Tools

mauricelambert/cve-2021-31166

CVE-2021-31166: exploitation with Powershell, Python, Ruby, NMAP and Metasploit.

m0nad/hellraiser

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

0xsauby/yasuo

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

rapid7/recog

Pattern recognition for hosts, services, and content

s0c5/remotepasswordwifi

Script in Ruby. Break Remote router wifi passwords.

hahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

joshlarsen/aws-recon

Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.

darkoperator/dnsrecon

DNS Enumeration Script

urbanadventurer/urlcrazy

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

ronin-rb/ronin

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of…

hatbashbr/hatcloud

discontinued

swisskyrepo/wordpresscan

WPScan rewritten in Python + some WPSeku ideas

tvdstaaij/telegram-history-dump

Backup Telegram chat logs with incremental support, multiple output formats (JSON, HTML, plaintext), and media download via telegram-cli remote…

antisnatchor/phishlulz

Automated phishing campaign toolset that spawns dedicated AWS EC2 instances with integrated PhishingFrenzy and BeEF, plus subdomain discovery and…

rastating/joomlavs

A black box, Ruby powered, Joomla vulnerability scanner

a3h1nt/sububy

Modular subdomain enumeration suite with certificate transparency, DNS brute-force, and API-based discovery. Includes post-enumeration modules for…

hackspeak/cve-2026-66066

CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing