A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Drop in a screenshot and convert it to clean code (HTML/Tailwind/React/Vue)

🕵️‍♂️ Offensive Google framework.

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

Most advanced XSS scanner.

The Rogue Access Point Framework

Web path scanner

Incredibly fast crawler designed for OSINT.

fsociety Hacking Tools Pack – A Penetration Testing Framework

The recursive internet scanner for hackers. 🧡

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Low bandwidth DoS tool. Slowloris rewrite in Python.

Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.

All In One Web Recon

Know the dangers of credential reuse attacks.

BloodyAD is an Active Directory Privilege Escalation Framework

Reconnaissance Swiss Army Knife

Hacking tools pack & backdoors generator.

🔒 Social Media Hacking Suite

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to find possible credentials leaks in PwnDB or Dehash…

LinkedIn Recon Tool

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.

Web Application Security Scanner