SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

E-mails, subdomains and names Harvester - OSINT

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

BD-JB for up to PS4 12.50

PS4 Syscon Tools is a free solution that allow you to manipulate original PlayStation 4 Syscon chip (Renesas RL78/G13).

Passive hostname, domain and IP lookup tool for non-robots

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

PS4 tools for NOR and Syscon manipulations

RogueMaster Flipper Zero Firmware

🛰️ Represent any GraphQL API as an interactive graph

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Steganography Tool for Hiding and Extracting Secret Messages

python script for evaluate if you are vulnerable or not to next.js CVE-2025-29927

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated proof-of-concept (PoC) exploits.

NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js

CVE-2025-29927: Next.js Middleware Exploit

Automatic SQL injection and database takeover tool

An OOB interaction gathering server and client library

Automated All-in-One OS Command Injection Exploitation Tool.

Find way more from the Wayback Machine!

Tool to bypass 403/40X response codes.

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

HTTP parameter discovery suite.

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

Web path scanner