A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Inference code for Llama models

A simple, yet elegant, HTTP library.

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

the only cheat sheet you need

🙌 OpenHands: Code Less, Make More

Automatic SQL injection and database takeover tool

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Python Development Workflow for Humans.

Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.

A modular graph-based Retrieval-Augmented Generation (RAG) system

Devika is an Agentic AI Software Engineer that can understand high-level human instructions, break them down into steps, research relevant information, and write code to achieve the given objective…

Impacket is a collection of Python classes for working with network protocols.

Most advanced XSS scanner.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Web path scanner

Exploitation Framework for Embedded Devices

CTF framework and exploit development library

E-mails, subdomains and names Harvester - OSINT

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Incredibly fast crawler designed for OSINT.

Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics…

fsociety Hacking Tools Pack – A Penetration Testing Framework

Fast subdomains enumeration tool for penetration testers

Credentials recovery project

An open-source post-exploitation framework for students, researchers and developers.

Wrong project! You should head over to http://github.com/sshuttle/sshuttle

an awesome list of honeypot resources

A swiss army knife for pentesting networks