Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

A Python module to bypass Cloudflare's anti-bot page.

The FLARE team's open-source tool to identify capabilities in executable files.

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Common User Passwords Profiler (CUPP)

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

w3af: web application attack and audit framework, the open source web vulnerability scanner.

The Leading Security Assessment Framework for Android.

IntelOwl: manage your Threat Intelligence at scale

Knock Subdomain Scan

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Fast and powerful SSL/TLS scanning library.

Loki - Simple IOC and YARA Scanner

Volatility 3.0 development

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

Create a USB Rubber Ducky like device using a Raspberry PI Pico

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

Detect and bypass web application firewalls and protection systems

OWASP CRS (Official Repository)

All In One Web Recon

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Please no pull requests for this repository. Thanks!