A pure Unix shell script implementing ACME client protocol

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Quickly create and run optimised Windows, macOS and Linux virtual machines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Attack Surface Management Platform

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Git All the Payloads! A collection of web attack payloads.

Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.

Various tips & tricks

EMBA - The firmware security analyzer

Rockyou for web fuzzing

A collection of snippets of codes and commands to make your life easier!

Wi-Fi Exploitation Framework

config manager based on Git

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

🚀 Caido releases, wiki and roadmap

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

TrustedSec Sysinternals Sysmon Community Guide

Future Of Phishing With less delay

Bash post exploitation toolkit

practical toolkit for cybersecurity and IT professionals. It features a detailed Linux cheatsheet for incident response

Automating XSS using Bash

A modular OSINT honeypot for blue teamers

The CAN Injection Toolkit

A sock, with a wire, so you can tunnel all you desire.

SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accuracy!

Enumerate Subdomains Through Google Dorks (Bypassed Page Filter)