# Dangerous web pentest github tools collection

**URL:** <https://onehack.st/t/dangerous-web-pentest-github-tools-collection/164047>\
**Category:** Tools & Scripts\
**Tags:** tools, programming\
**Created:** [November 27, 2020, 8:10am UTC](https://onehack.st/t/dangerous-web-pentest-github-tools-collection/164047 "2020-11-27T08:10:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![muneebwanee](https://onehack.st/user_avatar/onehack.st/muneebwanee/32/75864_2.png) [@muneebwanee](https://onehack.st/u/muneebwanee)\
**Post date:** [November 27, 2020, 8:10am UTC](https://onehack.st/t/dangerous-web-pentest-github-tools-collection/164047/1 "2020-11-27T08:10:02Z")

</div>

JOOMLA SCAN  
[https://github.com/drego85/JoomlaScan](https://github.com/drego85/JoomlaScan)

SN1PER - AUTOMATED PENTEST RECON SCANNER  
[https://github.com/1N3/Sn1per](https://github.com/1N3/Sn1per)

SUBLIST3R - DNS SCAN [https://github.com/aboul3la/Sublist3r](https://github.com/aboul3la/Sublist3r)

PENTEST TOOL - CTF-TOOLS [https://github.com/MrMugiwara/CTF-Tools](https://github.com/MrMugiwara/CTF-Tools)

A PRIVACY-RESPECTING, HACKABLE METASEARCH ENGINE [https://github.com/asciimoo/searx](https://github.com/asciimoo/searx)

CMSMAP SCANNER CMS AUTMOMATIC [https://github.com/Dionach/CMSmap](https://github.com/Dionach/CMSmap)

D-TECT - PENTESTING THE MODERN WEB [https://github.com/shawarkhanethicalhacker/D-TECT-1](https://github.com/shawarkhanethicalhacker/D-TECT-1)

JSQL INJECTION V0.77 - JAVA APPLICATION FOR AUTOMATIC SQL DATABASE INJECTION [https://github.com/ron190/jsql-injection](https://github.com/ron190/jsql-injection)

WAFNINJA - PENETRATION TESTERS FAVORITE FOR WAF BYPASSING [https://github.com/khalilbijjou/WAFNinja](https://github.com/khalilbijjou/WAFNinja)

WHITEWIDOW 1.5.0 - SQL VULNERABILITY SCANNER [https://github.com/Ekultek/whitewidow](https://github.com/Ekultek/whitewidow)

GOOGLE EXPLORER - GOOGLE MASS EXPLORER [https://github.com/anarcoder/google\_explorer](https://github.com/anarcoder/google_explorer)

WORDPRESS MASS EXPLOITER [https://github.com/anarcoder/WordPressMassExploiter](https://github.com/anarcoder/WordPressMassExploiter)

JOOMLA MASS EXPLOITER [https://github.com/anarcoder/JoomlaMassExploiter](https://github.com/anarcoder/JoomlaMassExploiter)

BBQSQL - A BLIND SQL INJECTION EXPLOITATION TOOL [https://github.com/Neohapsis/bbqsql](https://github.com/Neohapsis/bbqsql)

VBSCAN 0.1.7.1 - BLACK BOX VBULLETIN VULNERABILITY SCANNER [https://github.com/rezasp/vbscan/](https://github.com/rezasp/vbscan/)

DRACNMAP - PENTEST EXPLOIT NETWORK AND GATHERING INFORMATION WITH NMAP [https://github.com/screetsec/Dracnmap](https://github.com/screetsec/Dracnmap)

QRLJACKER - QRLJACKING EXPLOITATION FRAMEWORK [https://github.com/OWASP/QRLJacking/tree/master/QrlJacking-Framework](https://github.com/OWASP/QRLJacking/tree/master/QrlJacking-Framework)

ONIOFF - ONION URL INSPECTOR  
[https://github.com/k4m4/onioff](https://github.com/k4m4/onioff)

BLACKBOX - A PENETRATION TESTING FRAMEWORK [https://github.com/sepehrdaddev/blackbox](https://github.com/sepehrdaddev/blackbox)

BRUTEFORCE LISTS [https://github.com/random-robbie/bruteforce-lists](https://github.com/random-robbie/bruteforce-lists)

DRUPAL ENUMERATION & EXPLOITATION TOOL [https://github.com/random-robbie/drupwn](https://github.com/random-robbie/drupwn)

DIRSEARCH WEB PATH SCANNER [https://github.com/maurosoria/dirsearch](https://github.com/maurosoria/dirsearch)

PHP UNIT BRUTE [https://github.com/random-robbie/phpunit-brute](https://github.com/random-robbie/phpunit-brute)

MINI PHP SHELLS [https://github.com/random-robbie/mini-php-shells](https://github.com/random-robbie/mini-php-shells)

AUTO RECON INFORMATION GATHERING TOOL [https://github.com/random-robbie/AutoRecon](https://github.com/random-robbie/AutoRecon)

WORDPRESS SMTP PLUGIN EXPLOIT [https://github.com/KTN1990/WordPress-Easy-WP-SMTP-plugin-0day](https://github.com/KTN1990/WordPress-Easy-WP-SMTP-plugin-0day)

PHOTON WEB CRAWLER (OSINT) [https://github.com/s0md3v/Photon](https://github.com/s0md3v/Photon)

ACID REVERSE IP LOOKUPER [https://github.com/KTN1990/ACIDREVERSER](https://github.com/KTN1990/ACIDREVERSER)

EMAIL LIST GRABBER V2 [https://github.com/KTN1990/Email-Grabber](https://github.com/KTN1990/Email-Grabber)

JOOMLA COM\_XCLONER UPLOAD SHELL [https://github.com/KTN1990/joomla-com\_xcloner-upload\_shell](https://github.com/KTN1990/joomla-com_xcloner-upload_shell)

POSTGRESQL DEFAULT PASSWORD AUTO EXPLOITER [https://github.com/KTN1990/PostgreSQL--Attack-on-default-password-AUTOEXPLOITING-](https://github.com/KTN1990/PostgreSQL--Attack-on-default-password-AUTOEXPLOITING-)

BREACHER - MULTITHREAD ADMIN PANEL FINDER [https://github.com/s0md3v/Breacher](https://github.com/s0md3v/Breacher)

SHIVA - WORDPRESS DOS EXPLOIT TOOL [https://github.com/s0md3v/Shiva](https://github.com/s0md3v/Shiva)

PROXIFY MODULE FOR DUMP PROXIES [https://github.com/s0md3v/proxify](https://github.com/s0md3v/proxify)

XSS FINDER (REFLECTED XSS) [https://github.com/random-robbie/xssfinder](https://github.com/random-robbie/xssfinder)

MASSIVE | MIXED EXPLOIT TOOLS [https://github.com/XiphosResearch/exploits](https://github.com/XiphosResearch/exploits)

WORDPRESS USER ENUMERATION TOOL [https://github.com/XiphosResearch/wp-user-enum-scripts](https://github.com/XiphosResearch/wp-user-enum-scripts)

MASS WORDPRESS SHELL UPLOADER[REPAIRED] [https://t.me/viperzcrewchat/13604](https://t.me/viperzcrewchat/13604)

MASS EXPLOITER SLIDERS REVOLUTION SHOWBIZ WORDPRESS [https://t.me/viperzcrewchat/13605](https://t.me/viperzcrewchat/13605)

WORDPRESS EXPLOITATION FRAMEWORK [https://github.com/rastating/wordpress-exploit-framework](https://github.com/rastating/wordpress-exploit-framework)

DEFACE WORDPRESS PAGE [https://github.com/Bayz21/WP-3u3](https://github.com/Bayz21/WP-3u3)

WORDPRESS PLUGIN “WP CHECKOUT” MASS EXPLOIT [https://github.com/2inf3rnal/wp-checkout-exploit](https://github.com/2inf3rnal/wp-checkout-exploit)

WP CONTENT INJECTION MASS EXPLOIT TOOL [https://github.com/dr-iman/wp-content-injection-mass-exploit](https://github.com/dr-iman/wp-content-injection-mass-exploit)

M3M0 PENETRATION TESTING TOOL (WORDPRESS, JOOMLA, DRUPAL) [https://github.com/mrwn007/M3M0.git](https://github.com/mrwn007/M3M0.git)

DRUPAL HUNTER EXPLOITATION TOOL [https://github.com/dr-iman/Drupal-Hunter](https://github.com/dr-iman/Drupal-Hunter)

CMS DETECTOR v2 (WP, DUPAL, JOOMLA) [https://github.com/dr-iman/cms-detector](https://github.com/dr-iman/cms-detector)

WORDPRESS DETECTOR (VULN DORKER) [https://github.com/dr-iman/Wordpress-detector](https://github.com/dr-iman/Wordpress-detector)

PACKET STORM EXPLOIT LIST [https://github.com/BuddhaLabs/PacketStorm-Exploits](https://github.com/BuddhaLabs/PacketStorm-Exploits)

_ **Thanks** _