Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Take a list of domains and probe for working HTTP and HTTPS servers

🚀🚀🚀A faster, better and more stable Redis desktop manager [GUI client], compatible with Linux, Windows, Mac.

Ready to go Phishing Platform

Scan for misconfigured S3 buckets across S3-compatible APIs!

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

Bruteforcing from various scanner output - Automatically attempts default creds on found services.

TrafficWatch, a packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

This is a multi-use bash script for Linux systems to audit wireless networks.

The Rogue Access Point Framework

A terminal for a more modern age

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Simple HS256, HS384 & HS512 JWT token brute force cracker.

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

SambaCry exploit and vulnerable container (CVE-2017-7494)

Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473

Dirty Cow exploit - CVE-2016-5195

Stealing Signatures and Making One Invalid Signature at a Time

Automatic SQL injection and database takeover tool

一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

Web path scanner

Hash collisions and exploitations

Iconic font aggregator, collection, & patcher. 3,600+ icons, 50+ patched fonts: Hack, Source Code Pro, more. Glyph collections: Font Awesome, Material Design Icons, Octicons, & more

Lovely console emulator package for Windows