Windows credential extraction.
Tools for pentest
Scoped offensive engagements and assessments.
190 tools indexed
Interactive HTTPS proxy.
Frida-based Android intent interception for security research
Generate NTLMv2 hash theft files.
pspy
—Spy on Linux processes without root.
ptai
—AI pentest tool that re-runs every exploit to verify it.
Mimikatz in pure Python.
Radare2 plug-in for Frida.
SOCKS proxy through a web shell.
Automated reconnaissance framework for web applications
Automated recon and web vulnerability-scanning framework.
Android Dalvik assembler / disassembler.
Scan ServiceNow instances for unauthenticated data exposure
Automatic SQL injection and database takeover.
SSH server and client config auditor.
Command-line packet capture.
Test TLS/SSL on any port.
E-mail and subdomain harvester.
w3af
—Web application attack and audit framework.
WAF fingerprinting.
Rogue access point framework for Wi-Fi MITM attacks
Java deserialization payload generator.