P

penetration-testing

PhishNetEngine is a powerful credential harvesting engine for making phishing tools - provides server, tunneling, data capture, and admin panel. Just add your website files

VALAK is a powerful ESP32-based tool that performs real Evil Twin attacks by creating identical clones of existing WiFi networks.

LocHawk is a powerful geolocation phishing tool that tricks targets into revealing their exact GPS location, device information, and network details through a seemingly harmless webpage.

CamHawk is a camera phishing tool that tricks users into granting webcam access. Once permission is granted, the tool captures images from the webcam and sends them to your machine.

AI-driven autonomous penetration testing for your GitLab CI/CD pipeline. Scan for SQL injection, XSS, IDOR, SSRF, auth bypass and more on every push or merge request. Results in GitLab Security Dashboard (DAST report). Free tier available.

GhostBuilder is a powerful payload generator tool designed for ethical hacking, red-teaming, penetration testing, and security research

ExploitHawk is a powerful terminal-based exploit search tool for ethical hacking and red team operations, designed for Linux distributions(Debian, Rhel, Arch)

Bannerhunter is a powerful banner grabbing tool written in C

HashRipper is a powerful and fast multi-threaded ethical hacking tool written in Python for cracking hashes. It supports over 17+ popular hash algorithms

ReconHound is a Python-based web reconnaissance tool designed for penetration testers, bug bounty hunters, and ethical hackers. It supports directory and file enumeration, subdomain enumeration, fuzzing, and virtual host (vhost) discovery.

ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.

NetRaptor is a GUI-based ARP poisoning tool built with Python that allows you to scan a network, select a target and gateway, and perform a Man-in-the-Middle (MITM) attack.

FTPBuster is a powerful command-line brute-forcing tool designed to brute-force FTP, SFTP, and explicit FTPS servers by performing dictionary-based attacks.

SSHBuster is a powerful command-line SSH brute-forcing tool designed for ethical hacking and penetration testing. It performs dictionary-based attacks to find valid SSH login credentials efficiently.

This is a powerful and stealthy PHP reverse shell designed for ethical hacking and penetration testing. It establishes a reliable and quiet connection back to your machine.

Interactive slide deck covering operational security principles for authorized red team operations

IP obfuscation and URL generator.

For testing or trolling LLM based pentesting frameworks.

Repository này chứa một lab thực hành nhằm nghiên cứu kỹ thuật tấn công Net-NTLMv2 Relay và các biện pháp phòng thủ tương ứng trong môi trường Windows.

Lab mô phỏng cách xác thực Net-NTLMv2 có thể bị relay qua SMB bằng các công cụ như Impacket, đồng thời phân tích các cấu hình sai (SMB signing, LLMNR/NBT-NS, quyền dịch vụ) dẫn đến nguy cơ lateral movement.

Ngoài ra, repo cung cấp hướng dẫn chi tiết để harden hệ thống Windows nhằm giảm thiểu relay attack, bao gồm bật SMB signing, hạn chế NTLM và các biện pháp bảo vệ ở mức mạng.

Dự án phục vụ mục đích học tập và nghiên cứu an toàn thông tin.

Digital Forensic Suite