Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Find, verify, and analyze leaked credentials

A next-generation crawling and spidering framework.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Adversary Emulation Framework

The Havoc Framework

Monitor linux processes without root permissions

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Extract URLs, paths, secrets, and other interesting bits from JavaScript

C2 infrastructure over Microsoft Teams.

A fast WordPress plugin enumeration tool

Scrape domain names from SSL certificates of arbitrary hosts

DoS tool for HTTP requests (inspired by hulk but has more functionalities)

Multiplayer pivoting solution

A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers

Customisable and automated HTTP header injection

An nsjail Docker image for CTF pwnables. Easily create secure, isolated xinetd/inetd-style services.

A cross-platform tool to find and decrypt Group Policy Preferences passwords from the SYSVOL share using low-privileged domain accounts

Go script for bypassing 403 forbidden

SubSnipe is a tool designed to help find subdomains that are vulnerable to takeover.

PCAP-over-IP server written in Golang