
SteppingStones
Web-based red team activity logging, reporting, and situational awareness tool with Cobalt Strike and BloodHound integration.

Web-based red team activity logging, reporting, and situational awareness tool with Cobalt Strike and BloodHound integration.

🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and…

Offensive 802.11 auditing tool that automates WPA/WPA2 handshake and PMKID capture using deauthentication, rogue-client, and channel-switch attacks,…

CLI tool to query the Have I Been Pwned API for breached accounts, pastes, and password exposure, enabling rapid security assessment of compromised…

Command-line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app…

🕵️♂️ All-in-one OSINT tool for analysing any website

A real-time network connection monitoring tool built with Rust and GTK4, displaying active connections with live I/O statistics in a modern graphical…

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked…

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…

Comfortably monitor your network traffic 🕵️♂️

A spy satellite simulator in your browser, except the data is real. Live open source spatial intelligence on a photorealistic 3D globe.

Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

Fast CLI tool to scan websites, sitemaps, and URL lists for broken links, with concurrent workers, coverage reporting, and multiple output formats.

Tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS, using a Web UI…

Powershell tool to automate Active Directory enumeration.

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.