Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
Fast HTTP enumerator
DNS Rebinding Exploitation Framework
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
:hammer: Manage your website via terminal
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
The unix-way web crawler
Various wordlists FR & EN - Cracking French passwords
- wordlists
- hashcat
- french
- cracking-hashes
Hashcat web interface
TranslatedPacket monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
AWS Identity and Access Management Visualizer and Anomaly Finder
:computer:⚔️ A collection of awesome penetration testing resources, tools, and other shiny things.
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
Automation of some MAPT activities and interaction with the mobile Android device.
- android-analysis
- frida
- mobile-hacking
- mobile-penetration-testing
Routopsy - Hacking Routers with Routers
🔍A cutting edge context aware GraphQL API fuzzing tool!
Wavestone's web interface for password cracking with hashcat
Blazing fast GraphQL discovery & fingerprinting toolbox.
- discovery
- fingerprinting
- graphql
- graphql-tools