Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1838 results

Probe-CVE-2026-98432

bitwire-it/probe-cve-2026-98432

Local kernel version checker, remote MPTCP capability probe, and interactive scan-and-probe CLI for assessing exposure to the Linux kernel IPv4 TCP…

defensive-toolsinformation-gatheringnetwork-mapping+6

25 days ago

CVE-2026-97161

murrez/cve-2026-97161

Python PoC for CVE-2026-97161: fingerprints the Joomla UP plugin and probes unauthenticated path traversal via com_ajax ajax-view to read…

exploitationinformation-gatheringreconnaissance+3

1 month ago

sniperscope

kamehameha-ctrl/sniperscope

External attack surface management workstation that correlates DNS, certificate transparency, Shodan, CVEDB, TLS and OSINT data into risk-scored…

digital-forensicsdns-analysisemail-harvesting+8

417h 6m ago

CVE-2026-87902

langz337/cve-2026-87902

Scans WordPress Core 4.7.0–7.1.1 for CVE-2026-87902 unauthenticated LFI via double-encoded pagename traversal, with optional PEAR config-create RCE…

exploitationinformation-gatheringpenetration-testing+6

11 month ago

ProtonScope

emrekybs/protonscope

Lightweight Python OSINT tool that analyzes email addresses to extract intelligence and digital footprint data, with a focus on ProtonMail…

email-harvestingemail-securityinformation-gathering+3

27 months ago

tgsherlock

emrekybs/tgsherlock

Telegram OSINT tool for user, group and message investigation

data-exfiltrationinformation-gatheringlog-analysis+6

1 day ago

Content-Bruteforcing-Wordlist

cujanovic/content-bruteforcing-wordlist

Wordlist for content(directory) bruteforce discovering with Burp or dirsearch

curated-resourcesinformation-gatheringpenetration-testing+2

2192 years ago

Virtual-host-wordlist

cujanovic/virtual-host-wordlist

Wordlist of virtual host names for vhost discovery and enumeration during web reconnaissance, designed for use with virtual-host-discovery and…

curated-resourcesinformation-gatheringpenetration-testing+2

545 years ago

RobotsDisallowed

danielmiessler/robotsdisallowed

A curated list of the most common and most interesting robots.txt disallowed directories.

curated-resourcesinformation-gatheringpenetration-testing+2

1.5k4 years ago

wafmeow

lu1sdv/wafmeow

wafw00f's fingerprints. Go speed. Pipeline-native. WAF detection from live HTTP and offline captures.

information-gatheringnetwork-securitypenetration-testing+5

674 days ago

ARTEX

baarai/artex

LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…

ai-securityinformation-gatheringnetwork-mapping+9

85510 days ago

passer

activecm/passer

Passive service locator, a python sniffer that identifies servers, clients, names and much more

defensive-toolsdns-analysisfingerprint-spoofing+6

2688 months ago

blackbird

antoniaci/blackbird

An OSINT tool to search for accounts by username and email in social networks.

email-harvestinginformation-gatheringosint+4

9.6k1 day ago

ahmia-site

ahmia/ahmia-site

Django-based search engine and crawler stack that indexes .onion hidden services on the Tor network, providing searchable metadata for dark web…

crawlerinformation-gatheringosint+3

79227 days ago

darkfox

aryanguenthner/darkfox

CTI Cyber Threat Intelligence OSINT Dark Web Deep Web Research. Ransomware gang information gathering tool.

crawlerforensicsinformation-gathering+6

1971 month ago

TorCrawl.py

mikemeliz/torcrawl.py

Crawl and extract (regular or onion) webpages through TOR network

crawlerinformation-gatheringosint+4

5474 months ago

Darkus

lucksi/darkus

Searches dark web and onion search engines for keywords and returns matching onion links, with optional local database storage and Ahmia blacklist…

crawlergeneral-purpose-utilitiesinformation-gathering+3

7188 months ago

CVE-2026-86426

guila95/cve-2026-86426

Proof-of-concept and recon framework for CVE-2026-86426, a LibreNMS API authentication bypass via type confusion, extracting SNMP credentials and…

exploitationinformation-gatheringnetwork-mapping+3

10 days ago