pentest-scripts 开源项目推荐（201 个）

1N3 /Sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

lucasjacks0n /EggShell

iOS/macOS/Linux Remote Administration Tool

m8sec /CrossLinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

SofianeHamlaoui /Lockdoor-Framework

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

taielab /awesome-hacking-lists

跨多个领域的顶级渗透测试工具和生产力实用程序精心策划的集合。加入我们，探索，贡献和增强您的黑客工具包！

wddadk /Offensive-OSINT-Tools

OffSec OSINT Pentest/RedTeam Tools

ForbiddenProgrammer /conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

sinfulz /JustTryHarder

JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)

ricardojoserf /wifi-pentesting-guide

WiFi Penetration Testing Guide

0xsauby /yasuo

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

vmfunc /sif

the blazing-fast pentesting suite.

Leo4j /Invoke-ADEnum

Active Directory Auditing and Enumeration

jcesarstef /dotdotslash

搜索目录遍历漏洞

Leo4j /Amnesiac

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

redcode-labs /Citadel

Collection of pentesting scripts

abdulr7mann /hackerEnv

该项目在 GitHub 上没有填写描述

franccesco /getaltname

在HTTPS站点中提取SSL证书的子域名。

Leviathan36 /kaboom

A tool to automate penetration tests

jiangsir404 /POC-S

POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC

inspiringz /CVE-2021-22205

GitLab CE/EE Preauth RCE using ExifTool