Fast web fuzzer written in Go

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

In-depth attack surface mapping and asset discovery

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Fetch all the URLs that the Wayback Machine knows about for a domain

台灣資安 / CTF 學習資源整理

SMBMap is a handy SMB enumeration tool

Regshot is a small, free and open-source registry compare utility that allows you to quickly take a snapshot of your registry and then compare it with a second one - done after doing system changes…

an awesome list of honeypot resources

AirPods liberated from Apple's ecosystem.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts

Six Degrees of Domain Admin

Password decryption tool for the McAfee SiteList.xml file

Powershell script to extract information from boot PXE

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Damn Vulnerable Web Application (DVWA)

OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

Hunt down social media accounts by username across social networks

This repository has the JSON file required to perform user enumeration on various websites.

PoC to record audio from a Bluetooth device

Universal steganographic tool

An open-source post-exploitation framework for students, researchers and developers.

Fast subdomains enumeration tool for penetration testers

WebGoat is a deliberately insecure application

For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.