Rewrite of the popular wireless network auditor, "wifite"

WAScan - Web Application Scanner

Automated Penetration Testing Framework

An OSINT tool to find contacts in order to report security vulnerabilities.

My misc VMs walkthrough writeups about boot-to-root machines from VulnHub etc.

A self-contained cryptographic library for Python

A list of interesting payloads, tips and tricks for bug bounty hunters.

The FindBugs plugin for security audits of Java web applications and Android applications. (Also work with Groovy and Scala projects)

Collaborative Penetration Test and Vulnerability Management Platform

World's fastest and most advanced password recovery utility

Automated NoSQL database enumeration and web application exploitation tool.

XSStrike is a program which can crawl, fuzz and bruteforce parameters for XSS. It can also detect and bypass WAFs.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SSRF (Server Side Request Forgery) testing resources

Collection of small security tools created mostly in Python. CTFs, pentests and so on