🙃 A delightful community-driven (with 2,400+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python…

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Hunt down social media accounts by username across social networks

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

ALL IN ONE Hacking Tool For Hackers

Metasploit Framework

Automatic SQL injection and database takeover tool

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

World's fastest and most advanced password recovery utility

A collection of awesome penetration testing resources, tools and other shiny things

😱 A curated list of amazingly awesome OSINT

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024

🕵️‍♂️ Offensive Google framework.

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

Information gathering framework for phone numbers

Fast web fuzzer written in Go

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

E-mails, subdomains and names Harvester - OSINT

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

A collection of hacking tools, resources and references to practice ethical hacking.

Most advanced XSS scanner.

The Rogue Access Point Framework

In-depth attack surface mapping and asset discovery

Web path scanner

Exploitation Framework for Embedded Devices

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Fast passive subdomain enumeration tool.

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

Nmap - the Network Mapper. Github mirror of official SVN repository.

Scapy: the Python-based interactive packet manipulation program & library.