Web Hack Tool Links

1 JULY 2023

WordPress admin finder: https://github.com/kancotdiq/wpafarrow-up-right Smb scanner tool: https://github.com/TechnicalMujeeb/smb-scannerarrow-up-right Heart Bleed scanner: https://github.com/TechnicalMujeeb/HeartBleedarrow-up-right Weevily php web shell: https://github.com/sunge/Weevelyarrow-up-right Webponized web shell: https://github.com/epinna/weevely3arrow-up-right Nikto web scanner tool: https://github.com/sullo/niktoarrow-up-right Auto Ip or domain Attacking Tool: https://github.com/Bhai4You/Ip-Attackarrow-up-right Clickjacking vulnerability scanner: https://github.com/D4Vinci/Clickjacking-Testerarrow-up-right All in 1 information gathering and web penetration tool DTect: https://github.com/Audi0x01/D-TECT-1arrow-up-right

Detect phishing URL: https://github.com/UndeadSec/checkURLarrow-up-right Dos attack tool - Golden eye: https://github.com/jseidl/GoldenEyearrow-up-right Dos attack with Hulk: https://github.com/grafov/hulkarrow-up-right

Sql vulnerability scanner: https://github.com/Pure-L0G1C/SQL-scannerarrow-up-right hack website with sqlmap: https://github.com/sqlmapproject/sqlmaparrow-up-right information and vulnerability scanner with striker: https://github.com/s0md3v/Strikerarrow-up-right webserver attacking tool with dost: https://github.com/verluchie/dost-attackarrow-up-right advanced multithreaded admin panel finder: https://github.com/s0md3v/Breacherarrow-up-right SSL vulnerability scanner: https://github.com/PortSwigger/ssl-scannerarrow-up-right sub lister - Subdomain enumeration: https://github.com/aboul3la/Sublist3rarrow-up-right WordPress vulnerability scanner and attacker: https://github.com/wpscanteam/wpscanarrow-up-right Hunner scanner framework: https://github.com/b3-v3r/Hunnerarrow-up-right Red Hawk all-in-1 information-gathering and scanning tool: https://github.com/Tuhinshubhra/RED_HAWKarrow-up-right Dos attack tool with Xerxes: https://github.com/sepehrdaddev/Xerxesarrow-up-right Social fish phishing tool: https://github.com/UndeadSec/SocialFisharrow-up-right weeman phishing tool no root: https://github.com/evait-security/weemanarrow-up-right WordPress security scanner Wpseku: https://github.com/m4ll0k/WPSekuarrow-up-right IDN homograph attack tool: https://github.com/UndeadSec/EvilURLarrow-up-right Detect security flaws with CMS: https://github.com/Dionach/CMSmaparrow-up-right Fire crack, admin, finders, deface, Bing Dorking, etc: https://github.com/Ranginang67/Firecrackarrow-up-right Pish web tool: https://github.com/Cabdulahi/pisharrow-up-right MITM attack tool: https://github.com/websploit/websploitarrow-up-right kill shot pen-testing framework:https://github.com/bahaabdelwahed/killshotarrow-up-right Villain:https://github.com/noxvix/Xss-Exploitationarrow-up-right DorkLab:https://github.com/rtwillett/DorkLabarrow-up-right Ninja UUID Shellcode Runner:https://github.com/boku7/Ninja_UUID_Runnerarrow-up-right sddl_py:https://github.com/t94j0/sddl_pyarrow-up-right DeFiVulnLabs:https://github.com/SunWeb3Sec/DeFiVulnLabsarrow-up-right

libcurl-crlf:https://github.com/W0rty/libcurl-crlfarrow-up-right Nvdsearch:https://github.com/optiv/nvdsearcharrow-up-right Max:https://github.com/knavesec/Maxarrow-up-right BOFMask:https://github.com/passthehashbrowns/BOFMaskarrow-up-right Nosey Parker:https://github.com/praetorian-inc/noseyparkerarrow-up-right NetSoc:https://github.com/XDeadHackerX/NetSoc_OSINTarrow-up-right cloud tool kit:https://github.com/404tk/cloudtoolkitarrow-up-right nomorecookies:https://github.com/AdvDebug/NoMoreCookiesarrow-up-right PDFator:https://github.com/smokeme/PDFatorarrow-up-right Golddigger:https://github.com/ustayready/golddiggerarrow-up-right TakemyRDP:https://github.com/TheD1rkMtr/TakeMyRDParrow-up-right Recycled Injector: https://github.com/florylsk/RecycledInjectorarrow-up-right AuRA - Auth. Request Analyser: https://github.com/lauritzh/auth-request-analyserarrow-up-right awesome-linux-attack-forensics-purplelabs: https://github.com/cr0nx/awesome-linux-attack-forensics-purplelabsarrow-up-right Pulling SYSTEM out of Windows GINA: https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/adselfpwnplus/adselfpwnplus.mdarrow-up-right Tiny Tracer: https://github.com/hasherezade/tiny_tracerarrow-up-right Chaos Client: https://github.com/projectdiscovery/chaos-clientarrow-up-right IAT- Tracer: https://github.com/YoavLevi/IAT-Tracerarrow-up-right CMSeeK: https://github.com/Tuhinshubhra/CMSeeKarrow-up-right

DOMSCAN: https://github.com/lauritzh/domscanarrow-up-right Mini shell: https://github.com/Mr-7Mind/MiniShellarrow-up-right Plugin for Steampipe: https://github.com/sensepost/steampipe-plugin-projectdiscoveryarrow-up-right XMap: https://github.com/idealeer/xmaparrow-up-right Vmwgfx_doublefree: https://github.com/whiteHat001/Vmwgfx_doublefreearrow-up-right Inceptor: https://github.com/klezVirus/inceptorarrow-up-right BrowserBoxPro: https://github.com/dosyago/BrowserBoxProarrow-up-right Invoke Pre2kSpray: https://github.com/eversinc33/Invoke-Pre2kSprayarrow-up-right bouheki: https://github.com/mrtc0/bouhekiarrow-up-right Winsocky: https://github.com/WKL-Sec/Winsockyarrow-up-right MMdb-server: https://github.com/adulau/mmdb-serverarrow-up-right route-detect: https://github.com/mschwager/route-detectarrow-up-right Evil QR: https://github.com/kgretzky/evilqrarrow-up-right Decrypt Chrome Passwords: https://github.com/ohyicong/decrypt-chrome-passwordsarrow-up-right Decree: https://github.com/GiantSeaweed/DECREEarrow-up-right ShellGhost: https://github.com/lem0nSec/ShellGhostarrow-up-right Free route: https://github.com/admitrievsky/freeroutearrow-up-right

Last updated