Tools

trufflesecurity/of-cors

Automated CORS misconfiguration discovery tool using typosquatting domains and browser service workers to probe internal networks of bug bounty…

nccgroup/windowsdaclenumproject

A collection of tools to enumerate and analyse Windows DACLs

0xirison/printnightmare-patcher

A patch for PrintNightmare vulnerability that occurs to print spooler service for Windows machines [CVE-2021-34527]

gdraperi/slurp-1

S3 bucket enumerator

murataydemir/cve-2021-3019

[CVE-2021-3019] LanProxy Directory Traversal

yaupunal/cve-2025-55182-scanner

CVE-2025-55182-scanner with 2 different method

wadesweaponshed/check-point-trusted-access-review

Local web app for conducting a Check Point Trusted Access Review. This scanner is built specifically to look for configuration issues around…

irgoncalves/f5-waf-quick-patch-cve-2021-44228

This tool creates a custom signature set on F5 WAF and apply to policies in blocking mode

6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

hantwister/scat

HP SiteScope Credential Acquisition Tool

cisagov/scubagear

Automation to assess the state of your M365 tenant against CISA's baselines

cogiceo/gpohound

Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data

elc0mpa/aws-doctor

Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️

praetorian-inc/trajan

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

rolix44/kubestroyer

Go-based Kubernetes exploitation tool that scans for exposed ports and exploits cluster misconfigurations, including anonymous Kubelet RCE and etcd…

tenable/escalategpt

An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.

spyboy-productions/websecprobe

Security testing tool for analyzing HTTP 403 responses and identifying access control misconfigurations in web applications.