A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams/Lark/Telegram & Pushover support

MassDNS wrapper written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

Golang tool which helps dropping the irrelevant entries from your ffuf result file.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

World’s single largest Internet domains dataset

Find endpoints on GitHub.

The most exhaustive list of reliable DNS resolvers.

A python script that finds endpoints in JavaScript files

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

A Tool for Domain Flyovers

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.

A Catalog of Application Whitelisting Bypass Techniques

Linux privilege escalation auditing tool

Windows batch script that finds misconfiguration issues which can lead to privilege escalation.

Check if a number is equal to 13.

Automatically exported from code.google.com/p/unix-privesc-check

Tour London with PicTour

A secure login module for PHP. The idea is that it should be easily plugged into any PHP project

WiShield library with user contributed features