Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

551 results

Modlishka

drk1wi/modlishka

Modlishka. Reverse Proxy.

phishing-toolsweb-proxies-interceptionimpersonation-tools+6

5.4k2 months ago

thc-hydra

vanhauser-thc/thc-hydra

hydra

password-crackingpassword-attackshash-analysis+3

12.1k2 months ago

authelia

authelia/authelia

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

authentication-authorizationidentity-managementnetwork-access-control+3

28.5k9 hours ago

Archived

ansible-ssh-hardening

dev-sec/ansible-ssh-hardening

This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.

cloud-infrastructure-securityconfiguration-auditingnetwork-security+2

7865 years ago

Archived

tink

tink-crypto/tink

Multi-language cryptographic library providing AEAD, MAC, digital signature, and hybrid encryption APIs designed to reduce common cryptographic…

encryption-decryption-toolscryptographyauthentication

13.5k2 years ago

Archived

ticket_converter

zer1t0/ticket_converter

A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.

post-exploitationpenetration-testingutilities-frameworks+1

1714 years ago

Archived

certipy-merged

zimedev/certipy-merged

Tool for Active Directory Certificate Services enumeration and abuse

privilege-escalationreconnaissancevulnerability-analysis+7

1671 year ago

Archived

Silhouette

elastic/silhouette

Keep it secret, keep it safe

defensive-toolsidentity-access-managementauthentication

771 year ago

Archived

caOptics

jsa2/caoptics

CA Optics - Azure AD Conditional Access Gap Analyzer

defensive-toolsconfiguration-auditingcloud-security+3

3372 years ago

Archived

Modules

havocframework/modules

Modules used by the Havoc Framework

password-attackslateral-movementinformation-gathering+5

2732 years ago

Archived

zend-crypt

zendframework/zend-crypt

Cryptographic component from Zend Framework

encryption-decryption-toolscryptographyauthentication

876 years ago

Archived

passera

mwgg/passera

[UNSUPPORTED] A small tool to turn any entered passphrase into a strong secure password, allowing you to easily use different strong passwords for…

general-purpose-utilitiespassword-crackingencryption-decryption-tools+2

628 years ago

Archived

msspray

securityriskadvisors/msspray

Password attacks and MFA validation against various endpoints in Azure and Office 365

reconnaissancepassword-attackspenetration-testing+3

1533 years ago

Archived

f609-brute

lc-at/f609-brute

Simple brute force tool for Telkom Indonesia's ZTE F609 routers

password-attacksinformation-gatheringweb-security+2

82 years ago

Archived

KnockKnock

optiv/knockknock

Enumerate valid users within Microsoft Teams and OneDrive with clean output.

osintreconnaissanceinformation-gathering+3

621 year ago

Archived

Spray365

markoh17/spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in…

password-attacksids-ips-evasionpenetration-testing+3

3811 year ago

Archived

raider

digeex/raider

DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider

api-security-testingweb-securitypenetration-testing+1

1395 years ago

Archived

Talon

optiv/talon

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

password-crackingpassword-attackspenetration-testing+2

4413 years ago