Repository Index

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.

• agent
• blue-team
• cybersecurity
• cybersecurity-tools

Fast HTTP enumerator

• http
• fuzz
• fuzzer
• enumerator

DNS Rebinding Exploitation Framework

• dns-rebinding
• red-team
• hacking
• web-hacking

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security

:hammer: Manage your website via terminal

• php
• security-tools
• python
• pentest

Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust

• devops
• developer-tools
• pentest
• security

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

• hacking-tools
• bash
• git-dumper
• pentesting

Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

• cybersecurity
• hacktoberfest
• low-level
• mutator

Various wordlists FR & EN - Cracking French passwords

• wordlists
• hashcat
• french
• cracking-hashes

Hashcat web interface

• hashcat
• cracking
• analytics
• pentesting

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.

• ai-agents
• autonomous-agents
• kali-linux
• llm-agents

THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING

• ai-bug-bounty
• ai-bug-finder
• ai-bug-reporter
• ai-hacking

:hammer: A multiple reverse shell session/client manager via terminal

• socket
• python
• ctf
• attack-defense

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing

Automation of some MAPT activities and interaction with the mobile Android device.

• android-analysis
• frida
• mobile-hacking
• mobile-penetration-testing

Routopsy - Hacking Routers with Routers

• network
• pentest
• security

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing

Wavestone's web interface for password cracking with hashcat

• pentest
• password

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security

Open-source agentic security operations platform:

• agentic-security
• cyber-security
• cyber-threat-intelligence
• cybersecurity