Security Tools

🔥rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

Recon | Select All | Subdomain | Subdomain Enumeration

🔥Phonebook.cz

Phonebook lists all domains, email addresses, or URLs for the given input domain. Wildcards such as *.gov.uk are allowed.

OSINT | Select All

🔥Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Select All | Windows

🔥XFFenum

X-Forwarded-For [403 forbidden] enumeration

Scanner | Select All

🔥awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff.

Android | Resources | Select All

🔥awesome-vulnerable-apps

Awesome Vulnerable Applications

Resources | Select All

🔥bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Miscellaneous | Select All

🔥android-security-awesome

A collection of android security related resources

Android | Resources | Select All

🔥CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Miscellaneous | Select All

🔥PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Miscellaneous | Select All

🔥SSTImap

SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself.

Scanner | Select All | SSTI

🔥JSONBee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

Miscellaneous | Select All

🔥cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more...

Recon | Scanner | Select All

🔥OWASP ZAP

World’s most popular free web security tools and is actively maintained by a dedicated international team of volunteers

Scanner | Select All

🔥getsploit

Command line utility for searching and downloading exploits

Recon | Scanner | Select All

🔥Eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

Scanner | Select All

🔥jaeles

The Swiss Army knife for automated Web Application Testing

Scanner | Select All

🔥Osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

Recon | Scanner | Select All

🔥nikto

Nikto web server scanner

Scanner | Select All

🔥arachni

Web Application Security Scanner Framework

Scanner | Select All

🔥Sn1per

Automated pentest framework for offensive security experts

Scanner | Select All

🔥metasploit-framework

Metasploit Framework

Scanner | Select All

🔥can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Select All | Subdomain | Subdomain Takeover

🔥takeover

A tool for testing subdomain takeover possibilities at a mass scale.

Select All | Subdomain | Subdomain Takeover

🔥subjack

Subdomain Takeover tool written in Go

Select All | Subdomain | Subdomain Takeover

🔥SubOver

A Powerful Subdomain Takeover Tool

Select All | Subdomain | Subdomain Takeover

🔥jwt-hack

jwt-hack is tool for hacking / security testing to JWT.

Brute Force | JWT | Scanner | Select All

🔥postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

CORS | Extension | Select All

🔥jwt_tool

A toolkit for testing, tweaking and cracking JSON Web Tokens

Brute Force | JWT | Scanner | Select All

🔥jwt-cracker

Simple HS256 JWT token brute force cracker

Brute Force | JWT | Scanner | Select All

🔥CMSmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

CMS | Scanner | Select All | Wordpress

🔥joomscan

OWASP Joomla Vulnerability Scanner Project

CMS | Joomla | Scanner | Select All

🔥wpscan

WPScan is a free, for non-commercial use, black box WordPress security scanner

CMS | Scanner | Select All | Wordpress

🔥WPSpider

A centralized dashboard for running and scheduling WordPress scans powered by wpscan utility.

CMS | Scanner | Select All | Wordpress

🔥CloudScraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

AWS | Cloud | S3 | Scanner | Select All

🔥S3BucketList

Firefox plugin that lists Amazon S3 Buckets found in requests

AWS | Cloud | S3 | Scanner | Select All

🔥S3Scanner

Scan for open AWS S3 buckets and dump the contents

AWS | Cloud | S3 | Scanner | Select All

🔥AWSBucketDump

Security Tool to Look For Interesting Files in S3 Buckets

AWS | Cloud | S3 | Scanner | Select All

🔥GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

Git | Secret | Select All

🔥GitHunter

A tool for searching a Git repository for interesting content

Git | Secret | Select All

🔥GitMiner

Tool for advanced mining for content on Github

Git | Secret | Select All

🔥detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

Git | Secret | Select All

🔥github-search

Tools to perform basic search on GitHub.

Git | Secret | Select All

🔥gitrob

Reconnaissance tool for GitHub organizations

Git | Secret | Select All

🔥GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Git | Secret | Select All

🔥git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

Git | Secret | Select All

🔥truffleHog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Git | Secret | Select All

🔥gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services

Git | Secret | Select All

🔥git-secrets

Prevents you from committing secrets and credentials into git repositories

Git | Secret | Select All

🔥gitleaks

Scan git repos (or files) for secrets using regex and entropy

Git | Secret | Select All

🔥thc-hydra

Hydra is a parallelized login cracker which supports numerous protocols to attack.

Brute Force | Password | Select All

🔥BruteX

Automatically brute force all services running on a target.

Brute Force | Password | Select All

🔥xxexploiter

Tool to help exploit XXE vulnerabilities

Scanner | Select All | XXE

🔥XXEinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

Scanner | Select All | XXE

🔥domxssscanner

DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities

Scanner | Select All | XXE

🔥XSSwagger

A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks

Scanner | Select All | XXE

🔥XSS-Radar

XSS Radar is a tool that detects parameters and fuzzes them for cross-site scripting vulnerabilities.

Scanner | Select All | XXE

🔥BruteXSS

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application.

Scanner | Select All | XXE

🔥xssValidator

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.

Scanner | Select All | XXE

🔥bXSS

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

Scanner | Select All | XXE

🔥dalfox

DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

Scanner | Select All | XXE

🔥xsser

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

Scanner | Select All | XXE

🔥xsscrapy

XSS spider - 66/66 wavsep XSS detected

Scanner | Select All | XXE

🔥xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

Scanner | Select All | XXE

🔥XSStrike

Most advanced XSS scanner.

Scanner | Select All | XXE

🔥xssor2

XSS'OR - Hack with JavaScript.

Scanner | Select All | XXE

🔥SQLiScanner

Automatic SQL injection with Charles and sqlmap api

Injection | Scanner | Select All | SQL Injection

🔥waybackSqliScanner

Gather urls from wayback machine then test each GET parameter for sql injection.

Injection | Scanner | Select All | SQL Injection

🔥sqlmap

Automatic SQL injection and database takeover tool

Injection | Scanner | Select All | SQL Injection

🔥NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

Injection | Scanner | Select All | SQL Injection

🔥ssrfDetector

Server-side request forgery detector

Scanner | Select All | SSRF

🔥httprebind

Automatic tool for DNS rebinding-based SSRF attacks

Scanner | Select All | SSRF

🔥SSRFire

An automated SSRF finder. Just give the domain name and your server and chill! 😉 Also has options to find XSS and open redirects

Scanner | Select All | SSRF

🔥gaussrf

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

Scanner | Select All | SSRF

🔥smuggler

An HTTP Request Smuggling / Desync testing tool written in Python 3

Request Smuggling | Scanner | Select All

🔥SSRFmap

Automatic SSRF fuzzer and exploitation tool

Scanner | Select All | SSRF

🔥race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

Race Condition | Scanner | Select All

🔥http-request-smuggling

HTTP Request Smuggling Detection Tool

Request Smuggling | Scanner | Select All

🔥requests-racer

Small Python library that makes it easy to exploit race conditions in web apps with Requests.

Race Condition | Scanner | Select All

🔥turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

Race Condition | Scanner | Select All

🔥OpenRedireX

A Fuzzer for OpenRedirect issues

Open Redirect | Scanner | Select All

🔥razzer

A Kernel fuzzer focusing on race bugs

Race Condition | Scanner | Select All

🔥Oralyzer

Open Redirection Analyzer

Open Redirect | Scanner | Select All

🔥Injectus

CRLF and open redirect fuzzer

CRLF | Injection | Open Redirect | Scanner | Select All

🔥ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Deserialization | Scanner | Select All

🔥Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily

IDOR | Scanner | Select All

🔥shapeshifter

GraphQL security testing tool

Graphql | Scanner | Select All

🔥headi

Customisable and automated HTTP header injection.

Header | Scanner | Select All

🔥GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

Graphql | Scanner | Select All

🔥dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

Directory Traversal | Scanner | Select All

🔥inql

A Burp Extension for GraphQL Security Testing

Graphql | Scanner | Select All

🔥CRLF-Injection-Scanner

Command line tool for testing CRLF injection on a list of domains.

CRLF | Injection | Scanner | Select All

🔥XSRFProbe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

CSRF | Scanner | Select All

🔥CRLFsuite

A fast tool specially designed to scan CRLF injection

CRLF | Injection | Scanner | Select All

🔥CORStest

A simple CORS misconfiguration scanner

CORS | Injection | Scanner | Select All

🔥Corsy

CORS Misconfiguration Scanner

CORS | Injection | Scanner | Select All

🔥wfuzz

Web application fuzzer

Fuzz | Recon | Select All

🔥ffuf

Fast web fuzzer written in Go

Fuzz | Recon | Select All

🔥Arjun

HTTP parameter discovery suite.

Parameter | Recon | Select All

🔥ParamSpider

Mining parameters from dark corners of Web Archives.

Parameter | Recon | Select All

🔥parameth

This tool can be used to brute discover GET and POST parameters

Parameter | Recon | Select All

🔥param-miner

This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities.

Parameter | Recon | Select All

🔥gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Recon | Select All | URL

🔥getJS

A tool to fastly get all javascript sources/files

JavaScript | JS Recon | Recon | Select All

🔥BurpJSLinkFinder

Burp Extension for a passive scanning JS files for endpoint links.

JavaScript | JS Recon | Recon | Select All

🔥waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

Recon | Select All | URL

🔥LinkFinder

A python script that finds endpoints in JavaScript files

JavaScript | JS Recon | Recon | Select All

🔥LinksDumper

Extract (links/possible endpoints) from responses & filter them via decoding/sorting

JavaScript | JS Recon | Recon | Select All

🔥hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Content Discovery | Recon | Select All

🔥gospider

Gospider - Fast web spider written in Go

Content Discovery | Recon | Select All

🔥filebuster

An extremely fast and flexible web fuzzer

Content Discovery | Recon | Select All

🔥gobuster

Directory/File, DNS and VHost busting tool written in Go

Content Discovery | Recon | Select All

🔥dirsearch

Web path scanner

Content Discovery | Recon | Select All

🔥retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

Recon | Select All | Technology

🔥fingerprintx

fingerprintx is a standalone utility for service discovery on open ports that works well with other popular bug bounty command line tools.

Recon | Select All | Technology

🔥webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

Recon | Select All | Technology

🔥whatweb

Next generation web scanner

Recon | Select All | Technology