Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

A swiss army knife for pentesting networks

Run PowerShell command without invoking powershell.exe

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

Various PowerShell scripts that may be useful during red team exercise

Original Apollo 11 Guidance Computer (AGC) source code for the command and lunar modules.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…