A front-end JavaScript toolkit for creating DNS rebinding attacks
#penetration-testing tools
236 results · page 3
DNS spoofer tool for redirecting DNS lookup requests.
A directory traversal fuzzer for finding and exploiting directory traversal vulnerabilities.
A DNS rebinding exploitation framework
A wargame that challenges your hacking skills
A Docker container that starts a SSH honeypot and reports statistics to the SANS ISC DShield project
echoCTF is a computer security framework for running cybersecurity exercises and competitions like Capture the Flag, used for network penetration testing and security auditing.
Endlessh is an SSH tarpit that traps SSH clients by sending an endless, random SSH banner.
Interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features
A suite for man in the middle attacks, featuring sniffing of live connections, content filtering, and protocol dissection.
A cross-platform tool for creating malicious MS Office documents with hidden VBA macros and anti-analysis features.
A standalone man-in-the-middle attack framework used for phishing login credentials and bypassing 2-factor authentication.
A CVE compliant archive of public exploits and corresponding vulnerable software, and a categorized index of Internet search engine queries designed to uncover sensitive information.
A smart SSRF scanner using different methods like parameter brute forcing in post and get requests.
A web application and remote desktop screenshot utility that captures screenshots of websites, RDP services, and VNC servers. Free and open-source tool for reconnaissance and reporting.
A tool for testing Cross Site Scripting vulnerabilities
A Python-based tool for identifying and exploiting file inclusion and directory traversal vulnerabilities in web applications.
Automated blind-xss search for Burp Suite
A fast and simple recursive content discovery tool
ffufai is an AI-enhanced wrapper for ffuf that automatically suggests file extensions for web fuzzing based on the target URL and headers.
A vulnerability scanner that helps you identify and fix vulnerabilities in your code
An application security testing platform that combines automated scanning, AI assistance, and manual expert testing to provide continuous security assessment throughout the software develop…
Fridump is an open source memory dumping tool using the Frida framework for dumping memory addresses from various platforms.
A tool for enumerating and attacking GitHub Actions pipelines
Load more tools
Showing 72 of 236