Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
-
Updated
Nov 27, 2025 - Go
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
A Workflow Engine for Offensive Security
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
👻Stowaway -- Multi-hop Proxy Tool for pentesters
Venom - A Multi-hop Proxy for Penetration Testers
Asset discovery and identification tools 快速识别 Web 指纹信息,定位资产类型。辅助红队快速定位目标资产信息,辅助蓝队发现疑似脆弱点
ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。
渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理
Awesome cloud enumerator
dnsub一款好用且强大的子域名扫描工具
RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
A fast and minimal JS endpoint extractor
The unix-way web crawler
A rapid HTTP downgrade smuggling scanner written in Go.
the blazing-fast pentesting suite.
Domain name permutation engine written in Go
Go library for credentials recovery
Add a description, image, and links to the pentest-tool topic page so that developers can more easily learn about it.
To associate your repository with the pentest-tool topic, visit your repo's landing page and select "manage topics."