Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Find, verify, and analyze leaked credentials

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Information gathering framework for phone numbers

Fast web fuzzer written in Go

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

In-depth attack surface mapping and asset discovery

Open-Source Phishing Toolkit

Directory/File, DNS and VHost busting tool written in Go

A vulnerability scanner for container images and filesystems

Adversary Emulation Framework

Reconnaissance tool for GitHub organizations

A Tool for Domain Flyovers

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Modlishka. Reverse Proxy.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Fetch all the URLs that the Wayback Machine knows about for a domain

ScareCrow - Payload creation framework designed around EDR bypass.

The fastest dork scanner written in Go.

SSHamble: Unexpected Exposures in SSH

VirusTotal Command Line Interface

Awesome cloud enumerator

Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.

shellz is a small utility to manage your ssh, telnet, kubernetes, winrm, web or any custom shell in a single place.

HTTP 403 bypass tool

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.

Customisable and automated HTTP header injection

An uber fast and simple subdomain enumeration tool using DNS and web requests with support for detecting wildcard DNS records.