High performance self-hosted photo and video management solution.

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

EJBCA® – Open-source public key infrastructure (PKI) and certificate authority (CA) software.

Accelerate your web app development | Build fast. Run fast.

Automated Adversary Emulation Platform

Small and highly portable detection tests based on MITRE's ATT&CK.

The Web framework for perfectionists with deadlines.

🛡️ Open-source and next-generation Web Application Firewall (WAF)

KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.

Enterprise VPN server

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.

UFONet - Denial of Service Toolkit

A feature-rich command-line audio/video downloader

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail f…

A fast TCP/UDP tunnel over HTTP

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections…

Ryu component-based software defined networking framework

Various *nix tools built as statically-linked binaries

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Malicious traffic detection system

This is a webshell open source project

Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

Linux enumeration tool for pentesting and CTFs with verbosity levels

ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …