PowerShell downgrade attack.
ExploitEndpointsActive Directory
cyberstars / purpose / pentest
Tools for pentest
Scoped offensive engagements and assessments.
204 tools indexed
Google's network vulnerability scanner.
ScanNetworksWeb apps
High-volume Burp HTTP fuzzer.
FuzzExploitWeb apps
Natural-language AI agent that runs the full pentest workflow
ScanExploitWeb apps
WordPress vulnerability scanner.
ScanWeb apps
Modern browser-hooking C2 framework, a BeEF and blind-XSS successor.
ExploitReconWeb apps
All-in-one OSINT for any website.
ReconAnalyzeWeb apps
Next-generation web tech fingerprinter.
ReconScanWeb apps
Rogue access point framework.
InterceptExploitWireless
Rewrite of the popular WiFi auditor.
CrackScanWireless
Windows privilege-escalation enumerator.
ReconScanEndpointsActive Directory
Network protocol analyzer.
InterceptAnalyzeNetworksWireless
Advanced XSS detection suite.
ScanFuzzWeb apps
Cyber-security all-in-one platform.
InterceptScanWeb appsNetworks
PowerShell Active Directory enumeration.
ReconScanActive Directory
AD-integrated DNS zone dumper.
ReconActive Directory
WiFi audit multi-tool.
ScanCrackWireless
Auto-prepare APKs for HTTPS inspection.
AnalyzeInterceptMobile apps
Auto-exploit BloodHound paths.
ExploitAutomateActive Directory
Swiss army knife for network attacks.
InterceptScanNetworksWireless
Crawl domains for endpoints, secrets, API keys and tokens.
ReconScanWeb apps
ddc
—Fast Android DEX-to-Java decompiler in Rust.
AnalyzeMobile appsBinaries
DEX ↔ JAR conversion toolkit.
AnalyzeMobile appsBinaries
Capture SSL/TLS plaintext with eBPF.
InterceptAnalyzeNetworksEndpoints