Repository Index

Incredibly fast crawler designed for OSINT.

• crawler
• spider
• python
• osint

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

• pentest
• brute-force

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

• wordlist
• wordlist-generator
• password
• cracking

Analyze the security of any domain by finding all the information possible. Made in python.

Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.

• chat-archive
• python
• secret-scanning
• sqlite

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API

• reverse-engineering
• disassembler
• ida-plugin
• ida

TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...

• password-generator
• password-dictionaries
• wordlist-generator
• brute-force

Searches various online resources to try and get as much info about an IP/domain as possible.

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

• docker
• security
• audit

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

• golang
• go
• supply-chain
• security

Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.

• hashcat
• ntlmv1-hashcat
• hash-formats
• ntlmv2

A script to automate the creation of cloud infrastructure for hash cracking.

• redteam-infrastructure
• redteaming
• pentest-tool
• password-cracker

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

• ansible
• ansible-playbook
• devsecops
• infrastructure-as-code