OSWE, OSEP, OSED, OSEE

Attack Surface Management Platform

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

recon for bug hunters

Most advanced XSS scanner.

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

TerminatorZ is a highly sophisticated and efficient web security tool that scans for top potential vulnerabilities with known CVEs in your web applications.

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

403/401 Bypass Methods + Bash Automation + Your Support ;)

PowerSploit - A PowerShell Post-Exploitation Framework

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The Ultimate Information Gathering Toolkit

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the contr…

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Monitor linux processes without root permissions

A pure-python fully automated and unattended fuzzing framework.

Powerful yet simple to use screenshot software 🖥️ 📸

Automated NoSQL database enumeration and web application exploitation tool.

OSS-Fuzz - continuous fuzzing for open source software.

Dex to Java decompiler

Clone this repo to build Frida

OneForAll是一款功能强大的子域收集工具

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on hackingarticles.

Android Remote Administration Tool

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

DIVA Android - Damn Insecure and vulnerable App for Android

A tool for reverse engineering Android apk files

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities