Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

An extensible multilanguage static code analyzer.

Companion repo for complete Docker course

BloodyAD is an Active Directory Privilege Escalation Framework

Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound

A deobfuscator for PyArmor.

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Open source obfuscation tool for .NET assemblies

An open-source, free protector for .NET applications

All In One Web Recon

a drop-in replacement for Nmap powered by shodan.io

A Lightweight Face Recognition and Facial Attribute Analysis (Age, Gender, Emotion and Race) Library for Python

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

A wrapper around grep, to help you grep for things

A Modern Orchestration Engine for Security

declutters url lists for crawling/pentesting

A self-contained, lightweight workflow engine with a built-in Web UI. Define workflows in a simple, declarative YAML format. Execute them anywhere, compose complex pipelines, and distribute tasks. …

Bleeding edge django template focused on code quality and security.

Responder Windows Version Beta

The Python programming language

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …

The fastest dork scanner written in Go.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

HTTP parameter discovery suite.

Azure AD enumeration over MS Graph

A collection of awesome one-liner scripts especially for bug bounty tips.

This repository is a collection of powershell functions every hacker should know

Generates millions of keyword-based password mutations in seconds.

An XSS exploitation command-line interface and payload generator.