Lists (32)
API
AppSec
Appsec Training
Burp Extensions
Burp Extensions Development
Cloud
Data and Crypto
Data Identification and Manipula
Defense
Design
Detection And Forensics (DFIR)
Discovery, OSINT, Fingerprinting
Exploitation
Fuzz
Hiring and Recruiting
HTTP Scanners and DAST
IoT
Learning
Machine Learning and AI
Mobile
Network Scanners
Networking and Network Scans
Passwords
Pentest/Social
Personal and Productivity
Python
Reporting and Documentation
Resources and Standards
Reverse Engineering
SAST and Secret Scanning
Utility
Wordlists and Parsing
Stars
Get up and running with OpenAI gpt-oss, DeepSeek-R1, Gemma 3 and other models.
Find, verify, and analyze leaked credentials
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
A vulnerability scanner for container images and filesystems
jq for binary formats - tool, language and decoders for working with binary and text formats
Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
Fetch all the URLs that the Wayback Machine knows about for a domain
An OOB interaction gathering server and client library
Commandline tool for running SQL queries against JSON, CSV, Excel, Parquet, and more.
Scan for misconfigured S3 buckets across S3-compatible APIs!
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
The Swiss Army knife for automated Web Application Testing
Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
Extract URLs, paths, secrets, and other interesting bits from JavaScript
A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.
Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!
Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!
A utility to detect various technology for a given IP address.
Accept URLs on stdin, replace all query string values with a user-supplied value