Get up and running with OpenAI gpt-oss, DeepSeek-R1, Gemma 3 and other models.

simple terminal UI for git commands

Open Source realtime backend in 1 file

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Share your terminal as a web application

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Fast web fuzzer written in Go

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Open-Source Phishing Toolkit

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.

Fast passive subdomain enumeration tool.

Adversary Emulation Framework

A terminal UI for tshark, inspired by Wireshark

The most advanced status page in the world

The Havoc Framework

A Workflow Engine for Offensive Security

A Tool for Domain Flyovers

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

A censorship circumvention tool to evade detection by authoritarian state adversaries

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

ScareCrow - Payload creation framework designed around EDR bypass.

Compile shell scripts to static binaries.

Six Degrees of Domain Admin

A collection of hacks and one-off scripts

Automating situational awareness for cloud penetration tests.

Shikata ga nai (仕方がない) encoder ported into go with several improvements