🔥NewBugBountyToolkit

A multiplatform bug bounty toolkit that can be installed on Debian/Ubuntu or setup with Docker.
Submitter by: Cybersleuthsolutions

🔥NucleiFuzzer

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications
Submitter by: Satya Prakash (0xKayala)

🔥Jsluice

jsluice is a Go package and command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code.
Submitter by:

🔥lazys3

A Ruby script to brute-force for AWS s3 buckets using different permutations.
Submitter by:

🔥Virtual-host-discovery

This is a basic HTTP scanner that enumerates virtual hosts on a given IP address. During recon, this might help expand the target by detecting old or deprecated code. It may also reveal hidden hosts that are statically mapped in the developer's /etc/hosts file.
Submitter by:

🔥Unfurl

Pull out bits of URLs provided on stdin
Submitter by:

🔥Asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.
Submitter by:

🔥Meg

Meg is a tool for fetching lots of URLs without taking a toll on the servers. It can be used to fetch many paths for many hosts, or fetching a single path for all hosts before moving on to the next path and repeating.
Submitter by:

🔥dnsprobe

DNSProbe is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user-supplied resolvers.
Submitter by:

🔥Chaos

Chaos actively scans and maintains internet-wide assets' data. This project is meant to enhance research and analyze changes around DNS for better insights.
Submitter by:

🔥Shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.
Submitter by:

🔥sslyze

Fast and powerful SSL/TLS scanning library.
Submitter by:

🔥testssl.sh

Testing TLS/SSL encryption anywhere on any port
Submitter by:

🔥Wifipumpkin3

Powerful framework for rogue access point attack.
Submitter by:

🔥xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.
Submitter by:

🔥sleuthkit

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Submitter by:

🔥routersploit

Exploitation Framework for Embedded Devices
Submitter by:

🔥w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.
Submitter by:

🔥brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications
Submitter by:

🔥Faraday

Open Source Vulnerability Management Platform
Submitter by:

🔥rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
Submitter by:

🔥wb

Quickly fetches files from Wayback Machine.
Submitter by:

🔥Phonebook.cz

Phonebook lists all domains, email addresses, or URLs for the given input domain. Wildcards such as *.gov.uk are allowed.
Submitter by:

🔥Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
Submitter by:

🔥XFFenum

X-Forwarded-For [403 forbidden] enumeration
Submitter by:

🔥awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff.
Submitter by:

🔥awesome-vulnerable-apps

Awesome Vulnerable Applications
Submitter by:

🔥bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
Submitter by:

🔥android-security-awesome

A collection of android security related resources
Submitter by:

🔥CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Submitter by:

🔥PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Submitter by:

🔥SSTImap

SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself.
Submitter by:

🔥JSONBee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
Submitter by:

🔥cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more...
Submitter by:

🔥OWASP ZAP

World’s most popular free web security tools and is actively maintained by a dedicated international team of volunteers
Submitter by:

🔥getsploit

Command line utility for searching and downloading exploits
Submitter by:

🔥Eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities
Submitter by:

🔥jaeles

The Swiss Army knife for automated Web Application Testing
Submitter by:

🔥Osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning
Submitter by:

🔥nikto

Nikto web server scanner
Submitter by:

🔥arachni

Web Application Security Scanner Framework
Submitter by:

🔥Sn1per

Automated pentest framework for offensive security experts
Submitter by:

🔥metasploit-framework

Metasploit Framework
Submitter by:

🔥can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Submitter by:

🔥takeover

A tool for testing subdomain takeover possibilities at a mass scale.
Submitter by:

🔥subjack

Subdomain Takeover tool written in Go
Submitter by:

🔥SubOver

A Powerful Subdomain Takeover Tool
Submitter by:

🔥jwt-hack

jwt-hack is tool for hacking / security testing to JWT.
Submitter by:

🔥postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon
Submitter by:

🔥jwt_tool

A toolkit for testing, tweaking and cracking JSON Web Tokens
Submitter by:

🔥jwt-cracker

Simple HS256 JWT token brute force cracker
Submitter by:

🔥CMSmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
Submitter by:

🔥joomscan

OWASP Joomla Vulnerability Scanner Project
Submitter by:

🔥wpscan

WPScan is a free, for non-commercial use, black box WordPress security scanner
Submitter by:

🔥WPSpider

A centralized dashboard for running and scheduling WordPress scans powered by wpscan utility.
Submitter by:

🔥CloudScraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
Submitter by:

🔥S3BucketList

Firefox plugin that lists Amazon S3 Buckets found in requests
Submitter by:

🔥S3Scanner

Scan for open AWS S3 buckets and dump the contents
Submitter by:

🔥AWSBucketDump

Security Tool to Look For Interesting Files in S3 Buckets
Submitter by:

🔥GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available
Submitter by:

🔥GitHunter

A tool for searching a Git repository for interesting content
Submitter by:

🔥GitMiner

Tool for advanced mining for content on Github
Submitter by:

🔥detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.
Submitter by:

🔥github-search

Tools to perform basic search on GitHub.
Submitter by:

🔥gitrob

Reconnaissance tool for GitHub organizations
Submitter by:

🔥GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
Submitter by:

🔥git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools
Submitter by:

🔥truffleHog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history
Submitter by:

🔥gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services
Submitter by:

🔥git-secrets

Prevents you from committing secrets and credentials into git repositories
Submitter by:

🔥gitleaks

Scan git repos (or files) for secrets using regex and entropy
Submitter by:

🔥thc-hydra

Hydra is a parallelized login cracker which supports numerous protocols to attack.
Submitter by:

🔥BruteX

Automatically brute force all services running on a target.
Submitter by:

🔥xxexploiter

Tool to help exploit XXE vulnerabilities
Submitter by:

🔥XXEinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
Submitter by:

🔥domxssscanner

DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities
Submitter by:

🔥XSSwagger

A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks
Submitter by:

🔥XSS-Radar

XSS Radar is a tool that detects parameters and fuzzes them for cross-site scripting vulnerabilities.
Submitter by:

🔥BruteXSS

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application.
Submitter by:

🔥xssValidator

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
Submitter by:

🔥bXSS

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
Submitter by:

🔥dalfox

DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang
Submitter by:

🔥xsser

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
Submitter by:

🔥xsscrapy

XSS spider - 66/66 wavsep XSS detected
Submitter by:

🔥xsshunter

The XSS Hunter service - a portable version of XSSHunter.com
Submitter by:

🔥XSStrike

Most advanced XSS scanner.
Submitter by:

🔥xssor2

XSS'OR - Hack with JavaScript.
Submitter by:

🔥SQLiScanner

Automatic SQL injection with Charles and sqlmap api
Submitter by:

🔥waybackSqliScanner

Gather urls from wayback machine then test each GET parameter for sql injection.
Submitter by:

🔥sqlmap

Automatic SQL injection and database takeover tool
Submitter by:

🔥NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.
Submitter by:

🔥ssrfDetector

Server-side request forgery detector
Submitter by:

🔥httprebind

Automatic tool for DNS rebinding-based SSRF attacks
Submitter by:

🔥SSRFire

An automated SSRF finder. Just give the domain name and your server and chill! 😉 Also has options to find XSS and open redirects
Submitter by:

🔥gaussrf

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.
Submitter by:

🔥smuggler

An HTTP Request Smuggling / Desync testing tool written in Python 3
Submitter by:

🔥SSRFmap

Automatic SSRF fuzzer and exploitation tool
Submitter by:

🔥race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.
Submitter by:

🔥http-request-smuggling

HTTP Request Smuggling Detection Tool
Submitter by:

🔥requests-racer

Small Python library that makes it easy to exploit race conditions in web apps with Requests.
Submitter by:

🔥turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
Submitter by:

🔥OpenRedireX

A Fuzzer for OpenRedirect issues
Submitter by:

🔥razzer

A Kernel fuzzer focusing on race bugs
Submitter by:

🔥Oralyzer

Open Redirection Analyzer
Submitter by:

🔥Injectus

CRLF and open redirect fuzzer
Submitter by:

🔥ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Submitter by:

🔥Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily
Submitter by:

🔥shapeshifter

GraphQL security testing tool
Submitter by:

🔥headi

Customisable and automated HTTP header injection.
Submitter by:

🔥GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.
Submitter by:

🔥inql

A Burp Extension for GraphQL Security Testing
Submitter by:

🔥dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer
Submitter by:

🔥CRLF-Injection-Scanner

Command line tool for testing CRLF injection on a list of domains.
Submitter by:

🔥XSRFProbe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
Submitter by:

🔥CORStest

A simple CORS misconfiguration scanner
Submitter by:

🔥CRLFsuite

A fast tool specially designed to scan CRLF injection
Submitter by:

🔥commix

Automated All-in-One OS command injection and exploitation tool.
Submitter by:

🔥Corsy

CORS Misconfiguration Scanner
Submitter by:

🔥wfuzz

Web application fuzzer
Submitter by:

🔥ffuf

Fast web fuzzer written in Go
Submitter by:

🔥Arjun

HTTP parameter discovery suite.
Submitter by:

🔥ParamSpider

Mining parameters from dark corners of Web Archives.
Submitter by:

🔥parameth

This tool can be used to brute discover GET and POST parameters
Submitter by:

🔥param-miner

This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities.
Submitter by:

🔥gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
Submitter by:

🔥getJS

A tool to fastly get all javascript sources/files
Submitter by:

🔥waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain
Submitter by:

🔥BurpJSLinkFinder

Burp Extension for a passive scanning JS files for endpoint links.
Submitter by:

🔥LinkFinder

A python script that finds endpoints in JavaScript files
Submitter by:

🔥LinksDumper

Extract (links/possible endpoints) from responses & filter them via decoding/sorting
Submitter by:

🔥hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
Submitter by:

🔥filebuster

An extremely fast and flexible web fuzzer
Submitter by:

🔥gospider

Gospider - Fast web spider written in Go
Submitter by:

🔥gobuster

Directory/File, DNS and VHost busting tool written in Go
Submitter by:

🔥dirsearch

Web path scanner
Submitter by:

🔥retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities
Submitter by:

🔥fingerprintx

fingerprintx is a standalone utility for service discovery on open ports that works well with other popular bug bounty command line tools.
Submitter by:

🔥webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.
Submitter by:

🔥whatweb

Next generation web scanner
Submitter by:

🔥httpscreenshot

HTTPScreenshot is a tool for grabbing screenshots and HTML of large numbers of websites.
Submitter by:

🔥wappalyzer

Identify technology on websites.
Submitter by:

🔥eyeballer

Convolutional neural network for analyzing pentest screenshots
Submitter by:

🔥scrying

A tool for collecting RDP, web and VNC screenshots all in one place
Submitter by:

🔥gowitness

gowitness - a golang, web screenshot utility using Chrome Headless
Submitter by:

🔥WitnessMe

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.
Submitter by:

🔥Aquatone

Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface.
Submitter by:

🔥screenshoteer

Make website screenshots and mobile emulations from the command line.
Submitter by:

🔥ScanCannon

Combines the speed of masscan with the reliability and detailed enumeration of nmap
Submitter by:

🔥EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Submitter by:

🔥naabu

A fast port scanner written in go with focus on reliability and simplicity.
Submitter by:

🔥nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.
Submitter by:

🔥masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
Submitter by:

🔥RustScan

The Modern Port Scanner
Submitter by:

🔥censys-subdomain-finder

Perform subdomain enumeration using the certificate transparency logs from Censys.
Submitter by:

🔥assetfinder

Find domains and subdomains related to a given domain
Submitter by:

🔥domained

Multi Tool Subdomain Enumeration
Submitter by:

🔥shuffledns

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output
Submitter by:

🔥Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
Submitter by:

🔥interactsh

An OOB interaction gathering server and client library
Submitter by:

🔥katana

A next-generation crawling and spidering framework.
Submitter by:

🔥tlsx

Fast and configurable TLS grabber focused on TLS based data collection.
Submitter by:

🔥dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.
Submitter by:

🔥uncover

Quickly discover exposed hosts on the internet using multiple search engines.
Submitter by:

🔥subfinder

Fast passive subdomain enumeration tool.
Submitter by:

🔥httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
Submitter by:

🔥massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
Submitter by:

🔥nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.
Submitter by:

🔥Findomain

The fastest and cross-platform subdomain enumerator, do not waste your time.
Submitter by:

🔥Sublist3r

Fast subdomains enumeration tool for penetration testers
Submitter by:

🔥Amass

In-depth Attack Surface Mapping and Asset Discovery
Submitter by: