Skip to content
#

pentest-tool

Star

Here are 313 public repositories matching this topic...

Language: All
Filter by language
All 313 Python 149 Shell 40 Go 23 C 19 HTML 7 JavaScript 7 Perl 7 Ruby 7 PHP 6 PowerShell 6
Sort: Best match
Sort options
Best match Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

vanhauser-thc / thc-hydra

Star
Open

Hydra not decoding ^USER^ and ^PASS^ when passed as HTTP Headers

5
jhertz
jhertz commented Apr 17, 2020

Hi All,

So I'm trying to use hydra to bruteforce a login on a system that uses custom http headers to receive the username and password. Hydra does not seem to be doing substitution of ^USER^ and ^PASS^ when used as HTTP headers. If I issue issuing a call to hydra like this:

hydra "http-post://0.0.0.0:8000/:H=username\:^USER^:H=password\:^PASS^" -l admin -p admin

I see the following r

Read more
enhancement good first issue help wanted

TryCatchHCF / Cloakify

Star

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

security cryptography privacy cipher hacking steganography infosec pentesting pentest hacking-tool exfiltration red-team dlp data-exfiltration security-tools av-evasion pentest-tool stego hacking-tools pentest-tools
  • Updated May 27, 2020
  • Python

christophetd / CloudFlair

Star
Open

Test candidate origin servers on two ports HTTP & HTTPS

1
ELHARAKA
ELHARAKA commented Jan 29, 2020

I have been using this tool for awhile and i noticed 50% of the results are false positive. for i,e after cloudflair dump a list of ip addresses for the site origin server it can't detect which one is working so i after i take those ip addresses i test them manually on the both ports 443 & 80 some they work on 443 port and some they only work at 80 port.

Thank you so much for this amazing tool

Read more
enhancement good first issue

TryCatchHCF / DumpsterFire

Star

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

security automation hacking infosec pentesting pentest hacking-tool red-team security-tools pentest-tool blue-team hacking-tools red-teams blue-teams pentest-tools
  • Updated May 27, 2020
  • Python

Improve this page

Add a description, image, and links to the pentest-tool topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the pentest-tool topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.