Attack Open Source Projects

ALL IN ONE Hacking Tool For Hackers

HTTP load testing tool and library. It's over 9000!

Checklist of the most important security countermeasures when designing, testing, and releasing your API

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Affordable WiFi hacking platform for testing and learning

The Rogue Access Point Framework

Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat

A curated list of CTF frameworks, libraries, resources and softwares

The Browser Exploitation Framework Project

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Rewrite of the popular wireless network auditor, "wifite"

A list of web application security

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams

Fluxion is a remake of linset by vk496 with enhanced functionality.

Rack middleware for blocking & throttling

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Rails for API only applications

Cameradar hacks its way into RTSP videosurveillance cameras

SwiftSoup: Pure Swift HTML Parser, with best of DOM, CSS, and jquery (Supports Linux, iOS, Mac, tvOS, watchOS)

defeating the latest version of ReCaptcha with 91% accuracy

w3af: web application attack and audit framework, the open source web vulnerability scanner.

📦 Make security testing of K8s, Docker, and Containerd easier.

⚡️An awesome list of the best Termux hacking tools

Web Attack Cheat Sheet

SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi Edit By samsesh for termux on android

APT & CyberCriminal Campaign Collection

🎯 SQL Injection Payload List

Git All the Payloads! A collection of web attack payloads.

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Generate HTTP load and plot the results in real-time

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

ipsets dynamically updated with firehol's update-ipsets.sh script

Deserialization payload generator for a variety of .NET formatters

Automation for internal Windows Penetrationtest / AD-Security

Various public documents, whitepapers and articles about APT campaigns

Rapidly Search and Hunt through Windows Forensic Artefacts

TextAttack 🐙 is a Python framework for adversarial attacks, data augmentation, and model training in NLP https://textattack.readthedocs.io/en/master/

ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32

Hash collisions and exploitations

Automated NoSQL database enumeration and web application exploitation tool.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Project Wycheproof tests crypto libraries against known attacks.

Interesting APT Report Collection And Some Special IOCs

🔥Open source RASP solution

A Python toolbox to create adversarial examples that fool neural networks in PyTorch, TensorFlow, and JAX

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic

:bomb: Impulse Denial-of-service ToolKit

Defeating Google's audio reCaptcha with 85% accuracy.

WebAssembly Virtual Machine

Gets the job done when JSON.stringify can't

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

💤 Kick devices off your network by performing an ARP Spoof attack.