Fast passive subdomain enumeration tool.
- subdomain-enumeration
- osint
- subdomains
- bugbounty
47,133 repositories indexed
73–96 of 991 · Most stars
Fast passive subdomain enumeration tool.
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
Firmware Analysis Tool
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Directory/File, DNS and VHost busting tool written in Go
Automatically provision and manage TLS certificates in Kubernetes
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
CTF framework and exploit development library
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Incredibly fast crawler designed for OSINT.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
A vulnerability scanner for container images and filesystems
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Small and highly portable detection tests based on MITRE's ATT&CK.
An HTTP toolkit for security research.
hydra
fsociety Hacking Tools Pack – A Penetration Testing Framework
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
Disk encryption with strong security based on TrueCrypt
Program for determining types of files for Windows, Linux and MacOS.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.