Tools

wattocyber/vegadns

Rust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.

owasp/openshield

Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with…

molly/gh-dork

Automated GitHub dorking tool that searches user, organization, and repository code for exposed secrets, credentials, and security misconfigurations…

viralmaniar/smwyg-show-me-what-you-got

This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text…

peewpw/invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

cyrus-and/zizzania

Automated DeAuth attack

topscoder/nuclei-wordfence-cve

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

tuhinshubhra/red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

thoughtfuldev/eagleeye

Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.

silverpoision/rock-on

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

talkaboutcybersecurity/gitmonitor

One way to continuously monitor sensitive information that could be exposed on Github

mobb-dev/bugsy

Automatic security vulnerability remediation for your code.

makefu/dnsmap

fork of http://code.google.com/p/dnsmap/source/checkout

megamansec/ssh-snake

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

marius-rothenbuecher/pentestbro

Windows-based reconnaissance tool combining subdomain enumeration, port scanning, banner grabbing, whois lookups, and web path enumeration for…

swelljoe/nelson

Finding vulnerabilities through dumb brute force

a3h1nt/sububy

Modular subdomain enumeration suite with certificate transparency, DNS brute-force, and API-based discovery. Includes post-enumeration modules for…