penetrationtesting

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

Penetration Testing AI Assistant based on open source LLMs.

ClatsCracker is a versatile Executable & Python based password-cracking tool supporting 25 hash algorithms. It offers dictionary or brute-force attacks, adjustable threads, salted hash verification, a user-friendly menu, and progress feedback—ensuring, efficient, ethical password testing. The exe version does not require Python. Just open it!

The VAPT Toolkit provides a streamlined way to install, configure, and maintain a complete penetration testing environment with 50+ security tools and custom automation frameworks organized across multiple categories.

Python tool for detecting subdomain takeover vulnerabilities by resolving CNAME records and checking for known error messages. It supports bulk domain scanning and logs detailed results for analysis.

JS Source Map Extractor & Secrets Scanner

This repository is all about the POC and Tools that can be leveraged down for initial access in red teaming engagements.

SQL Easy is an automated SQL injection and reconnaissance pipeline that chains Subfinder, Httpx, Katana, and SQLMap into a single intelligent workflow for security researchers and penetration testers

A Tool to download an EBS snapshot and exfiltrate data without using ec2 instances

🗂️ Fuzz web directories and files easily with Ghost-Dir, a straightforward tool that enhances security assessments and uncovers hidden resources.

BINSpy

A keylogger designed for stealthy keystroke capture & analysis.

An automated DOM-based input prober . Extracts all page fields simultaneously and fires precision syntax breaks. Monitors response drift down to a single byte, instantly flagging unsanitized fields as possibly vulnerable to deeper backend exploits.

Algoritma Script : AES256, BASE64, BASE32, DLL.