Fibbot

Exegol

Fully featured and community-driven hacking environment

PPLBlade

Protected Process Dumper Tool

hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

SXDork

A powerful tool that utilizes the technique of google dorking to search for specific information on the internet.

vscode-security-notes

Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝

pics

File formats dissections and more...

katana

A next-generation crawling and spidering framework.

wordlists

Real-world infosec wordlists, updated regularly

maigret

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

awesome-compose

Awesome Docker Compose samples

SerializationDumper

A tool to dump Java serialization streams in a more human readable form.

jazzer

Coverage-guided, in-process fuzzing for the JVM

relevant-wordlist

A wordlist that is kept up to date with the latest headlines to provide relevant words to human society

Coldfire

Golang malware development library

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

grex

A command-line tool and Rust library with Python bindings for generating regular expressions from user-provided test cases

ripgrep

ripgrep recursively searches directories for a regex pattern while respecting your gitignore

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

My-Presentation-Slides

Collections of Orange Tsai's public presentation slides.

Huge_DIR_wordlist

awesome-go

A curated list of awesome Go frameworks, libraries and software

go-ole

win32 ole implementation for golang

npk

A mostly-serverless distributed hash cracking platform

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

OSWE

OSWE Preparation

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

rest-api

REST API backend for Reconmap

web-client

Reconmap's web client written in React. Manage all your pentest projects from a single place.