Repository Index

🤖 The Modern Port Scanner 🤖

• security
• pentesting
• hacking
• port

Directory/File, DNS and VHost busting tool written in Go

• go
• pentesting
• tool
• dns

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

• mobile-app
• pentesting
• android-application
• ios-app

An HTTP toolkit for security research.

• mitm
• proxy
• http
• pentesting

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

• mobile-app
• pentesting
• android-application
• ios-app

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

• cve-scanner
• mcp-server
• mcp-tools
• osv

Hacking Toolkit

• network-analysis
• networking
• scapy
• python3

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

DNS Rebinding Exploitation Framework

• dns-rebinding
• red-team
• hacking
• web-hacking

🛡️ Free Open-Source AI-Powered Security Terminal & Vulnerability Scanner (CVE, SBOM). Multi-Protocol Access: SSH, SFTP, RDP, VNC, Serial. 12+ AI Agents (OpenAI, DeepSeek) for Pentesting, CTF, DevSecOps & Security Automation. Cross-Platform & Web UI.

• anubis
• developer-tools
• electron
• ftp

Packet monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux

• packet-generator
• packet-analyzer
• network
• networking

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing

Mock an SSH server and define all commands it supports (Python, Twisted)

• mock
• ssh
• python
• hylang