Tool to find metadata and hidden information in the documents.

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

p0f unofficial git repo

Subbdom API Client

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

Run PowerShell with rundll32. Bypass software restrictions.

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning—On Your Terms. Easily distribute arbitrary binaries and scripts using any of our eight supported c…

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including …

A fuzzer for detecting open redirect vulnerabilities

E-mails, subdomains and names Harvester - OSINT

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Web Application Security Scanner Framework

A suite of utilities for converting to and working with CSV, the king of tabular file formats.

GNU-alike tools for parsing RFC 4180 CSVs at high speed.

🕶️A curated list of awesome tools for dealing with CSV.

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

Please no pull requests for this repository. Thanks!

Browser Extension Analysis Framework - Scan, Analyze Chrome, firefox and Brave extensions for vulnerabilities and intels

Universal Command Line Interface for Amazon Web Services

Find AWS S3 buckets and test their permissions.

Amazon S3 bucket finder and crawler.

A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets

Scan for misconfigured S3 buckets across S3-compatible APIs!

A collection of scripts for assessing Microsoft Azure security

Recog-Ruby: Pattern Recognition using Rapid7 Recog

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Wiki to collect Red Team infrastructure hardening resources