A collective list of free APIs

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Scrapy, a fast high-level web crawling & scraping framework for Python.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Fast subdomains enumeration tool for penetration testers

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

A swiss army knife for pentesting networks

Retrieval Augmented Generation (RAG) chatbot powered by Weaviate

🛡️ Open-source and next-generation Web Application Firewall (WAF)

A new kind of Progress Bar, with real-time throughput, ETA, and very cool animations!

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Arsenal is just a quick inventory and launcher for hacking programs

An OSINT tool to search for accounts by username and email in social networks.

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

Fully featured and community-driven hacking environment

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Phishing catcher using Certstream

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +54 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC,…

Send phishing messages and attachments to Microsoft Teams users

A tool to scrape LinkedIn without API restrictions for data reconnaissance

Ready-to-use and customizable Authentications and Oauth2 management for FastAPI ✨

Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.

Solve Google reCAPTCHA in less than 5 seconds! 🚀

smbclient-ng, a fast and user friendly way to interact with SMB shares.

Invisible network protocol sniffer