47,133 repositories indexed
1–24 of 39 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
DNS-Blocklists: For a better internet - keep the internet clean!
E-mails, subdomains and names Harvester - OSINT
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
In-depth attack surface mapping and asset discovery
Fast passive subdomain enumeration tool.
Fast subdomains enumeration tool for penetration testers
The recursive internet scanner for hackers. 🧡
Six Degrees of Domain Admin
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
A fast sub domain brute tool for pentesters
A self-contained cryptographic library for Python
Create randomly insecure VMs
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
Reconnaissance Swiss Army Knife
Analyze the security of any domain by finding all the information possible. Made in python.
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
TranslatedA lightweight DDD forward/reverse business modeling framework that supports the architectural evolution of complex business systems!
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️