pikpikcu

3x-ui

Xray panel supporting multi-protocol multi-user expire day & traffic & ip limit (Vmess & Vless & Trojan & ShadowSocks & Wireguard)

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

VX-API

Collection of various malicious functionality to aid in malware development

exe_to_dll

Converts a EXE into DLL

gorilla-cli

LLMs for your CLI

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

ZeusCloud

Open Source Cloud Security

Upload_Bypass

A simple tool for bypassing file upload restrictions.

socialhunter

crawls the website and finds broken social media links that can be hijacked

noir

Attack surface detector that identifies endpoints by static analysis

OTE

OSINT Template Engine

petereport

PeTeReport is an open-source application vulnerability reporting tool.

celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

firefly

Black box fuzzer for web applications

LinkedInDumper

Python 3 script to dump/scrape/extract company employees from LinkedIn API

BucketLoot

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

authcov

Web app authorisation coverage scanning

lazyflasher

An easy way to patch ramdisks, replace kernels, and install files to your phone through recovery.

plution

Prototype pollution scanner using headless chrome

dsieve

Filter and enrich a list of subdomains by level

golddigger

dockerized-android

A container-based framework to enable the integration of mobile components in security training platforms

DataExtractor

A Burp Suite extension to extract datas from source code while browsing.

puff

Clientside vulnerability / reflected xss fuzzer

pp-finder

PP-finder Help you find gadget for prototype pollution exploitation

gitbleed_tools