A collective list of free APIs

Magnificent app which corrects your previous console command.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The Python programming language

Scrapy, a fast high-level web crawling & scraping framework for Python.

Automatic SQL injection and database takeover tool

PyScript is an open source platform for Python in the browser. Try PyScript: https://pyscript.com Examples: https://tinyurl.com/pyscript-examples Community: https://discord.gg/HxvBtukrg2

🕵️‍♂️ Offensive Google framework.

Impacket is a collection of Python classes for working with network protocols.

E-mails, subdomains and names Harvester - OSINT

A next generation HTTP client for Python. 🦋

Most advanced XSS scanner.

Waydroid uses a container-based approach to boot a full Android system on a regular GNU/Linux system like Ubuntu.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

HTTP parameter discovery suite.

Automated All-in-One OS Command Injection Exploitation Tool.

The Network Execution Tool

The Leading Security Assessment Framework for Android.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments…

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

Test tool for CVE-2020-1472

Burpsuite Extension to bypass 403 restricted directory

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

HTA encryption tool for RedTeams

Generate Professional Phishing Emails Fast And Easy

JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)

Active Directory ACL exploitation with BloodHound