ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

commix

Automated All-in-One OS Command Injection Exploitation Tool.

ctf-tools

Some setup scripts for security research tools.

ctf-writeups

ffuf

Fast web fuzzer written in Go

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

infinite-zip-unzipper

infinite-zip-unzipper

kazgangap

nmapcommandgenerator

A simple web interface for creating an Nmap command

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

php-reverse-shell

raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

rustscan

🤖 The Modern Port Scanner 🤖

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sublist3r

Fast subdomains enumeration tool for penetration testers

wazuh

Wazuh - The Open Source Security Platform

webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting