Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intellig…

threatspec - continuous threat modeling, through code

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

Android application for online privacy and security

Procmon is a Linux reimagining of the classic Procmon tool from the Sysinternals suite of tools for Windows. Procmon provides a convenient and efficient way for Linux developers to trace the syscal…

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Code Pulse is a real-time code coverage tool for penetration testing activities

Awesome DevSecOps на русском языке

🛡️ Open-source and next-generation Web Application Firewall (WAF)

Arsenal is just a quick inventory and launcher for hacking programs

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

When MVC magic turns black

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

A collection of scripts for assessing Microsoft Azure security

Content-Type Research

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

Free and source-available fair-code licensed workflow automation tool. Easily automate tasks across different services.

The cheat sheet about Java Deserialization vulnerabilities

Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

HTTP parameter discovery suite.

This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

Automatic Discrepancy Discovery for DPI Elusion

🐛 A list of writeups from the Google VRP Bug Bounty program

The fuzzer afl is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast power schedules, MOpt mutators, unicorn_mode, and a lot more!

🔥 A powerful MongoDB auditing and pentesting tool 🔥