Tools

zarcolio/sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

projectdiscovery/chaos-client

Go client to communicate with Chaos DB API.

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

pepelux/sippts

Set of tools to audit SIP based VoIP Systems

tayontech/scope

AI agent set for cloud security purple teaming, runs inside Claude Code, Gemini CLI, and Codex.

weirdmachine64/sharkmcp

A swiss-knife MCP server for analysing PCAP files

dafthack/mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

abdullahmaqbool22/explosive-as-hell-mcs-qualifer-web-500

[First-Blood-XO] React Server Component endpoint vulnerable to CVE-2025-55182 (RCE) → enumerated SUID binaries → /usr/bin/perl had SUID set → used…

pwnfoo/ntlmrecon

Enumerate information from NTLM authentication enabled web endpoints 🔎

ransc0rp1on/icmp-timestamp-poc

A reconnaissance tool to detect CVE-1999-0524 (ICMP Timestamp Disclosure) by automating timestamp extraction via nping or hping3. Converts raw ICMP…

pentestpad/subzy

Subdomain takeover vulnerability checker

sardine-web/cve-2024-6387_check

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead to sshd to handle some…

mwr-cybersec/pxethief

PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager

g0ldencybersec/cloudrecon

Suite of tools for red teamers and bug hunters to discover ephemeral cloud assets by scanning IP ranges and inspecting SSL certificates for hidden…

zyylhn/zscan

Zscan a scan blasting tool set