Find, verify, and analyze leaked credentials

Fast web fuzzer written in Go

A next-generation crawling and spidering framework.

In-depth attack surface mapping and asset discovery

Open-Source Phishing Toolkit

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernet…

Adversary Emulation Framework

json incremental digger

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

A Workflow Engine for Offensive Security

Monitor linux processes without root permissions

Digging Deeper....

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

Take a list of domains and probe for working HTTP and HTTPS servers

ScareCrow - Payload creation framework designed around EDR bypass.

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.

Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.

Decrypt WhatsApp encrypted media files

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

Fast and configurable TLS grabber focused on TLS based data collection.

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

cast YouTube videos to your smart TV from command-line

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environmen…

An Office365 User Attack Tool

Scan installed EDRs and AVs on Windows

Simple local scanner for vulnerable log4j instances