp Suite, aimed at enhancing the capabilities of bug hunters and security…

4 weeks ago

NucleiFuzzer = Nuclei + Paramspider + waybackurls + gauplus + hakrawler + katana + Fuzzing Templates

NucleiFuzzer is an advanced automation tool designed to streamline and optimize web application security testing by integrating a suite of…

4 weeks ago

Apache HTTP Server Vulnerability Testing Tool

This repository provides a Proof of Concept (PoC) for testing various vulnerabilities in the Apache HTTP Server, including Filename Confusion…

2 months ago

AutorizePro : Revolutionizing Authorization Testing With AI

一句话介绍工具: AutorizePro 是一款创新性的内置AI分析模块的专注于越权检测的 Burp 插件 (已有多个白帽反馈用工具嘎嘎挖到src洞, 每周末更新, 欢迎Star🌟以便持续跟踪项目最新版本功能) 工具背景 越权漏洞在黑盒测试、SRC挖掘中几乎是必测的一项,但手工逐个测试越权漏洞往往会耗费大量时间。 而自动化工具又因为接口的多样化,难以制定一个全面的检测逻辑而存在大量误报, 基于此产生了 AI辅助分析的检测工具 ➡️ AutorizePro !! ⬅️ 工具亮点 优化检测逻辑 &&…

2 months ago

RustScan : Revolutionizing Port Scanning With Speed And Extensibility

The Modern, Blazing Fast Port Scanner. Find ports quickly (3 seconds at its fastest). Run scripts through our scripting engine…

2 months ago

SharpRedirect : A Lightweight And Efficient .NET-Based TCP Redirector

SharpRedirect is a simple .NET Framework-based redirector from a specified local port to a destination host and port. Features Traffic…

2 months ago

GBounty : Streamlining Vulnerability Scanning For Web Applications

Multi-step website vulnerability scanner designed to help pentesters and bug hunters identify potential vulnerabilities in web applications. We have a…

3 months ago

go-lsass : Remote LSASS Memory Dumping via SMB

Package go-lsass is a tool built to dump the memory of the LSASS process remotely by uploading a local LSASS…

3 months ago