Stars
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Automatic SQL injection and database takeover tool
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Impacket is a collection of Python classes for working with network protocols.
CTF framework and exploit development library
Exploitation Framework for Embedded Devices
Fast subdomains enumeration tool for penetration testers
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
📱 objection - runtime mobile exploration
A swiss army knife for pentesting networks
Bandit is a tool designed to find common security issues in Python code.
An advanced memory forensics framework
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
Top disclosed reports from HackerOne
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
Automated Αll-in-One OS command injection exploitation tool.
The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
Dshell is a network forensic analysis framework.
GRR Rapid Response: remote live forensics for incident response
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…
The Leading Security Assessment Framework for Android.
Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
The Ultimate Information Gathering Toolkit
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, co…
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
Fast and powerful SSL/TLS scanning library.