P

pentest

ISAF aims to be a framework that provides the necessary tools for the correct security audit of industrial (OT) environments.

MagicArch is a comprehensive post-installation script built with Ansible, designed to transform a basic Arch Linux installation into a fully equipped Pentesting Distro customized for pentesting and performance. With a focus on security assessments, customization, and performance optimization, MagicArch simplifies the setup process and ensures a tailored environment for pentesting tasks.

Ce projet documente les étapes d'installation et de configuration d'Exegol et de Portainer avec Docker sur un environnement Arch Linux, spécialement adapté pour Hyprland. Il fournit un script automatisé et des instructions détaillées pour simplifier l'installation sur cette distribution, avec des captures d'écran à chaque étape clé.

Arducky - Arduino Ducky Script Interpreter

XSS is a simple shell tool developed to test Cross-Site Scripting (XSS) vulnerabilities on websites.

Un script avancé d’audit de sécurité et de pentesting alliant furtivité, détection adaptative, intelligence de vulnérabilités et analyses OS pour une évaluation réseau exhaustive. Conçu pour les professionnels, il allie automatisation et précision pour répondre aux environnements les plus complexes.

Uso de VANTS e Drones para Pentest de Wireless

Lab Docker dựng CMS Made Simple 2.2.5 (Wawa) và tái hiện CVE-2018-1000094 (authenticated RCE). Bao gồm hướng dẫn setup, PoC, và tài liệu kiểm thử.

Powershell Empire in Docker

C.A.R.P. is a pentest tool that delivers a remote, browser-in-the-browser experience for multi-campaign phishing, credential capture, and session hijacking (bypassing MFA). A target user visits a campaign URL they see a full-screen browser (noVNC + Firefox) that loads a target site you configure (e.g. a login page). Each visitor gets their own isolated Docker container, so sessions don’t mix. Keystrokes are logged per session, and you manage everything (campaigns, sessions, keylogs, idle timeouts) from a single Admin UI.

SSH config files can get complicated when creating tunnels, so this Ruby gem helps with that process.

Pentesting tools in a Docker image

Repositório sobre estudos, pesquisas e desenvolvimento para PenTest.

A ToolKit that automatically installs & configures all the Tools needed to turn your Daily Driver Linux Distro into a Pentesting Machine