Tools

philwantsfish/shard

A command line tool to detect shared passwords

nccgroup/blesuite-cli

BLESuite_CLI is a command line tool to enable an easier way to test Bluetooth Low Energy (BLE) devices

ayrx/tlsenum

A command line tool to enumerate TLS cipher-suites supported by a server

orf/xcat

XPath injection tool

cyborgsecurity/poisonapple

CLI tool for applying and removing macOS persistence mechanisms, designed for threat emulation and red team operations. Supports 17 techniques…

kingsabri/godofwar

GodOfWar - Malicious Java WAR builder with built-in payloads

yojiwatanabe/networkalarm

A tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent…

pysectools/cve-2026-3629

WordPress Privilege Escalation Checker

swiftdevcollective/xcodeprojectsecurity

A macOS app to scan Xcode project files for possible security issues.

cristianzsh/amcache-evilhunter

Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.

kapejod/rtpnatscan

Minimal CLI scanner that probes RTP proxies and NAT helpers for NAT-stealing vulnerability, helping VoIP administrators validate and harden media…

ecomtech-oss/pisc

Public OCI-Image (docker image) Security Checker

anonkryptiquz/nextsploit

NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js

bishopfox/sj

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

byt3hx/jsleak

Concurrent CLI tool for discovering secrets, API keys, and links in JavaScript files during web reconnaissance, with custom regex pattern support and…

yuyudhn/tldhunt

Bash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…

nu11secur1ty/insect

High-performance web path discovery and directory brute-forcing tool. Discovers hidden files, directories, and endpoints using customizable…