edb is a cross-platform AArch32/x86/x86-64 debugger.

An ArchLinux based distribution for penetration testers and security researchers.

Rewrite of the popular wireless network auditor, "wifite"

Multi-Cloud Security Auditing Tool

Automatic SQL injection and database takeover tool

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Dradis Framework: Collaboration and reporting for IT Security teams

Vulnerability Static Analysis for Containers

A vulnerability scanner for container images and filesystems

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

The ZAP core project

A fast, simple, recursive content discovery tool written in Rust.

Nikto web server scanner

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Fast web fuzzer written in Go

Six Degrees of Domain Admin

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/rem…

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Directory/File, DNS and VHost busting tool written in Go

The Browser Exploitation Framework Project

📱 objection - runtime mobile exploration

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" fo…

A list of public penetration test reports published by several consulting firms and academic security groups.

The OpenAPI Specification Repository

This repository has the JSON file required to perform user enumeration on various websites.

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), ar…

A little tool to play with Windows security

Official OWASP Top 10 Document Repository