🔨 A modern multiple reverse shell sessions manager written in go
-
Updated
Sep 13, 2025 - Go
#
pentesting-tools
Here are 48 public repositories matching this topic...
An IIS short filename enumeration tool
security security-audit iis pentesting bugbounty vulnerability-detection vulnerability-scanners security-scanner security-automation security-tools redteam iis-server pentesting-tools bugbounty-tool redteam-tools iis-security
-
Updated
Nov 25, 2024 - Go
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
security static-analysis owasp penetration-testing code-review infosec pentesting static-analyzer android-security pentest information-security secure-coding security-tools sast pentesting-tools owasp-mobile-top mstg masvs mobile-sec-android apkhunt
-
Updated
Jan 17, 2025 - Go
A fast and minimal JS endpoint extractor
-
Updated
Nov 10, 2024 - Go
Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.
-
Updated
May 28, 2025 - Go
Generate tens of thousands of subdomain combinations in a matter of seconds
security subdomain enumeration penetration-testing infosec pentesting recon bugbounty security-tools reconnaissance subdomain-scanner subdomain-enumeration pentesting-tools penetration-testing-tools bugbountytips subdomain-finder infosectools
-
Updated
Sep 25, 2023 - Go
As hackers, we put a premium on function over elegance as time is always scarce. When you need to quickly create a solution to a problem, style concerns come secondary.
-
Updated
Dec 18, 2023 - Go
[WIP] A free and open-source, modular Remote Administration Tool (RAT) / Payload Dropper written in Go(lang) with a flexible command and control (C2) system.
remote-control botnet hacking rat pentesting hacking-tool remote-admin-tool wraith pentesting-tools remote-admin-trojan remote-administration-tool payload-dropper
-
Updated
Dec 3, 2023 - Go
Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
golang security favicon hacking penetration-testing bug-bounty infosec pentesting recon bugbounty pentest offensive-security hacktoberfest security-tools reconnaissance pentest-tool penetration-test pentesting-tools favicon-icon favicon-hash
-
Updated
Oct 7, 2025 - Go
Filter and enrich a list of subdomains by level
security subdomain enumeration penetration-testing infosec pentesting bugbounty subdomain-scanner subdomain-enumeration pentesting-tools penetration-testing-tools subdomain-finder infosectools
-
Updated
Sep 25, 2023 - Go
Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
-
Updated
Sep 26, 2025 - Go
Make URL path combinations using a wordlist
security enumeration penetration-testing fuzzing pentesting recon reconnaissance directory-bruteforce pentesting-tools penetration-testing-tools bugbountytips webappsecurity
-
Updated
Sep 25, 2023 - Go
A turbo traffic generator pentesting tool to generate random traffic with random MAC and IP addresses in addition to random sequence numbers to a particular IP and port.
go golang ddos hack hacking cybersecurity penetration-testing ddos-attacks pentesting pentest cyber-security hacking-tool ddos-tool pentest-tool redteaming redteam cyberattack hacking-tools pentesting-tools redteam-tools
-
Updated
Mar 3, 2025 - Go
Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!
automation hacking cybersecurity bugbounty automation-framework devsecops pentesting-tools bugbounty-tool bugbounty-framework
-
Updated
Sep 23, 2025 - Go
List all public repositories for (valid) GitHub usernames
security osint enumeration penetration-testing pentesting recon reconnaissance github-user-search pentesting-tools github-repository-search open-source-intelligence github-osint penetration-testing-tools
-
Updated
Sep 25, 2023 - Go
Mobile Reconnaissance Framework is a powerful, lightweight and platform-independent offensive mobile security tool designed to help hackers and developers identify and address sensitive information within mobile applications.
android security mobile static-analysis mobile-app apk owasp cybersecurity mobile-security mobile-security-framework hacker security-tools devsecops pentesting-tools android-pentesting morf mobile-sec-android ios-pentesting product-sec
-
Updated
Sep 11, 2025 - Go
Combine words from two wordlist files and concatenate them with an optional delimiter
security enumeration penetration-testing fuzzing pentesting recon reconnaissance directory-bruteforce pentesting-tools penetration-testing-tools web-app-security
-
Updated
Sep 25, 2023 - Go
Returns disallowed paths from robots.txt found on your target domain and snapshotted by the Wayback Machine
-
Updated
Jul 18, 2025 - Go
Run a base query (plus optional add-ons) through ask, bing, brave, duck duck go, yahoo, and yandex.
-
Updated
Feb 26, 2023 - Go
An subdomain enumerator for web URLs using the power of Goroutines.
intelligence penetration-testing bugbounty reconnaissance subdomain-scanner subdomain-brute subdomain-enumeration pentesting-tools subdomain-discovery asset-discovery subdomain-finder redteam-tools
-
Updated
Sep 3, 2023 - Go
Improve this page
Add a description, image, and links to the pentesting-tools topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the pentesting-tools topic, visit your repo's landing page and select "manage topics."