
CrawlBox
Easy way to brute-force web directory.
Tools for testing, exploiting, and securing web applications and APIs.

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

👻 A LAN dropbox chatbot controllable via Telegram

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for…

Brute forcer and shell deployer for WildFly

Native Java-based deserialization exploit for WebLogic T3 (and T3S) listeners.

Python logger with multiple features.

Generate unicode domains for IDN Homograph Attack and detect them.

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

This tool can be used to brute discover GET and POST parameters

DKMC - Dont kill my cat - Malicious payload evasion tool

WPScan rewritten in Python + some WPSeku ideas

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…


Open-source pentesting management and automation platform by Salesforce Product Security

GoLismero - The Web Knife