Magicspoofing it's a python script that checks & test SPF/DMARC DNS records an tries to spoof a domain with a open relay mail system.

Linux enumeration tool for pentesting and CTFs with verbosity levels

Linux privilege escalation auditing tool

Scripted Local Linux Enumeration & Privilege Escalation Checks

Contextual Content Discovery Tool

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

🤖 The Modern Port Scanner 🤖

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Scanning APK file for URIs, endpoints & secrets.

Termux customization with your own name (termux-banner + custom PS1) and oh-my-zsh themes with plugins

curated password lists and various other lists/dictionaries for security things

Fast web fuzzer written in Go

Fast passive subdomain enumeration tool.

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Find domains and subdomains related to a given domain

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

evilginx3 + gophish

Bugbounty Resources

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Web Attack Cheat Sheet

Learn RegEx step by step, from zero to advanced.

Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)

An step by step fuzzing tutorial. A GitHub Security Lab initiative

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Freeze (package) Python programs into stand-alone executables

Android Debug Bridge (ADB) basic wrapper in Python, with timeout support in case of long operations

Network Attack wifi attack vlan attack arp attack Mac Attack Attack revealed etc../