pentesting

Hunt down social media accounts by username across social networks

Automatic SQL injection and database takeover tool

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

🤖 The Modern Port Scanner 🤖

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

A collection of hacking tools, resources and references to practice ethical hacking.

Fast web fuzzer written in Go

Web path scanner

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Directory/File, DNS and VHost busting tool written in Go

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

hydra

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

A swiss army knife for pentesting networks

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Attack Surface Management Platform

The recursive internet scanner for hackers. 🧡

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.