[Tool] 파이썬 기반 도구 모음

악성코드 검색 

https://github.com/MalwareReverseBrasil/malwaresearch

익스플로잇 검색

https://github.com/vulnersCom/getsploit

링크드인에서 정보검색

https://github.com/dchrastil/ScrapedIn

Online Hash Checker for Virustotal and Other Services

https://github.com/Neo23x0/munin

Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing

http://www.kitploit.com/2017/08/nili-tool-for-network-scan-man-in.html

PcapXray

https://github.com/Srinivas11789/PcapXray

포트스캐너

IP 노출 하지 않고 온라인 공개되어 있는 port 스캐너를 이용해서 포트스캔

https://github.com/vesche/scanless

XSS자동화

https://github.com/UltimateHackers/XSSight

https://securityonline.info/brutexss-v1-5-cross-site-scripting-tool/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost

post-exploitation framework

https://github.com/EmpireProject/Empire

https://github.com/interference-security/empire-web

파일 업로드 취약점 스캔

https://github.com/almandin/fuxploider

SQL Injection 취약점 검색

https://securityonline.info/visql-scan-sql-vulnerability-target-site-sites-server/

WAF BYPASS

https://github.com/SndVul/WAF_Bypass_Helper

jpeg 분석

https://blog.didierstevens.com/2018/01/29/new-tool-jpegdump-py/

Next Generation Firewall Bypass Tool

https://securityonline.info/fireaway-next-generation-firewall-bypass-tool/

detecting a firewall on a web application, and attempting to detect a bypass

https://github.com/Ekultek/WhatWaf

Malicious document

https://zairon.wordpress.com/2017/08/16/prothemus1-python-script-creates-malicious-document/

워드프레스 attack suite

http://www.kitploit.com/2017/04/wpforce-wordpress-attack-suite.html?utm_source=dlvr.it&utm_medium=facebook

https://www.n00py.io/2017/03/squeezing-the-juice-out-of-a-compromised-wordpress-server/

워드프레스 취약점 스캐너

https://github.com/m4ll0k/WPSeku

https://www.darknet.org.uk/2017/11/wpseku-black-box-remote-wordpress-security-scanner/

https://github.com/m4ll0k/WPSploit

S3 스캐너

https://github.com/sa7mon/S3Scanner

watchdog

https://github.com/flipkart-incubator/watchdog

ForensicPCAP

python을 활용한 pcap 분석 도구

https://github.com/madpowah/ForensicPCAP

ZARP

네트워크 공격

http://hack-tools.blackploit.com/2014/10/zarp-local-network-attack-framework.html?utm_source=dlvr.it&utm_medium=facebookd

analyzeDFIR

https://github.com/analyzedfir/analyzepf

morpheus

https://github.com/r00t-3xp10it/morpheus

풋프린팅

설명 

http://www.spiderfoot.net/

zip 크랙

https://blog.didierstevens.com/2017/05/20/update-zipdump-py-version-0-0-7/

인스타그램 brute

https://www.kitploit.com/2018/01/instagram-py-simple-instagram-brute.html

BruteSpray

BruteSpray takes nmap GNMAP/XML output and automatically brute-forces services with default credentials using Medusa. BruteSpray can even find non-standard ports by using the -sV inside Nmap.

https://github.com/x90skysn3k/brutespray

파이썬 키로거

https://github.com/mehulj94/Radium-Keylogger

undetected backdoor

https://github.com/Eitenne/TopHat

이메일 정보 수집

https://github.com/cys3c/infoga

칼리 툴을 리눅스에서 사용하게 하는 도구

https://github.com/lbarman/kali-tools

Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.

https://github.com/cryps1s/DARKSURGEON

Belati - The Traditional Swiss Army Knife for OSINT

http://www.kitploit.com/2017/06/belati-traditional-swiss-army-knife-for.html

wifite2

https://github.com/derv82/wifite2

create malicious document 

https://zairon.wordpress.com/2017/06/12/prothemus1-python-script-creates-malicious-document/

NXcrypt - Python Backdoor Framework

http://www.kitploit.com/2017/06/nxcrypt-python-backdoor-framework.html

SDNpwn toolkit

https://sdnpwn.net/tools/sdnpwn/

GIT miner

https://github.com/UnkL4b/GitMiner

bad pdf

https://github.com/deepzec/Bad-Pdf

team viewer pass dump

https://github.com/vah13/extractTVpasswords

----

vulscan nmap과 연동해서 취약점 검색

https://github.com/scipag/vulscan

RED HAWK - All In One Tool For Information Gathering, SQL Vulnerability Scannig and Crawling

http://www.kitploit.com/2017/06/red-hawk-red-hawk-is-all-in-one-tool.html?utm_source=dlvr.it&utm_medium=twitter

The Fastest Mixed Packet Injector Tool

https://www.darknet.org.uk/2017/07/t50-fastest-mixed-packet-injector-tool/

app blackbox assessment tool

https://github.com/chaitin/passionfruit

web-nmap

https://www.kitploit.com/2018/11/webmap-nmap-web-dashboard-and-reporting.html?utm_source=dlvr.it&utm_medium=facebook&m=1&fbclid=IwAR1H17VP6hkGWf7OjTwKk3jZyaEIMCNiXYTLz6qGq2LkZD79lWPGkCevabg

패킷캡쳐, 다이어그램

https://github.com/Srinivas11789/PcapXray

ssh pass steal

https://github.com/mthbernardes/sshLooter

패스워드 복구

https://github.com/AlessandroZ/LaZagne

오픈소스 도구 모음

https://github.com/We5ter/Scanners-Box

한글 취약점 스캐너

http://www.nurilab.net/hwpscan2

웹 어플리케이션 취약점 스캐너

https://www.vegabird.com/vooki/

linux-soft-exploit-suggester

https://github.com/belane/linux-soft-exploit-suggester