47,133 repositories indexed
25–48 of 162 · Most stars
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
The recursive internet scanner for hackers. 🧡
Nikto web server scanner
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
Scanning APK file for URIs, endpoints & secrets.
Automated Αll-in-One OS command injection exploitation tool.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
The authorization Gem for Ruby on Rails.
Open Source Cloud Native Application Protection Platform (CNAPP)
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Loki - Simple IOC and YARA Scanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
Automated NoSQL database enumeration and web application exploitation tool.
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.