Repository Index

🤖 The Modern Port Scanner 🤖

• security
• pentesting
• hacking
• port

GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.

• go
• testing
• testing-tools
• devops

An HTTP toolkit for security research.

• mitm
• proxy
• http
• pentesting

:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing

• resiliency
• tcp-proxy
• go
• proxy

The recursive internet scanner for hackers. 🧡

• hacking
• neo4j
• osint
• osint-framework

Next generation web scanner

• security
• web
• scanner
• ruby

Cameradar hacks its way into RTSP videosurveillance cameras

• penetration-testing
• security
• hacking
• infosec

MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.

• mock-server
• proxy
• java-client
• javascript-client

cglib - Byte Code Generation Library is high level API to generate and transform Java byte code. It is used by AOP, testing, data access frameworks to generate dynamic proxy objects and intercept field access.

Control and manage Android devices from your browser.

• remote-control
• android
• debugging
• testing

Fortio load testing library, command line tool, advanced echo server and web UI in go (golang). Allows to specify a set query-per-second load and record latency histograms and other useful stats.

• golang
• golang-library
• golang-application
• performance

Papercut SMTP -- The Simple Desktop Email Server

• papercut
• smtp-server
• smtp
• testing

A Grunt workflow for designing and testing responsive HTML email templates with SCSS.

• litmus
• grunt
• css
• transactional-emails

Lightweight service virtualization/ API simulation / API mocking tool for developers and testers

• api-simulation
• golang
• proxy
• mitm

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

• wlan
• wpa
• wpa2
• raspberry-pi

Boilerplate-free mocking framework for Swift!

• mock
• mockito
• cuckoo
• stub

Profiling / Debugging assist tools for iOS. (Memory Leak, OOM, ANR, Hard Stalling, Network, OpenGL, Time Profile ...)

• ios
• debugging
• profiling
• assistant

Random data generation in Swift

• swift
• random
• random-generation
• protocol

Edit and replay captured network traffic at arbitrary speeds — a suite of pcap tools for *NIX and Windows.

• tcpreplay
• pcap
• netmap
• c

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

• cve-scanner
• mcp-server
• mcp-tools
• osv

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf

Hacking Toolkit

• network-analysis
• networking
• scapy
• python3

Chaos engineering tool for simulating real-world distributed system failures

• chaos
• testing
• proxy
• resilience

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative