Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

The Havoc Framework

Reconnaissance tool for GitHub organizations

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Scan for misconfigured S3 buckets across S3-compatible APIs!

Automating situational awareness for cloud penetration tests.

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

C2 infrastructure over Microsoft Teams.

Fast HTTP enumerator

DorkScout - Golang tool to automate google dork scan against the entiere internet or specific targets

Apache Tomcat DoS (CVE-2022-29885) Exploit