Starred repositories
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
In-depth attack surface mapping and asset discovery
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Directory/File, DNS and VHost busting tool written in Go
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Monitor linux processes without root permissions
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
Kscan是一款纯go开发的全方位扫描器,具备端口扫描、协议检测、指纹识别,暴力破解等功能。支持协议1200+,协议指纹10000+,应用指纹20000+,暴力破解协议10余种。
Gospider - Fast web spider written in Go
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
The Swiss Army knife for automated Web Application Testing
✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的,网页UI、跨平台以及多功能的远程控制和监控工具,你可以随时…
RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.
A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.
Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.
Cloudlist is a tool for listing Assets from multiple Cloud Providers.
EXOCET - AV-evading, undetectable, payload delivery tool
Go CLI and Library for quickly mapping organization network ranges using ASN information.
SatIntel is an OSINT tool for Satellites 🛰. Extract satellite telemetry, receive orbital predictions, and parse TLEs 🔭
Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists