BouTNiFUL

77

BlackWidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

BruteX

Automatically brute force all services running on a target.

BurpJSLinkFinder

Burp Extension for a passive scanning JS files for endpoint links.

cero

Scrape domain names from SSL certificates of arbitrary hosts

commix

Automated All-in-One OS Command Injection Exploitation Tool.

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

gospider

Gospider - Fast web spider written in Go

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

OTE

OSINT Template Engine

s3reverse

The format of various s3 buckets is convert in one format. for bugbounty and security testing.

scrying

A tool for collecting RDP, web and VNC screenshots all in one place

thc-hydra

hydra

brutesubs

An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose

dnscan

jwt-key-id-injector

Simple python script to check against hypothetical JWT vulnerability.

sandmap

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

Turbolist3r

Subdomain enumeration tool with analysis features for discovered domains