The Cloud Native Application Proxy

A tool for exploring each layer in a docker image

The lazier way to manage everything docker

A node.js version management utility for Windows. Ironically written in Go.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Find, verify, and analyze leaked credentials

The most customisable and low-latency cross platform/shell prompt renderer

Fast web fuzzer written in Go

A next-generation crawling and spidering framework.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Directory/File, DNS and VHost busting tool written in Go

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

pprof is a tool for visualization and analysis of profiling data

Go security checker

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

The Havoc Framework

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Cameradar hacks its way into RTSP videosurveillance cameras

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Fetch all the URLs that the Wayback Machine knows about for a domain

An OOB interaction gathering server and client library

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

👻Stowaway -- Multi-hop Proxy Tool for pentesters

Compile shell scripts to static binaries.

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

A collection of hacks and one-off scripts

Automating situational awareness for cloud penetration tests.

A third-party, open-source ProtonMail CardDAV, IMAP and SMTP bridge