A fast WordPress plugin enumeration tool

Master programming by recreating your favorite technologies from scratch.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Attack surface detector that identifies endpoints by static analysis

🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

Single-file PHP shell

Scripted Local Linux Enumeration & Privilege Escalation Checks

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following binary network packet capture formats are supporte…

Generate email permutations from a name and verify if this email exist with different providers (gmail, duckduckgo, yahoo, yandex)

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

A simple dashboard with weather and NYC subway information for ESPHome

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including …

🤖🏴‍☠️ radare2 plugin for GPT-4 🦜. Solve crackmes automatically 🪄

Network scanner

🕵️ Unleash Metadata Intelligence with MetaDetective. Your Assistant Beyond Metagoofil.

OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines

Impacket is a collection of Python classes for working with network protocols.

Nikto web server scanner

A tool for exploring each layer in a docker image

JWT brute force cracker written in C

A curated list of various bug bounty tools

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

Fully featured and community-driven hacking environment

An advanced memory forensics framework

GVision is a reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from images, helping you gather valuable information quickly and easily.