Tools

00xc/h2buster

A threaded, recursive, web directory brute-force scanner over HTTP/2.

kevin-robertson/inveighzero

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

synacktiv/laravel-crypto-killer

A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications.

carmaa/nacker

Nacker is a tool to circumvent 802.1x Network Access Control (NAC) on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on…

6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

rly0nheart/ipmap

A cross-platform easy-to-use ip geolocation & mapping tool.

orange-cyberdefense/rabid

🍪 A CLI tool and library allowing to simply decode all kind of BigIP cookies.

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

nmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

lissy93/web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

shadow1ng/fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

hunxbyts/ghosttrack

Useful tool to track location or mobile number

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

jofpin/trape

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…

rfidresearchgroup/proxmark3

Hardware tool for RFID analysis, emulation, and penetration testing. Supports 125kHz, 13.56MHz protocols (MIFARE, iClass, ISO14443/15693) with key…

p1ngul1n0/blackbird

An OSINT tool to search for accounts by username and email in social networks.

aboul3la/sublist3r

Fast subdomains enumeration tool for penetration testers