shellfarmer

PrivescCheck

Privilege Escalation Enumeration Script for Windows

amplify-ui-dashboard

A React Dashboard Admin Template built on top of Amplify UI.

Timeroast

Timeroasting scripts by Tom Tervoort

nmap

Idiomatic nmap library for go developers

CloakQuest3r

Uncover the true IP address of websites safeguarded by Cloudflare & Others

npk

A mostly-serverless distributed hash cracking platform

Spoofy

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

tfsec

Tfsec is now part of Trivy

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

o365creeper

Python script that performs email address validation against Office 365 without submitting login attempts.

CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

sessionprobe

SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

PsMapExec

A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec

GOAD

game of active directory

365Inspect

A PowerShell script that automates the security assessment of Microsoft 365 environments.

shinysocks

A small, ultrafast SOCKS proxy server.

IIS-ShortName-Scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

kube_security_lab

TeamsPhisher

Send phishing messages and attachments to Microsoft Teams users

windows_hardening

HardeningKitty and Windows Hardening Settings

TREVORspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Astra

Automated Security Testing For REST API's

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

LinkedInt

LinkedIn Recon Tool

CVE-2022-40684

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

dnsReaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

gobuster

Directory/File, DNS and VHost busting tool written in Go