Stars
A DNS meta-query spider that enumerates DNS records, and subdomains.
xlwings is a Python library that makes it easy to call Python from Excel and vice versa. It works with Excel on Windows and macOS as well as with Google Sheets and Excel on the web.
Tool for Active Directory Certificate Services enumeration and abuse
Create a USB Rubber Ducky like device using a Raspberry PI Pico
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
[UNMAINTAINED] A reverse engineered Python API wrapper for Quora's Poe, which provides free access to ChatGPT, GPT-4, and Claude.
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
CTF challenge (mostly pwn) files, scripts etc
Powerful framework for rogue access point attack.
This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.
The largest Awesome Curated list of command line programs (CLI/TUI) with source data organized into CSV files
A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
Uncover the true IP address of websites safeguarded by Cloudflare & Others
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
WoeUSB-ng is a simple tool that enable you to create your own usb stick windows installer from an iso image or a real DVD. This is a rewrite of original WoeUSB.
Command line utility for searching and downloading exploits
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
Sublime Text plugin for EditorConfig - Helps developers maintain consistent coding styles between different editors
Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
A Modular Penetration Testing Framework