Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Find secrets with Gitleaks 🔑

GO Simple Tunnel - a simple tunnel written in golang

A fast TCP/UDP tunnel over HTTP

In-depth attack surface mapping and asset discovery

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Distributed web crawler admin platform for spiders management regardless of languages and frameworks. 分布式爬虫管理平台，支持任何语言和框架

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Directory/File, DNS and VHost busting tool written in Go

Go security checker

An HTTP toolkit for security research.

A Workflow Engine for Offensive Security

Monitor linux processes without root permissions

Cameradar hacks its way into RTSP videosurveillance cameras

An offline tool for querying IP geographic information and CDN provider. 一个查询IP地理信息和CDN服务提供商的离线终端工具.

Elasticsearch 可视化DashBoard, 支持Es监控、实时搜索，Index template快捷替换修改，索引列表信息查看， SQL converts to DSL等

👻Stowaway -- Multi-hop Proxy Tool for pentesters

Go package for OCR (Optical Character Recognition), by using Tesseract C++ library

一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

Converts PDF, DOC, DOCX, XML, HTML, RTF, etc to plain text

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

a recon tool that allows searching on URLs that are exposed via shortener services

Website Cloner - Utilizes powerful Go routines to clone websites to your computer within seconds.

✅ A Go library for email verification without sending any emails.

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by t…