Gin is a high-performance HTTP web framework written in Go. It provides a Martini-like API but with significantly better performance—up to 40 times faster—thanks to httprouter. Gin is designed for …

A tool for exploring each layer in a docker image

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Fast web fuzzer written in Go

psutil for golang

Adversary Emulation Framework

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

The Havoc Framework

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

LLocalSearch is a completely locally running search aggregator using LLM Agents. The user can ask a question and the system will use a chain of LLMs to find the answer. The user can see the progres…

Native Mac APIs for Go. Previously known as MacDriver

Obfuscate Go builds

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

A censorship circumvention tool to evade detection by authoritarian state adversaries

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

A tool to perform Kerberos pre-auth bruteforcing

iOS/macOS Research Swiss Army Knife

yubikey-agent is a seamless ssh-agent for YubiKeys.

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

A wrapper around grep, to help you grep for things

Extract URLs, paths, secrets, and other interesting bits from JavaScript

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

Tool for embedding .ico & manifest resources in Go programs for Windows.

Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise

Tool and policy library for reviewing Google Kubernetes Engine clusters against best practices