Fast, secure, efficient backup program

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Find secrets with Gitleaks 🔑

Find, verify, and analyze leaked credentials

Easy and fast file sharing from the command-line.

Make JSON greppable!

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Adversary Emulation Framework

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

An HTTP toolkit for security research.

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

A Workflow Engine for Offensive Security

Monitor linux processes without root permissions

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

⚡️Curated list of resources for the development and applications of blockchain.

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

A terminal based graphical activity monitor inspired by gtop and vtop

ScareCrow - Payload creation framework designed around EDR bypass.

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

Contextual Content Discovery Tool

Gospider - Fast web spider written in Go

A very small, very simple, yet very secure encryption tool.

The Swiss Army knife for automated Web Application Testing

A tool to abuse Exchange services

A wrapper around grep, to help you grep for things

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data)