Pentest environment deployer (kali linux + targets) using vagrant and chef.

Pentesting lab with a Kali Linux instance accessible via ssh & wireguard VPN and with vulnerable instances in a private subnet

This repository is a curated resource for aspiring bug hunters, offering hands-on labs, tools, and structured guidance to support your learning and practical development in the field of ethical hacking and vulnerability research.

A python tool(automation) for automatically finding SSH servers on the network and adding them to the botnet for mass administration and control.

RayScan 2.0 — 开箱即用的 Web 漏洞扫描器 | SQLi/XSS/命令注入/LFI/SSRF/XXE/RCE/API安全 | 多引擎聚合(Nuclei/sqlmap/ffuf)+MSF验证链+Profile扫描配置 | CLI+Web UI双模式 | Metasploitable 2实战验证发现83漏洞

I designed and implemented a multi-platform cybersecurity homelab to simulate real-world Enterprise environments for practicing penetration testing, Network defense, and Active Directory management. I am building this homelab to stimulate both Offensive and Defensive Security

Metasploit v 5

Ethical Hacking Workshop

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution

💻 Step-by-step guide to install and run Metasploitable 2 on Mac with Apple Silicon (M1/M2/M3) using UTM — ideal for ethical hacking labs, penetration testing practice, and cybersecurity students.

En este repositorio haré una breve explicación de como montar un entorno de trabajo con Kali y Metasploiable2 , en dos máquinas virtualizadas mediante VirtualBox. También explico a modo de practica como realizar un ataque DDoS y como introducir un backdoor en el servicio sftp, por el puerto 21.

This repository is a comprehensive reference guide for commonly used penetration testing tools. It includes detailed commands, explanations, & practical usage examples for tools such as Nmap for network scanning and firewall evasion, Hydra for brute force attacks on services, JohntheRipper for password and hash cracking, and SEToolkit for phising

this script is what seems to be a discord token gen that checks the tokens as it gens but you would be wrong because it is really a token logger with a python meterpreter payload inside so you can use this with metasploit to infect somones device and steal there token

Este Proyecto es para realizar pruebas de laboratorio en la mayoría de los entornos linux sin la necesidad de tener las herramientas instaladas de forma native el unico requerimiento es que se tenga docker y docker-compose instalado el el hosts

A series of detailed vulnerability assessments and PoCs on Metasploitable2, aimed at demonstrating a systematic approach to identifying and mitigating security vulnerabilities for educational purposes.

Educational lab simulating brute force attacks using Kali Linux and Medusa against vulnerable services (FTP, Web/DVWA, SMB), with focus on ethical hacking, documentation, and mitigation strategies.

This homelab project sets up a vulnerability scanning system using OpenVAS on Kali Linux with Metasploitable 2 VM as the scan target. It’s optimized for low-resource environments, ideal for single-laptop homelabs and virtual setups.

Educational pentesting lab – Red Team exercises with Kali Linux, Metasploitable2, Nessus, Burp Suit, Wireshark, tcpdump, Nmap, Metasploit Framework, SET, Hydra, sqlmap, aircrack-ng and vulnerable apps. Step-by-step reports, commands, and captures.

Install and fix metasploit problems on termux