An opinionated list of awesome Python frameworks, libraries, software and resources.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🙌 OpenHands: Code Less, Make More

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Impacket is a collection of Python classes for working with network protocols.

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

E-mails, subdomains and names Harvester - OSINT

Fast subdomains enumeration tool for penetration testers

Credentials recovery project

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

A list of Free and Open Source Software (FOSS) for Android – saving Freedom and Privacy.

You Know, For WEB Fuzzing ! 日站用的字典。

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

HTTP parameter discovery suite.

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Arsenal is just a quick inventory and launcher for hacking programs

Dark Web OSINT Tool

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Snoop — инструмент разведки на основе открытых данных (OSINT world)

A `.git` folder disclosure exploit

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

Projects for security students

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal & Intelligence X!

This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumerati…