A collection of tools written in Go, Bash, Python, and PowerShell to assist in various penetration testing and security assessment tasks.
Crawler.go: A simple web crawler written in Go that spiders a web application to discover and list all accessible URLs.HostHeaderInjection.go: This Go program is designed to test web applications for Host Header Injection vulnerabilities by sending crafted HTTP requests.MemoryAddressToHex.sh: A Bash script that converts memory addresses to little-endian format and then into their corresponding hexadecimal representation, which is useful in binary exploitation.SMBPentest.sh: This script automates a series of test cases for performing SMB penetration tests, including enumeration of shares and users, vulnerability scanning, and checking for null session access.WebTest.sh: A script that checks for a list of common, potentially vulnerable web endpoints across a range of ports provided in a file.PingSweep.ps1: A PowerShell script that performs a ping sweep on a list of IP addresses or hostnames from a text file and exports the results to a CSV file.ConvertHexDecReverse.py&ConvertHexDecReverse.sh: These scripts (available in both Python and Bash) provide functions to convert between hexadecimal and decimal values, including a feature to perform a "reversed hex" or negation operation.CloneBitbucketProject.sh: A Bash script to recursively clone all repositories within a specified Bitbucket project.FetchResponseCode.sh: This script takes a file containing a list of hosts and checks for the HTTP and HTTPS response codes on ports 80 and 443.String_in_urls.sh: A simple Bash script that reads a list of URLs from a file and determines if they are accessible or return a "404 Not Found" error.NTP_pentest.sh: A script to perform a variety of enumeration tests against an NTP server to gather information.Wordpress_Scanner.sh: This script identifies WordPress installations from a list of domains and then initiates awpscanon the discovered sites.Puppet_Pentest.py: A Python script that checks for common information disclosure and access control vulnerabilities in a Puppet Server setup.semgrep_runner.py: This script allows you to run Semgrep, a static analysis tool, across multiple directories with a collection of custom YAML rule files.PHPCredentialFinder.py: A Python script designed to recursively scan a directory of PHP files to find hardcoded credentials.Bulk_Delete.sh: A simple Bash utility script to delete a list of directories that are specified in an input file.SMTP_Server.py: A basic SMTP server written in Python, useful for quickly setting up a mail server for testing and debugging email-related functionalities.HTTPS_Server.py: A Python script that starts a simple HTTPS server capable of handling both GET and POST requests, useful for local testing and development.nikto_parse.sh: A script to parse the output of multiple Nikto scans, identify missing security headers, and group the findings by IP address and port.