A high performance offensive security tool for reconnaissance and vulnerability scanning

Identify privilege escalation paths within and across different clouds

An open-source notepad with features that are particularly useful to penetration testers

A bash script for recon and DOS attacks

Snyk CLI scans and monitors your projects for security vulnerabilities.

A small lambda script that will disable access keys older than a given amount of days.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

DNS Enumeration Script

A little tool to play with Windows security

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Python code demonstrating the how-to part of L7 Application DDoS Attack called SlowLoris

Your filesystem as a dungeon!

CeWL is a Custom Word List Generator

E-mails, subdomains and names Harvester - OSINT

A collection of AWS penetration testing junk

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Tool to search secrets in various filetypes.

Tools for fingerprinting and exploiting Amazon cloud infrastructures

CookieCatcher

BlueMaho is GUI-shell (interface) for suite of tools for testing security of bluetooth devices. It is freeware, opensource, written on python, uses wxPyhon. It can be used for testing BT-devices fo…

Automatically exported from code.google.com/p/fern-wifi-cracker

Bluedevil adds Bluetooth capabilities to KDE Plasma

A simple Modbus/TCP client write in pure Perl.

a pentest scanner / 一个漏洞综合利用工具轮子，大佬请忽略

Digital Bond's ICS Enumeration Tools

Ultimate Internet of Things/Industrial Control Systems reconnaissance tool.

PHP client for Modbus TCP and Modbus RTU over TCP (can be used for serial)