pavetheway

Signal-Android

A private messenger for Android.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

gitleaks

Protect and discover secrets using Gitleaks 🔑

trufflehog

Find, verify, and analyze leaked credentials

Signal-Desktop

A private messenger for Windows, macOS, and Linux.

RustScan

🤖 The Modern Port Scanner 🤖

ffuf

Fast web fuzzer written in Go

Signal-iOS

A private messenger for iOS.

Signal-Server

Server supporting the Signal Private Messenger applications on Android, Desktop, and iOS

miller

Miller is like awk, sed, cut, join, and sort for name-indexed data such as CSV, TSV, and tabular JSON

sliver

Adversary Emulation Framework

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

website-templates

150+ HTML5 Website Templates

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

LinkFinder

A python script that finds endpoints in JavaScript files

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

windows_hardening

HardeningKitty and Windows Hardening Settings

subjack

Subdomain Takeover tool written in Go

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

TeamFiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

DumpsterDiver

Tool to search secrets in various filetypes.

jdwp-shellifier

pdtm

ProjectDiscovery's Open Source Tool Manager

Spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

wpa_sycophant

Evil client portion of EAP relay attack

edge

Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.

Omnispray

Modular Enumeration and Password Spraying Framework

dockerfiles