Tools

lkarlslund/adalanche

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

fmd-foss/fmd-android

Find your device and control it remotely. Works over SMS, instant messengers, or FMD Server's web interface. A secure open source alternative to…

gtgalaxi/quick-lookup-ptrun

PowerToys Run plugin for instant IP, domain, and hash lookups across multiple threat intelligence platforms like Shodan, VirusTotal, and GreyNoise.

t0thkr1s/gtfobins-cli

Search for Unix binaries that can be exploited to bypass system security restrictions.

danielmiessler/egression

Test a network's egress controls with various levels of success and failure.

andreicscs/honeywire

Open-source deception platform that turns any Linux machine into a high-signal canary. Deploy tripwire sensors on files, ports, and network services…

humblelad/needle

Instant access to you bug bounty submission dashboard on various platforms + publicly disclosed reports + #bugbountytip

zilbonn/owasp-wstg-rag

OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code

makiraid/remot3d

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to exploit a system or server that runs a PHP…

teycir/honeypotscan

Free honeypot token scanner for Ethereum, Polygon & Arbitrum. Detect scam tokens before you buy. Instant analysis of smart contracts using 13…

decalage2/collisions

Hash collisions and their exploitations

tc4dy/cve-2026-24061-poc-exploit

Remote authentication bypass exploit for GNU inetutils-telnetd (CVE-2026-24061) using CRLF injection to gain instant root shell. Supports single/mass…

sh4den/cve-2026-24061

Proof of Concept: CVE-2026-24061 is a critical authentication bypass vulnerability in GNU inetutils-telnetd allowing unauthenticated remote attackers…

r3m0t3nu11/cve-2025-1015

an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant…

nu11secur1ty/burpsuite-grand-master-tools

Modular toolkit for pentesters that converts Burp Suite captured HTTP requests into browsable URLs and automates workflow actions with auditable…