A collective list of free APIs

An opinionated list of awesome Python frameworks, libraries, software and resources.

Hunt down social media accounts by username across social networks

Rich is a Python library for rich text and beautiful formatting in the terminal.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Automatic SQL injection and database takeover tool

Your AI second brain. Self-hostable. Get answers from the web or your docs. Build custom agents, schedule automations, do deep research. Turn any online or local LLM into your personal, autonomous …

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

🕵️‍♂️ Offensive Google framework.

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

Datasets, Transforms and Models specific to Computer Vision

Impacket is a collection of Python classes for working with network protocols.

E-mails, subdomains and names Harvester - OSINT

Most advanced XSS scanner.

Web path scanner

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

Credentials recovery project

The leading native Python SSHv2 protocol library.

A swiss army knife for pentesting networks

🎨 Generate and change color-schemes on the fly.

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

Bandit is a tool designed to find common security issues in Python code.

Securely and anonymously share files, host websites, and chat with friends using the Tor network

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

CTFs as you need them

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Pydoll is a library for automating chromium-based browsers without a WebDriver, offering realistic interactions.

HTTP parameter discovery suite.

Useful tool to track location or mobile number