Lists (1)
Stars
ProjectSend is a free, open source software that lets you share files with your clients, focused on ease of use and privacy. It supports clients groups, system users roles, statistics, multiple lan…
Find, verify, and analyze leaked credentials
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…
CTF framework and exploit development library
A little tool to play with Windows security
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Testing TLS/SSL encryption anywhere on any port
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
The Browser Exploitation Framework Project
Automated All-in-One OS Command Injection Exploitation Tool
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, co…
A utility to examine and validate certificates in a variety of formats
Directory/File, DNS and VHost busting tool written in Go
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…
The Leading Security Assessment Framework for Android.
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
Six Degrees of Domain Admin
Some setup scripts for security research tools.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
Bruteforce attack blocker (ssh, FTP, SMTP, and more)