🕵️‍♂️ All-in-one OSINT tool for analysing any website

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

A fast, simple, recursive content discovery tool written in Rust.

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

🛰️ Satellite TLE tools in JavaScript: get lat/lon of satellites, get look angles, plot orbit lines, extract individual TLE elements, etc

A fast TCP/UDP tunnel over HTTP

ScareCrow - Payload creation framework designed around EDR bypass.

Windows Defender Killer | C++ Code Disabling Permanently Windows Defender using Registry Keys

Next-gen Rowhammer fuzzer that uses non-uniform, frequency-based patterns.

An automated e-mail OSINT tool

An XSS exploitation command-line interface and payload generator.

Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and share their backdoor sessions, handy…

AzureADRecon is a tool which gathers information about the Azure Active Directory and generates a report which can provide a holistic picture of the current state of the target environment.

Script for generating revshells

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

A python script to scan for Apache Tomcat server vulnerabilities.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

A collection of Azure AD tools for offensive and defensive security purposes

A collection of tools to perform searches on GitHub.

Extract endpoints from source files.

A PHP tool to brute force vhost configured on a server.

Find subdomains and takeovers.

Analyze CSP header of a given URL.

Find CVEs that don't have a Detectify modules.

Test is the automation of KeyHacks project from Streaak.

A collection of custom security tools for quick needs.

Huge Collection of Wordpress Exploits and CVES

A utility for quickly and easily locating, web hosting and transferring resources (e.g., exploits/enumeration scripts) from your filesystem to a victim machine during privilege escalation.

A collection of several hundred online tools for OSINT