Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

256 results

netward-standalone

dragon-lady/netward-standalone

User-space bot and DDoS deflection for small HTTP services

anomaly-detectionanti-botdefensive-tools+6

8 days ago

ARTEX

baarai/artex

LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and…

ai-securityinformation-gatheringnetwork-mapping+9

8556 days ago

Check-Risk-WAF

check-risk-waf/check-risk-waf

Reverse-proxy web application firewall with WAF, anti-bot and anti-DDoS protection at L3/L4/L7, custom rules, rate limiting, geo/IP filtering and…

ai-securityanomaly-detectionanti-bot+7

1.6k16 days ago

UA3F

sunbk201/ua3f

Transparent HTTP(S) rewriting proxy supporting HTTP, SOCKS5, TPROXY, REDIRECT and NFQUEUE modes with HTTPS MitM, rule-based header/body rewriting and…

anti-botnetwork-mappingnetwork-security+5

68926 days ago

harlogger

doronz88/harlogger

Simple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)

information-gatheringios-securitymobile-app-pentesting+5

1861 month ago

Charles-Proxy-Mobile-Guide

thyrlian/charles-proxy-mobile-guide

Step-by-step guide to intercepting Android and iOS HTTP/HTTPS traffic with Charles Proxy, covering SSL proxying, CA certificate installation, and…

android-securityeducationios-security+6

1568 years ago

Evilginx3-Phishlets

simplerhacking/evilginx3-phishlets

This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use…

educationlearning-paths-coursespenetration-testing+5

7511 year ago

Good-MITM

zu1k/good-mitm

Rule-based MITM engine. Rewriting, redirecting and rejecting on HTTP(S) requests and responses, supports JavaScript rule.

network-securityprivacyscripting-automation+3

8583 years ago

ats-authproxy-prefix

abraxas/ats-authproxy-prefix

Apache Traffic Server 10.2.0 - High - Remote - Privilege leftover - authproxy prefix

authentication-authorizationexploitationlabs-practice+3

18 days ago

ats-realip-plugin-acl

abraxas/ats-realip-plugin-acl

Apache Traffic Server 10.2.0 - High - Remote - Privilege leftover - realip PLUGIN ACL fail-open

authentication-authorizationlabs-practicemisconfiguration+4

18 days ago

mitm-proxy-ja3-ja4

3radiance/mitm-proxy-ja3-ja4

Configurable Rust HTTP MITM proxy with TLS , HTTP/2 and TCP fingerprint spoofing.

anti-botcrawlerencryption-decryption-tools+7

1728 days ago

OBS-graphics-hook32-Hook

gmh5225/obs-graphics-hook32-hook

Demonstrates hooking OBS graphics-hook32.dll's D3D9 Present pointer to achieve stream-proof rendering that evades anti-cheat game capture detection.

anti-botbinary-analysiseducation+4

24 years ago

dsh-infinite-gen-5

minglink/dsh-infinite-gen-5

DeepSeek v4.1 flash 逆向工具（无限五代）求 Star 收藏 ⭐欢迎大家提交项目的改进

ai-assisted-reversingbinary-analysisbinary-exploitation+8

3.7k5 days ago

ARTEX

trhhubsd/artex

Multi-agent LLM system for autonomous penetration testing in isolated labs: planner/worker agents share asset and exploration graphs, with MITM…

ai-securityexploitationinformation-gathering+7

2.1k13 days ago

enterprise-abac-gateway

kavryxdev-group/enterprise-abac-gateway

Zero-trust reverse proxy and ABAC authorization gateway in Go with embedded OPA policy evaluation and distributed token revocation.

authentication-authorizationcloud-securitydefensive-tools+3

11 days ago

NoDPI4Android

gvcoder09/nodpi4android

Android proxy app that circumvents Deep Packet Inspection censorship by fragmenting TLS ClientHello packets and rewriting the TLS version to restore…

android-securityanti-botnetwork-security+3

4451 day ago

summit

pennacle-security/summit

Open-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.

api-security-testingfuzzinginformation-gathering+9

46 days ago

redknife

yukibtc/redknife

A Swiss Army knife for offensive security.

command-and-controlinformation-gatheringpenetration-testing+4

2 days ago