Ninja : Open Source C2 Server Created For Stealth Red Team Operations
Ninja C2 is an Open source C2 server created by Purple Team to do stealthy computer and Active directory enumeration without being detected by SIEM and AVs , it still in beta version and when the stable version released it will contains many more stealthy techniques and anti-forensic to create a real challenge for blue...
RapidPayload : Framework Metasploit Payload Generator
Framework RapidPayload is a metasploit payload generator. Requirements OpenJDK 8 (JAVA) , or superiors versions . Metasploit Apktool Python3 Execution git clone https://github.com/AngelSecurityTeam/RapidPayload cd RapidPayloadbash install.sh python3 RapidPayload.py Also Read - InstaSave : Python Script To Download Images, Videos & Profile Pictures From Instagram AngelSecurityTeam Download
Katana : A Python Tool For Google Hacking
Katana ds (ds for dork_scanner) is a simple python tool that automates Google Hacking/Dorking and support Tor. It becomes a more powerfull in combination with GHDB. Installation Use the package manager pip to install requirements cd Katana python3 -m pip install -r requirements.txt python3 kds.py Usage cd Katana python3 kds.py -h (for help) Options : -g :for google mode -s :for scada...
Envizon : Network Visualization & Vulnerability Management/Reporting
Envizon is a tool designed, developed and supported by evait security. In order to give something back to the security community, we publish our internally used and developed, state of the art network visualization and vulnerability reporting tool, 'envizon'. We hope your feedback will help to improve and hone it even further. Use Case We use envizon for our pentests in...
XSS-LOADER : Xss Payload Generator, Scanner & Dork Finder
XSS-LOADER is a all in one tools for XSS PAYLOAD GENERATOR -XSS SCANNER-XSS DORK FINDER and this is written by Hulya Karabag. This tool creates payload for use in xss injectionSelect default payload tags from parameter or write your payloadIt makes xss inj. with Xss Scanner parameterIt finds vulnerable sites url with Xss Dork Finder parameter How to use? https://www.youtube.com/watch?v=ys_a5yx1hmY Installation git clone...
Starkiller : A Frontend for PowerShell Empire
Starkiller is a Frontend for Powershell Empire. It is an Electron application written in VueJS. If you'd like to contribute please follow the Contribution guide. If you'd like to request a feature or report a bug, please follow the Issue template. Getting Started To run Starkiller, you can download the installers for Mac, Linux, and Windows on the Releases page....
FinalRecon : OSINT Tool for All-In-One Web Reconnaissance
FinalRecon is a fast and simple python script for web reconnaissance. It follows a modular structure so in future new modules can be added with ease. Features It provides detailed information such as : Header Information Whois SSL Certificate Information Crawler DNS Enumeration A, AAAA, ANY, CNAME, MX, NS, SOA, TXT RecordsDMARC Records ...
ScoringEngine : Scoring Engine for Red/White/Blue Team Competitions
ScoringEngine for Red/White/Blue Team Competitions. Download Docker. If you are on Mac or Windows, Docker Compose will be automatically installed. On Linux, make sure you have the latest version of Compose. If you're using Docker for Windows on Windows 10 pro or later, you must also switch to Linux containers. Run in this directory: docker-compose builddocker-compose up If you want to delete...
Astra : Automated Security Testing For REST API’s
REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. It can automatically detect and test login & logout (Authentication...
HTTPS-Everywhere : A Browser Extension That Encrypts Your Communications
HTTPS-Everywhere is a browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections. Get the packages you need and install a git hook to run tests before push: bash install-dev-dependencies.sh Run the ruleset validations and browser tests: bash test.sh Run the latest code and rulesets in a standalone Firefox profile: bash test/firefox.sh --justrun Run...