Tools

wkovacs64/pwned

CLI tool to query the Have I Been Pwned API for breached accounts, pastes, and password exposure, enabling rapid security assessment of compromised…

preflightsh/preflight

Go-based CLI tool that scans codebases for launch readiness, detecting missing configuration, security hygiene issues, secret leaks, and integration…

opensc/opensc

Open source smart card tools and middleware. PKCS#11/MiniDriver

majd/ipatool

Command-line tool that allows searching and downloading app packages (known as ipa files) for iOS, iPadOS, tvOS, and visionOS from the App Store.

testssl/testssl.sh

Testing TLS/SSL encryption anywhere on any port

moond4rk/hackbrowserdata

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

blake3-team/blake3

Fast cryptographic hash function with PRF, MAC, KDF, and XOF modes. Supports verified streaming, incremental updates, and parallelized hashing via…

sec-dan/wp2shell-scanner

Read-only CLI to check whether a WordPress site is exposed to WP2Shell (CVE-2026-63030 / CVE-2026-60137)

e4zyy/project-cve-2026-33017

CVE-2026-33017 - Langflow Unauthenticated RCE Exploit

aerleon/aerleon

Generate firewall ACLs for Cisco, Juniper, Palo Alto, and more from a single YAML policy language via CLI or Python API.

bishopfox/sj

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

pgedge/pgedge-anonymizer

An anonymizer tool for replacing PII and similar data in dev/test databases copied from production

s0md3v/wappalyzer-next

detect technologies with wappalyzer alternative

tsl0922/ttyd

Share your terminal over the web

nextdns/nextdns

Command-line DNS-over-HTTPS client and proxy for encrypted, tamper-resistant DNS resolution; works with any DoH provider and supports split-horizon…

asciimoo/wuzz

Interactive cli tool for HTTP inspection

zmap/zdns

Fast DNS Lookup Library and CLI Tool