Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Find secrets with Gitleaks 🔑

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Information gathering framework for phone numbers

Fast web fuzzer written in Go

A next-generation crawling and spidering framework.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

In-depth attack surface mapping and asset discovery

Open-Source Phishing Toolkit

Directory/File, DNS and VHost busting tool written in Go

Fast passive subdomain enumeration tool.

The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clu…

Adversary Emulation Framework

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

A Workflow Engine for Offensive Security

Monitor linux processes without root permissions

An automated e-mail OSINT tool

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

🔍 Search anyone's digital footprint across 300+ websites

A tool to perform Kerberos pre-auth bruteforcing

OnionScan is a free and open source tool for investigating the Dark Web.

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

DetectDee: Hunt down social media accounts by username, email or phone across social networks.

HULK DoS tool ported to Go with some additional features.

crawls the website and finds broken social media links that can be hijacked

HTTP 403 bypass tool

ExifLooter finds geolocation on all image urls and directories also integrates with OpenStreetMap

PassDetective is a command-line tool that scans shell command history to detect mistakenly written passwords, API keys, and secrets. Using regular expressions, it helps prevent accidental exposure …

Docker for Twint