A curated list of awesome Go frameworks, libraries and software

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

The world’s fastest framework for building websites.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Find secrets with Gitleaks 🔑

Find, verify, and analyze leaked credentials

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

A next-generation crawling and spidering framework.

The personal information dashboard for your terminal

Fast passive subdomain enumeration tool.

Open-Source Phishing Toolkit

Directory/File, DNS and VHost busting tool written in Go

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Adversary Emulation Framework

Interactive cli tool for HTTP inspection

A terminal UI for tshark, inspired by Wireshark

The Havoc Framework

HTTP proxy written in Go. COW can automatically identify blocked sites and use parent proxies to access.

Reconnaissance tool for GitHub organizations

A Tool for Domain Flyovers

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Fetch all the URLs that the Wayback Machine knows about for a domain

Scan for misconfigured S3 buckets across S3-compatible APIs!

A powerful browser crawler for web vulnerability scanners

ScareCrow - Payload creation framework designed around EDR bypass.

Automating situational awareness for cloud penetration tests.

XRay is a tool for recon, mapping and OSINT gathering from public networks.

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

REX-Ray is a container storage orchestration engine enabling persistence for cloud native workloads