A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Hunt down social media accounts by username across social networks

Automatic SQL injection and database takeover tool

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

Impacket is a collection of Python classes for working with network protocols.

Exploitation Framework for Embedded Devices

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the contr…

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Style transfer, deep learning, feature transform

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Credentials recovery project

An open Apple AirDrop implementation written in Python

A swiss army knife for pentesting networks

Nginx configuration static analyzer

The recursive internet scanner for hackers. 🧡

📱 objection - runtime mobile exploration

Multi-Cloud Security Auditing Tool

Infection Monkey - An open-source adversary emulation platform

🔥 Web-application firewalls (WAFs) from security standpoint.

Automated Adversary Emulation Platform

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

HTTP parameter discovery suite.

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Pythonic Smart Contract Language for the EVM

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.

Common User Passwords Profiler (CUPP)

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.