Impacket is a collection of Python classes for working with network protocols.

grapX will iterate through the URLs and grep the endpoints with all possible extensions.

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster.

A small tool that extracts relative URLs from a file.

Some files for bruteforcing certain things.

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

A tool to check a bunch of URLs that contain reflecting params.

jwt-hack is JWT hacking, security testing utility

Weaponizing Live CT logs for automated monitoring of assets

ATTPwn

A Virtual environment for Pentesting IoT Devices

📙 OSCP Exam Report Template in Markdown

Fuzzing Infrastructure with k8s & cephfs

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the…

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

Go client to communicate with Chaos DNS API.

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to…

Ah shhgit! Find GitHub secrets in real time

Collection of Scripts for shodan searching stuff.

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

Vagrant VirtualBox environment for conducting an internal network penetration test

Tools to perform basic search on GitHub.

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

Fetches javascript file from a list of URLS or subdomains.

Cloudflare real IP tracker.

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

Veil 3.1.X (Check version info in Veil at runtime)

The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.