WebGoat is a deliberately insecure application

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

completely ridiculous API (crAPI)

Python script that performs email address validation against Office 365 without submitting login attempts.

Audit Windows Security with best Practice

R3con1z3r is a lightweight Web information gathering tool with an intuitive features written in python. it provides a powerful environment in which open source intelligence (OSINT) web-based footpr…

R3con1z3r is a lightweight Web information gathering tool with an intuitive features written in python. it provides a powerful environment in which open source intelligence (OSINT) web-based footpr…

Operating system audit and Hardening Framework

Reverse/ Bind Shell Generator for cross platform systems

OSINT Tool for Finding Passwords of Compromised Email Addresses

Find GeoLocation with High Accuracy...

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using scree…

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

Androspy framework is a Backdoor Crypter & Creator with Automatic IP Poisener

Reverse Shell Cheat Sheet TooL

Attack Surface Management Platform

venom - C2 shellcode generator/compiler/handler

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

Nmap Web Dashboard and Reporting