# Web Hack Tool Links

1 JULY 2023

WordPress admin finder: <https://github.com/kancotdiq/wpaf>\
\
Smb scanner tool: <https://github.com/TechnicalMujeeb/smb-scanner>\
\
Heart Bleed scanner: <https://github.com/TechnicalMujeeb/HeartBleed>\
&#x20;\
Weevily php web shell: <https://github.com/sunge/Weevely> \
\
Webponized web shell: <https://github.com/epinna/weevely3> \
\
Nikto web scanner tool: <https://github.com/sullo/nikto> \
\
Auto Ip or domain Attacking Tool: <https://github.com/Bhai4You/Ip-Attack> \
\
Clickjacking vulnerability scanner: <https://github.com/D4Vinci/Clickjacking-Tester> \
\
All in 1 information gathering and web penetration tool DTect: <https://github.com/Audi0x01/D-TECT-1>&#x20;

Detect phishing URL: <https://github.com/UndeadSec/checkURL>\
&#x20;\
Dos attack tool - Golden eye: <https://github.com/jseidl/GoldenEye> \
\
Dos attack with Hulk: <https://github.com/grafov/hulk>&#x20;

Sql vulnerability scanner: <https://github.com/Pure-L0G1C/SQL-scanner> \
\
hack website with sqlmap: <https://github.com/sqlmapproject/sqlmap> \
&#x20;\
information and vulnerability scanner with striker: <https://github.com/s0md3v/Striker> \
\
webserver attacking tool with dost: <https://github.com/verluchie/dost-attack> \
\
advanced multithreaded admin panel finder: <https://github.com/s0md3v/Breacher> \
\
SSL vulnerability scanner: <https://github.com/PortSwigger/ssl-scanner>\
\
sub lister - Subdomain enumeration: <https://github.com/aboul3la/Sublist3r> \
\
WordPress vulnerability scanner and attacker: <https://github.com/wpscanteam/wpscan> \
\
&#x20;Hunner scanner framework: <https://github.com/b3-v3r/Hunner> \
\
Red Hawk all-in-1 information-gathering and scanning tool: <https://github.com/Tuhinshubhra/RED_HAWK> \
\
Dos attack tool with Xerxes: <https://github.com/sepehrdaddev/Xerxes> \
\
Social fish phishing tool: <https://github.com/UndeadSec/SocialFish> \
\
weeman phishing tool no root: <https://github.com/evait-security/weeman> \
\
WordPress security scanner Wpseku: <https://github.com/m4ll0k/WPSeku>  \
\
IDN homograph attack tool: <https://github.com/UndeadSec/EvilURL> \
\
Detect security flaws with CMS: <https://github.com/Dionach/CMSmap> \
\
Fire crack, admin, finders, deface, Bing Dorking, etc: <https://github.com/Ranginang67/Firecrack> \
\
Pish web tool: <https://github.com/Cabdulahi/pish>\
\
MITM attack tool: <https://github.com/websploit/websploit> \
\
kill shot pen-testing framework:<https://github.com/bahaabdelwahed/killshot>\
\
Villain:<https://github.com/noxvix/Xss-Exploitation>\
\
DorkLab:<https://github.com/rtwillett/DorkLab>\
\
Ninja UUID Shellcode Runner:<https://github.com/boku7/Ninja_UUID_Runner>\
\
sddl\_py:<https://github.com/t94j0/sddl_py>\
\
DeFiVulnLabs:<https://github.com/SunWeb3Sec/DeFiVulnLabs>

libcurl-crlf:<https://github.com/W0rty/libcurl-crlf>\
\
Nvdsearch:<https://github.com/optiv/nvdsearch>\
\
Max:<https://github.com/knavesec/Max>\
\
BOFMask:<https://github.com/passthehashbrowns/BOFMask>\
\
Nosey Parker:<https://github.com/praetorian-inc/noseyparker>\
\
NetSoc:<https://github.com/XDeadHackerX/NetSoc_OSINT>\
\
cloud tool kit:<https://github.com/404tk/cloudtoolkit>\
\
nomorecookies:<https://github.com/AdvDebug/NoMoreCookies>\
\
PDFator:<https://github.com/smokeme/PDFator>\
\
Golddigger:<https://github.com/ustayready/golddigger>\
\
TakemyRDP:<https://github.com/TheD1rkMtr/TakeMyRDP>\
\
Recycled Injector: <https://github.com/florylsk/RecycledInjector>\
\
AuRA - Auth. Request Analyser: <https://github.com/lauritzh/auth-request-analyser>\
\
awesome-linux-attack-forensics-purplelabs: <https://github.com/cr0nx/awesome-linux-attack-forensics-purplelabs>\
\
Pulling SYSTEM out of Windows GINA: <https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/adselfpwnplus/adselfpwnplus.md>\
\
Tiny Tracer: <https://github.com/hasherezade/tiny_tracer>\
\
Chaos Client: <https://github.com/projectdiscovery/chaos-client>\
\
IAT- Tracer: <https://github.com/YoavLevi/IAT-Tracer>\
\
CMSeeK: <https://github.com/Tuhinshubhra/CMSeeK>

DOMSCAN: <https://github.com/lauritzh/domscan>\
\
Mini shell: <https://github.com/Mr-7Mind/MiniShell>\
\
Plugin for Steampipe: <https://github.com/sensepost/steampipe-plugin-projectdiscovery>\
\
XMap: <https://github.com/idealeer/xmap>\
\
Vmwgfx\_doublefree: <https://github.com/whiteHat001/Vmwgfx_doublefree>\
\
Inceptor: <https://github.com/klezVirus/inceptor>\
\
BrowserBoxPro: <https://github.com/dosyago/BrowserBoxPro>\
\
Invoke Pre2kSpray: <https://github.com/eversinc33/Invoke-Pre2kSpray>\
\
bouheki:  <https://github.com/mrtc0/bouheki>\
\
Winsocky: <https://github.com/WKL-Sec/Winsocky>\
\
MMdb-server: <https://github.com/adulau/mmdb-server>\
\
route-detect: <https://github.com/mschwager/route-detect>\
\
Evil QR: <https://github.com/kgretzky/evilqr>\
\
Decrypt Chrome Passwords: <https://github.com/ohyicong/decrypt-chrome-passwords>\
\
Decree: <https://github.com/GiantSeaweed/DECREE>\
\
ShellGhost: <https://github.com/lem0nSec/ShellGhost>\
\
Free route: <https://github.com/admitrievsky/freeroute>
