Accurately Locate Smartphones using Social Engineering.

ANDRAX is a Penetration Testing platform developed specifically for Android smartphones, ANDRAX has the ability to run…

The fastest and cross-platform subdomain enumerator, don't waste your time.

Complete Automated pentest framework for Information Gathering.

Best Proxy Grabber Tool!.

Full Speed Instagram Cracker.

Hacking Tools :zap:.

Automater - IP URL and MD5 OSINT Analysis.

Automatically brute force all services running on a target..

Find exploits in local and online databases instantly.

Quickly analyze and reverse engineer Android packages.

Automated pentest framework for offensive security experts.

Simple random DNS, HTTP/S internet traffic noise generator.

This Tool Is Supporting For DDOS Activities, The Way Is Typing Command : $ python2 islddos.py example: $python2…

Berisi Tools Spammer Dengan Berbagai Macam jenis Dengan Limit Tinggi Bahkan Unlimited.

Hakku Framework penetration testing.

Generate Gmail Emailing Keyloggers to Windows..

Verify if email exists.

A Phishing Dropper designed to Pentest..

Terminal for working with Mifare Classic 1-4k Tags.

Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information..

Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera. .

WebXploiter - An OWASP Top 10 Security scanner !.

Easy way to brute-force web directory..

Simple Python IP Tracker.

No description provided

Fast subdomains enumeration tool for penetration testers.

Passive Vulnerability Auditor.

Skype Ip Resolver.

No description provided

netdiscover.

Advanced dork Search & Mass Exploit Scanner.

File upload vulnerability scanner and exploitation tool..

No description provided

w3af: web application attack and audit framework, the open source web vulnerability scanner..

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential…

A Hackers framework.

Automated script for performing Padding Oracle attacks.

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV,…

Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's…

The LAZY script will make your life easier, and of course faster..

ADB-Toolkit V2 for easy ADB tricks with many perks in all one. ENJOY!.

Hacking framework.

Unofficial Termux Styling [ Bash ].

A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner.

A Python Script to find admin panel of a site.

The Browser Exploitation Framework Project.

Parsero | Robots.txt audit tool.

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks..

BleachBit system cleaner for Windows and Linux.

People tracker on the Internet: OSINT analysis and research tool by Jose Pino.

A PoC backdoor that uses Gmail as a C&C server.

Android Terminal Web-Hacking Tools.

Facebook Hacking Tool.

A simple python script to scan and attack wireless networks..

An advanced network scan and attack script based on GUI. 2nd version of no-GUI netattack. .

Auxile Framework.

beautiful hash generator.

Hash cracker with auto detect hash.

A simple vuln web scanner.

Open Source Information Facebook.

Program to attempt to brute force all wifi networks in range of a device, and return a possible set of networks to…

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing…

Remote Desktop Protocol in Twisted Python.

Automated All-in-One OS command injection and exploitation tool..

Cuckoo Sandbox is an automated dynamic malware analysis system.

No description provided

Encode / Decode.

No description provided

Quick SQL Scanner, Dorker, Webshell injector PHP.

A tool that implements the Golden SAML attack.

Python Security/Hacking Kit.

Hammer DDos Script - Python 3.

[DEPRECATED] Kadabra is my automatic LFI Exploiter and Scanner, written in C++ and a couple extern module in Python..

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner .

A python script designed to check if the website if vulnerable of clickjacking and create a poc.

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks.

A Common User Passwords generator script that looks like the tool Eliot used it in Mr.Robot Series Episode 01 :D :v.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security…

DNS Enumeration Script.

Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ].

Post-Exploitation Framework.

No description provided

Rewrite of the popular wireless network auditor, "wifite".

CeWL is a Custom Word List Generator.

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular…

Tor's hammer. Slow post DDOS tool written in python..

A cross platform Python frequency scanning GUI for the OsmoSDR rtl-sdr library.

Simple security surveillance script for linux distributions..

The hackers tool belt.

No description provided

Empire is a PowerShell and Python post-exploitation agent..

SIPVicious suite is a set of security tools that can be used to audit SIP based VoIP systems..

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website..

Blind Attacking Framework.

Weaponized web shell.

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in…

Spam Chat Facebook.

Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA,…

NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities.

HTTP server for phishing in python.

Network protocol auditing framework.

rang3r | Multi Thread IP + Port Scanner.

Fluxion is a remake of linset by vk496 with less bugs and enhanced functionality..

hexadecimal & URL encoder + decoder.

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default…

dnsenum is a perl script that enumerates DNS information.

MSFvenom Payload Creator (MSFPC).

Hasherdotid.

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are…

No description provided

No description provided

No description provided

Fake Deface.

Github information gathering.

No description provided

termux tool installer.

No description provided

No description provided

Send unsolicited messages repeatedly on the same phone number.

Powerful Disassembler Library For x86/AMD64.

wifitap updated for BT5r3.

Indonesian wordlist.

Durandal's Backdoor.

Leaked? 2.1 - A Checking tool for Hash codes, Passwords and Emails leaked.

Low bandwidth DoS tool. Slowloris rewrite in Python..

GoLismero - The Web Knife.

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an…

Search anything on Google without captcha.

AntiVirus Evasion Tool.

HULK DoS tool ported to Go with some additional features..

Open Vulnerability Assessment Scanner.

python script for Hack gmail account brute force.

Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks..

Simple Go WebDAV server..

A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to…

massive SQL injection vulnerability scanner.

World's fastest and most advanced password recovery utility.

High-Performance word generator with a per-position configureable charset.

Network Attack Tool.

No description provided

This is a script by which you can install Kali nethunter (Kali Linux) in your termux application without rooted phone .

Use TermuxAlpine.sh calling to install Alpine Linux in Termux on Android. This setup script will attempt to set Alpine…

No description provided

BinGoo! A Linux bash based Bing and Google Dorking Tool.

No description provided

OSRFramework, the Open Sources Research Framework is a AGPLv3+ project by i3visio focused on providing API and tools…

Tools for information gathering.

A silly & effective MD5 cracker in Python.

Collaborative Penetration Test and Vulnerability Management Platform.

Plecost - Wordpress finger printer Tool .

Check for valid credentials across a network over SMB.

Current development of SSLyze now takes place on a separate repository.

Wreckuests — yet another one hard-hitting tool to run DDoS atacks with HTTP-flood.

DMitry (Deepmagic Information Gathering Tool).

Powerful Python tool to analyze PDF documents.

coWPAtty: WPA2-PSK Cracking.

No description provided

The famous WPA precomputed cracker, Migrated from Google..

GoldenEye Layer 7 (KeepAlive+NoCache) DoS Test Tool.

💤 Kick devices off your network by performing an ARP Spoof attack..

🌰 An onion url inspector for inspecting deep web links..

DHCP exhaustion script written in python using scapy network library.

Bluetooth Python extension module.

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server…

RegRipper version 2.8.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing…

an easy pentesting tool..

A powerful and useful hacker dictionary builder for a brute-force attack.

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources..

E-mails, subdomains and names Harvester - OSINT .

Bidirectional data stream tunnelled in HTTP requests..

A python based LinkedIn enumeration tool.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server…

The Credential Mapper.

Tool to look for several security related Android application vulnerabilities.

Find your wireless network password in Windows , Linux and Mac OS.

Efficient and advanced man in the middle framework.

No description provided

SHELL SCANNER.

Infoga - Email OSINT.

SMB Protocol Bruteforce.

WAScan - Web Application Scanner.

WPSeku - Wordpress Security Scanner .

Facebook Hack Box .

Key Generator v1.66.

External pentest and bug bounty tool to perform subdomain enumeration through various techniques. SubScraper will…

Retrieve IP Geolocation information.

IP Tools To quickly get information about IP Address's, Web Pages and DNS records..

fsociety Hacking Tools Pack – A Penetration Testing Framework.

~ Shell Finder By Ⓜ Ⓐ Ⓝ Ⓘ Ⓢ Ⓢ Ⓞ ☪ ~.

Common User Passwords Profiler (CUPP).

CyberScan: Network's Forensics ToolKit.

50+ Hacking Tools Collection.

Hatch is a brute force tool that is used to brute force most websites.

Mercury is a hacking tool used to collect information and use the information to further hurt the target.

Crack and decrypt BLE encryption.

NKosec Encode, 2 side encode. change alphabet to numeric or back numeric to alphabet..

A tool to list plugins installed on a wordpress powered website..

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers..

Record X11 keypress events to a log file.

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎.

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter.

automated penetration toolkit.

A tool for exploiting Moxie Marlinspike's SSL "stripping" attack..

Automatically exported from code.google.com/p/creddump.

DKMC - Dont kill my cat - Malicious payload evasion tool.

No description provided

CMS auto detect and exploit..

A DNS reconnaissance tool for locating non-contiguous IP space..

Ultra-fast SNMPv1/v2 stack. Get/set/walk tens of thousands of hosts at once..

Python Remote Administration Tool (RAT).

HTA encryption tool for RedTeams.

Undetectable Windows Payload Generation.

Ubuntu chroot on termux.

SQL Injection Exploitation Tool.

iOS/macOS/Linux Remote Administration Tool.

MiFare Classic Universal toolKit (MFCUK).

Mifare Classic Offline Cracker.

A script to install a Fedora chroot into Termux.

Automated Mass Exploiter.

Automated pixieWps python script.

The official Exploit Database repository.

Directory/File, DNS and VHost busting tool written in Go.

Simple Fuzzer is a simple config-file driven block/mutation based fuzzing system.

OWASP WebScarab.

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications…

Framework for Rogue Wi-Fi Access Point Attack.

A brand new, awakened version of the old Spammer-Grab..

Fud Payload generator script.

An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance).

Get is a simple script to retrieve an ip from hostname or vice-versa ..

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts..

The New Hacking Framework.

PowerSploit - A PowerShell Post-Exploitation Framework.

Automatically exported from code.google.com/p/proxystrike.

Use a Fake image.jpg to exploit targets (hide known file extensions).

Meterpreter Paranoid Mode - SSL/TLS connections.

Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool).

Trojanize your payload - WinRAR (SFX) automatization - under Linux distros.

Trying to be the best tool to search for exploits in the terminal..

Search exploits in multiple exploit databases!.

MyServer is your own localhost web server. you can setup PHP, Apache, Nginx and MySQL servers on your android devices…

Tool-X is a kali linux hacking Tool installer. Tool-X developed for termux and other android terminals. using Tool-X…

Linux bash script automation for metasploit.

Firmware Analysis Tool.

Exploitation Framework for Embedded Devices.

A shellcode writing toolkit.

OWASP Joomla Vulnerability Scanner Project.

Look for a backdoor shell on the website.

CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM. .

IEEE 802.15.4/ZigBee Security Research Toolkit.

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes..

Enumeration of IP hops using existing TCP connections.

jSQL Injection is a Java application for automatic SQL database injection..

The ARP Scanner.

A unified console to perform the "kill chain" stages of attacks..

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks..

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF ..

Crack hashes in seconds..

A friend of SQLmap which will do what you always expected from SQLmap..

Striker is an offensive information and vulnerability scanner..

Most advanced XSS scanner..

Hack the World using Termux.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security. .

The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate…

newfft.

Perform a Ddos attack with Threads (Educational purpose).

Automatically exported from code.google.com/p/fern-wifi-cracker.

Automatically exported from code.google.com/p/ghost-phisher.

Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ).…

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help.…

this script automatically install any package for pentest with uptodate tools , and lazy command for run the tools…

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like…

This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc…

Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported).

Smart Meter Security Testing Framework.

Python script to inject existing Android applications with a Meterpreter payload..

D-TECT - Pentesting the Modern Web.

SMBMap is a handy SMB enumeration tool.

Application Layer DoS attack simulator.

The GUI frontend to the John the Ripper password cracker.

HT-WPS Breaker (High Touch WPS Breaker).

PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!.

No description provided

This is the development tree. For downloads please see:.

The Uidsploit Framework | Penetration Test Tool.

php-cli vulnerability scanner.

information gathering via dorks.

A script written lazily for generating cross-platform backdoors on the go :) .

Performs method enumeration and interrogation against flash remoting end points..

A JBoss script for obtaining remote shell access.

Automatic SQL injection and database takeover tool.

A bash script that provides sudo for Termux.

Damn Small SQLi Scanner.

Damn Small Vulnerable Web.

Damn Small XSS Scanner.

fork of http://thre.at/kalibrate/ for use with rtl-sdr devices.

Gloom-Framework :: Linux Penetration Testing Framework.

Nikto web server scanner.

website admin panel finder.

Tor anonimizer.

WPScan rewritten in Python + some WPSeku ideas.

Gathers information about a Particular IP address.

No description provided

wide range mass audit toolkit.

Websploit is an advanced MITM framework..

All in One Hacking Tool for Linux & Android.

Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search..

fire: CHAOS is a PoC that allow generate payloads and control remote operating systems..

eye: (s)AINT is a Spyware Generator for Windows systems written in Java. [Discontinued].

A framework for layer 2 attacks.

Rid_enum is a null session RID cycle attack for brute forcing domain controllers..

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here..

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs.

Facebook Video Downloader (CLI) For Linux Systems Coded in PHP.

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration…

A PHP Based Tool That Helps You To Manage All Your Backdoored Websites Efficiently..

Androspy framework is a Backdoor Crypter & Creator with Automatic IP Poisener.

SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi.

Information gathering tool - OSINT.

An advanced multithreaded admin panel finder written in python..

Reconnaissance Swiss Army Knife.

Generate unicode evil domains for IDN Homograph Attack and detect them..

Python wordlist generator .

Educational Phishing Tool & Information Collector .

bingip2hosts is a Bing.com web scraper that discovers websites by IP address.

Next generation web scanner.

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports…

This is a multi-use bash script for Linux systems to audit wireless networks..

IPv6 attack toolkit.

a client-only layer of protection from the wiretap/sniff/IDS analysis.

SQLMAP for Lazy People on Termux.

An advanced memory forensics framework.

websploit is an advanced MITM framework.

No description provided

The Rogue Access Point Framework.

An offline Wi-Fi Protected Setup brute-force utility.

🍓📡🍍Monitor illegal wireless network activities. (Fake Access Points), (WiFi Threats: KARMA Attacks, WiFi Pineapple,…

Network based protocol fuzzer.

DotDotPwn - The Directory Traversal Fuzzer.

WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals…

Brute-Forcing from Nmap output - Automatically attempts default creds on found services..

Facebook Information.

No description provided

Web application fuzzer.

giskismet – Wireless recon visualization tool.

Crappy cookie stealer.

CDPSnarf is a network sniffer exclusively written to extract information from CDP (Cisco Discovery Protocol) packets. .

The OWASP ZAP core project.

Koadic C3 COM Command & Control - JScript RAT.

WebPwn3r - Web Applications Security Scanner..]([

Termux-Kali - Install Kali Linux on Android using Termux!.]([