nosorry

nosorry

monkey

Infection Monkey - An automated pentest tool

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

eslint

Find and fix problems in your JavaScript code.

phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

gitleaks

Scan git repos (or files) for secrets using regex and entropy 🔑

theHarvester

E-mails, subdomains and names Harvester - OSINT

archerysec

Centralize Vulnerability Assessment and Management for DevSecOps Team

sslscan

sslscan tests SSL/TLS enabled services to discover supported cipher suites

koadic

Koadic C3 COM Command & Control - JScript RAT

ruler

A tool to abuse Exchange services

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

thc-hydra

hydra

GyoiThon

GyoiThon is a growing penetration test tool using Machine Learning.

commix

Automated All-in-One OS command injection and exploitation tool.

pi-hole

A black hole for Internet advertisements

webshell-1

This is a webshell open source project

vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

ThunderShell

Python / C# Unmanaged PowerShell based RAT

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

BruteShark

Network Analysis Tool

restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

PowerLessShell

Run PowerShell command without invoking powershell.exe

ghidra

Ghidra is a software reverse engineering (SRE) framework

MicroBurst

A collection of scripts for assessing Microsoft Azure security

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

spiderfoot

SpiderFoot automates OSINT collection so that you can focus on analysis.