The main features of orf/xcat are: Web Exploitation.
Open-source alternatives to orf/xcat include: manisso/fsociety — fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits.… andresriancho/w3af — w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities… ambionics/phpggc — PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or… cujanovic/ssrf-testing — SSRF (Server Side Request Forgery) testing resources. enjoiz/xxeinjector — Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods. almandin/fuxploider — fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file…
fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits. It functions as a wrapper that integrates external security binaries into a unified, menu-driven interface, providing a centralized system for command-line parameter mapping and execution. The project distinguishes itself by organizing specialized utilities into domain-specific collections for structured navigation. It automates the transition between different phases of an audit by chaining reconnaissance and exploitation tools through sequential workflow automation. The fram
w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities in web applications. It functions as a vulnerability scanner that crawls targets to find injection points and a fuzzer used to discover hidden endpoints and test input validation. The project distinguishes itself by providing an intercepting HTTP proxy for capturing and modifying traffic, combined with a knowledge-base driven exploitation system. It enables the execution of security exploits to gain remote shell access and supports post-exploitation activities, such as routing
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best tu upload web shells or any malicious file…