evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

A library for detecting known secrets across many web frameworks

Tools, tips, tricks, and more for exploring ICS Security.

A collection of awesome penetration testing resources, tools and other shiny things

Agentic Workflows Made Simple

Jupyter Univere is a search engine for all infosec jupyter notebooks

Secret Magpie - Secret Detection Tool

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego

Digging Deeper....

Find, verify, and analyze leaked credentials

Impacket is a collection of Python classes for working with network protocols.

A curated list of cybersecurity tools and resources.

The Ultimate Information Gathering Toolkit

Househole prioritizes privacy, security, and control, while helping users remain undetected by services that identify temporary emails.

List of API's for gathering information about phone numbers, addresses, domains etc

A script that you can run in the background!

Catspin rotates the IP address of HTTP requests making IP based blocks or slowdown measures ineffective. It is based on AWS API Gateway and deployed via AWS Cloudformation.

A curated list of Awesome Threat Intelligence Blogs

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts

Build a CVE library with aggregated CISA, EPSS and CVSS data

CLI tools for forensic investigation of Windows artifacts

E4GL30S1NT - Simple Information Gathering Tool

Open source platform for cyber security analysts with many features for threat intelligence and detection engineering.

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

Automatic SSTI detection tool with interactive interface

Hackerwasii is an information collection tool (OSINT) which aims to carry out research on a French, Swiss, Luxembourgish or Belgian person. It provides various modules that allow efficient searches…

Tool to bypass 40X response codes.

Python 3.5+ DNS asynchronous brute force utility