Tools: automation (91)

Automated penetration toolkit.

Should help with automating some of the user-focused enumeration tasks during an internal penetration test.

This script communicates with the Nessus API in an attempt to help with automating scans.

Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner.

Specify targets and run sets of tools against them.

A tool to quickly enumerate AWS S3 buckets to look for loot.

Fully configurable and extendable Bash obfuscation framework.

Automatically brute force all services running on a target.

Automates password cracking tasks using optimized dictionaries and mangling rules.

The only cheat sheet you need.

Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking.

Automates the fingerprinting, reconnaissance, and exploitation phases of an application server attack.

The CLI tool for GitHub CodeQL

Leverages publicly available datasets from Google BigQuery to generate wordlists.

Easily create word's permutation and combination to generate complex wordlists and passwords.

Automate getting Domain Admin using Empire.

Golang tool to automate google dork scan against the entire internet or specific targets.

Tool to exploit the network and gathering information with nmap help.

A simple tool to dump users in popular forums and CMS.

A bash script that leverages ettercap and other tools to obtain credentials.

Easy Windows Domain Access Script.

Linux post-exploitation framework made by linux user.

A PowerShell and Python post-exploitation agent.

Find exploits in local and online databases instantly.

Automates file system mirroring through remote file disclosure vulnerabilities on Linux machines.

A framework for running a series of tools.

Tool for searching Exploits from Exploit Databases, etc.

Google mass exploit robot - Make a google search, and parse the results for a especific exploit you define.

A tool that automates queries against Google search appliances, but with a twist.

A shell for with Pythonect-like syntax, including wrappers for commonly used security tools.

CLI tool for open source and threat intelligence.

A tool for automating cracking methodologies through Hashcat.

Modern and malleable post-exploitation command and control framework.

Post-exploitation framework.

PowerShell Remote Download Cradle Generator & Obfuscator.

Cmd.exe Command Obfuscation Generator & Detection Test Harness.

PowerShell Obfuscator.

Simple shell scripts to handle POSIX entries in an LDAP directory.

Tool to attack AD on UNIX.

Evil Twin Attack Bash script - An automated WPA/WPA2 hacker.

Tool to generate wordlists based on lyrics.

Masscan integrated with Shodan API.

A collection of tools and exploits with a cli ui for mass exploitation.

Graphical tool for custom wordlist generation.

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

db_autopwn plugin of metasploit.

Shell Script for launching a Fake AP with karma functionality and launches ettercap for packet capture and traffic manip

Msfvenom payload creator.

A Metasploit auto auxiliary script.

This project aims to be a wordlist mutator with hormones, which means that some mutations will be applied to the result

Automated Penetration Testing Framework.

A Python library for automating the falsification of NFS credentials when mounting an NFS share.

Userland NFS command tool.

Python tool to automate exploit MongoDB server IP on Internet anddisclose the database data by MongoDB default configura

A modular framework designed to chain and automate security tests.

Internal pentest framework running in your browser via WebAssembly, powerd by Pyodide

Open Source Security Compliance Solution.

A tool that automates the process of search and retrieval of content for common log and config files through LFI vulnera

Hacking systems with the automation of PasteJacking attacks.

Passive recon / OSINT automation script.

A Penetration Testing Framework - The Tool With All The Tools.

A penetration testing tool empowered by ChatGPT. It is designed to automate the penetration testing process.

A bash script for recon and DOS attacks.

A dynamic binary instrumentation tool.

Automate a number of techniques commonly performed on internal network penetration tests after a low privileged account

Opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly writte

A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter.

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

Personalized wordlist generator with NLP, by analyzing tweets (A.K.A crunch2049).

Security compliance content in SCAP, Bash, Ansible, and other formats.

SCAP Scanner And Tailoring Graphical User Interface.

1337Day Online Exploit Scanner.

Simple command-line tool aimed to help pentesters quickly generate one-liner reverse/bind shells in multiple languages.

Generate easy and sophisticated reverse or bind shell commands.

A script for generating common revshells fast and easy.

A payload generator.

A modular tool written in bourne shell and designed to chain and automate security tools and tests.

Automated Pentest Recon Scanner.

Fetch, install and search exploit archives from exploit sites like exploit-db and packetstorm.

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

TheFatRat a massive exploiting tool: easy tool to generate backdoor and easy tool to post exploitation attack.

Script to redirect all traffic through tor network including dns queries for anonymizing entire system.

Highly flexible and scriptable password dictionary generator based on Python.

Tools for generating usernames when penetration testing.

Valhalla API Client.

Easy 802.1Q VLAN Hopping

Script to automate searching and auditing Wi-Fi networks with weak security.

A script to generate wordlists out of wikipedia pages.

Python framework for IT security tools.

A shell script written with the purpose to automate and chain scans via nmap.