🔥sslyze

Fast and powerful SSL/TLS scanning library.

🔥testssl.sh

Testing TLS/SSL encryption anywhere on any port

🔥Wifipumpkin3

Powerful framework for rogue access point attack.

🔥xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

🔥sleuthkit

https://github.com/sleuthkit/sleuthkit

🔥routersploit

Exploitation Framework for Embedded Devices

🔥w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

🔥brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

🔥Faraday

Open Source Vulnerability Management Platform

🔥rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

🔥wb

Quickly fetches files from Wayback Machine.

🔥Phonebook.cz

Phonebook lists all domains, email addresses, or URLs for the given input domain. Wildcards such as *.gov.uk are allowed.

🔥Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

🔥XFFenum

X-Forwarded-For [403 forbidden] enumeration

🔥awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff.

🔥awesome-vulnerable-apps

Awesome Vulnerable Applications

🔥bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

🔥android-security-awesome

A collection of android security related resources

🔥CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

🔥PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🔥SSTImap

SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself.

🔥JSONBee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

🔥OWASP ZAP

World’s most popular free web security tools and is actively maintained by a dedicated international team of volunteers

🔥cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more...

🔥getsploit

Command line utility for searching and downloading exploits

🔥Eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

🔥jaeles

The Swiss Army knife for automated Web Application Testing

🔥Osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

🔥nikto

Nikto web server scanner

🔥arachni

Web Application Security Scanner Framework

🔥Sn1per

Automated pentest framework for offensive security experts

🔥metasploit-framework

Metasploit Framework

🔥can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

🔥takeover

A tool for testing subdomain takeover possibilities at a mass scale.

🔥subjack

Subdomain Takeover tool written in Go

🔥SubOver

A Powerful Subdomain Takeover Tool

🔥jwt-hack

jwt-hack is tool for hacking / security testing to JWT.

🔥postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

🔥jwt-cracker

Simple HS256 JWT token brute force cracker

🔥jwt_tool

A toolkit for testing, tweaking and cracking JSON Web Tokens

🔥CMSmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

🔥joomscan

OWASP Joomla Vulnerability Scanner Project

🔥wpscan

WPScan is a free, for non-commercial use, black box WordPress security scanner

🔥WPSpider

A centralized dashboard for running and scheduling WordPress scans powered by wpscan utility.

🔥CloudScraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

🔥S3BucketList

Firefox plugin that lists Amazon S3 Buckets found in requests

🔥S3Scanner

Scan for open AWS S3 buckets and dump the contents

🔥AWSBucketDump

Security Tool to Look For Interesting Files in S3 Buckets

🔥GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

🔥GitHunter

A tool for searching a Git repository for interesting content

🔥GitMiner

Tool for advanced mining for content on Github

🔥detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

🔥github-search

Tools to perform basic search on GitHub.

🔥gitrob

Reconnaissance tool for GitHub organizations

🔥git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

🔥GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

🔥truffleHog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

🔥gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services

🔥git-secrets

Prevents you from committing secrets and credentials into git repositories

🔥gitleaks

Scan git repos (or files) for secrets using regex and entropy

🔥thc-hydra

Hydra is a parallelized login cracker which supports numerous protocols to attack.

🔥BruteX

Automatically brute force all services running on a target.

🔥xxexploiter

Tool to help exploit XXE vulnerabilities

🔥XXEinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

🔥domxssscanner

DOMXSS Scanner is an online tool to scan source code for DOM based XSS vulnerabilities

🔥XSSwagger

A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks

🔥XSS-Radar

XSS Radar is a tool that detects parameters and fuzzes them for cross-site scripting vulnerabilities.

🔥BruteXSS

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application.

🔥xssValidator

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.

🔥bXSS

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

🔥xsser

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

🔥dalfox

DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

🔥xsscrapy

XSS spider - 66/66 wavsep XSS detected

🔥xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

🔥XSStrike

Most advanced XSS scanner.

🔥xssor2

XSS'OR - Hack with JavaScript.

🔥SQLiScanner

Automatic SQL injection with Charles and sqlmap api

🔥waybackSqliScanner

Gather urls from wayback machine then test each GET parameter for sql injection.

🔥sqlmap

Automatic SQL injection and database takeover tool

🔥NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

🔥ssrfDetector

Server-side request forgery detector

🔥httprebind

Automatic tool for DNS rebinding-based SSRF attacks

🔥SSRFire

An automated SSRF finder. Just give the domain name and your server and chill! 😉 Also has options to find XSS and open redirects

🔥gaussrf

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

🔥smuggler

An HTTP Request Smuggling / Desync testing tool written in Python 3

🔥SSRFmap

Automatic SSRF fuzzer and exploitation tool

🔥http-request-smuggling

HTTP Request Smuggling Detection Tool

🔥race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

🔥requests-racer

Small Python library that makes it easy to exploit race conditions in web apps with Requests.

🔥turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

🔥OpenRedireX

A Fuzzer for OpenRedirect issues

🔥razzer

A Kernel fuzzer focusing on race bugs

🔥Oralyzer

Open Redirection Analyzer

🔥Injectus

CRLF and open redirect fuzzer

🔥ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

🔥Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily

🔥shapeshifter

GraphQL security testing tool

🔥headi

Customisable and automated HTTP header injection.

🔥GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

🔥dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

🔥inql

A Burp Extension for GraphQL Security Testing

🔥CRLF-Injection-Scanner

Command line tool for testing CRLF injection on a list of domains.

🔥XSRFProbe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

🔥CORStest

A simple CORS misconfiguration scanner

🔥CRLFsuite

A fast tool specially designed to scan CRLF injection

🔥Corsy

CORS Misconfiguration Scanner

🔥wfuzz

Web application fuzzer

🔥ffuf

Fast web fuzzer written in Go

🔥Arjun

HTTP parameter discovery suite.

🔥ParamSpider

Mining parameters from dark corners of Web Archives.

🔥parameth

This tool can be used to brute discover GET and POST parameters

🔥param-miner

This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities.

🔥gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

🔥getJS

A tool to fastly get all javascript sources/files

🔥BurpJSLinkFinder

Burp Extension for a passive scanning JS files for endpoint links.

🔥waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

🔥LinkFinder

A python script that finds endpoints in JavaScript files

🔥LinksDumper

Extract (links/possible endpoints) from responses & filter them via decoding/sorting

🔥hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

🔥filebuster

An extremely fast and flexible web fuzzer

🔥gospider

Gospider - Fast web spider written in Go

🔥gobuster

Directory/File, DNS and VHost busting tool written in Go

🔥dirsearch

Web path scanner

🔥retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

🔥fingerprintx

fingerprintx is a standalone utility for service discovery on open ports that works well with other popular bug bounty command line tools.

🔥webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

🔥whatweb

Next generation web scanner

🔥httpscreenshot

HTTPScreenshot is a tool for grabbing screenshots and HTML of large numbers of websites.

🔥wappalyzer

Identify technology on websites.

🔥eyeballer

Convolutional neural network for analyzing pentest screenshots

🔥scrying

A tool for collecting RDP, web and VNC screenshots all in one place

🔥gowitness

gowitness - a golang, web screenshot utility using Chrome Headless

🔥WitnessMe

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

🔥Aquatone

Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface.

🔥screenshoteer

Make website screenshots and mobile emulations from the command line.

🔥ScanCannon

Combines the speed of masscan with the reliability and detailed enumeration of nmap

🔥EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

🔥naabu

A fast port scanner written in go with focus on reliability and simplicity.

🔥nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

🔥masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

🔥RustScan

The Modern Port Scanner

🔥censys-subdomain-finder

Perform subdomain enumeration using the certificate transparency logs from Censys.

🔥assetfinder

Find domains and subdomains related to a given domain

🔥domained

Multi Tool Subdomain Enumeration

🔥shuffledns

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output

🔥interactsh

An OOB interaction gathering server and client library

🔥Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

🔥tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

🔥katana

A next-generation crawling and spidering framework.

🔥dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

🔥uncover

Quickly discover exposed hosts on the internet using multiple search engines.

🔥subfinder

Fast passive subdomain enumeration tool.

🔥httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

🔥massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

🔥nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

🔥Findomain

The fastest and cross-platform subdomain enumerator, do not waste your time.

🔥Sublist3r

Fast subdomains enumeration tool for penetration testers

🔥Amass

In-depth Attack Surface Mapping and Asset Discovery