The lazier way to manage everything docker

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Fast web fuzzer written in Go

In-depth attack surface mapping and asset discovery

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.

Open-Source Phishing Toolkit

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Anteon (formerly Ddosify) - Effortless Kubernetes Monitoring and Performance Testing. Available on CLI, Self-Hosted, and Cloud

A vulnerability scanner for container images and filesystems

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

It's like curl -v, with colours.

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

The Havoc Framework.

An HTTP toolkit for security research.

Modlishka. Reverse Proxy.

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

An automated e-mail OSINT tool

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Fetch all the URLs that the Wayback Machine knows about for a domain

Find domains and subdomains related to a given domain

a drop-in replacement for Nmap powered by shodan.io

OnionScan is a free and open source tool for investigating the Dark Web.

A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.

Quickly discover exposed hosts on the internet using multiple search engines.

Bruteforcing from various scanner output - Automatically attempts default creds on found services.