Stars
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
Find, verify, and analyze leaked credentials
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
In-depth attack surface mapping and asset discovery
Fast passive subdomain enumeration tool.
Directory/File, DNS and VHost busting tool written in Go
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
Reconnaissance tool for GitHub organizations
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
Monitor linux processes without root permissions
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Fetch all the URLs that the Wayback Machine knows about for a domain
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
A Security Tool for Bug Bounty, Pentest and Red Teaming.
Find domains and subdomains related to a given domain