1<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><link rel="preconnect" href="/" crossorigin=""/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/immutable/chunks/12ssnbsazuewp.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/immutable/chunks/1w3ypgb7gboxf.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/immutable/chunks/0actbgyr4rshc.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/immutable/chunks/0ne5wmdqb31eg.js"/>
1<script src="/_next/static/immutable/chunks/2u5v7xdlfh11m.js" async=""></script>
1<script src="/_next/static/immutable/chunks/04nmxdxg6yxad.js" async=""></script>
1<script src="/_next/static/immutable/chunks/2e5v3vseouhnh.js" async=""></script>
1<script src="/_next/static/immutable/chunks/turbopack-2cjcvrnkt-vr4.js" async=""></script>
1<script src="/_next/static/immutable/chunks/0t66m6z6rt_ft.js" async="" crossorigin=""></script>
1<script src="/_next/static/immutable/chunks/0foai6cpub7ey.js" async="" crossorigin=""></script>
1<link rel="preload" href="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit" as="script"/><title>Penetration Testing Tools & Commands - Essential Security Arsenal</title><meta name="description" content="Explore a comprehensive collection of penetration testing tools, commands, and techniques. Includes tools for reconnaissance, scanning, exploitation, web testing, wireless, and post-exploitation."/><meta name="keywords" content="penetration testing reports,pentest templates,security assessment,vulnerability testing,cybersecurity"/><meta property="og:title" content="Penetration Testing Tools Directory - Commands & Techniques Guide"/><meta property="og:description" content="Discover essential tools for penetration testing across multiple categories. Learn command syntax, usage, and real-world penetration testing scenarios."/><meta property="og:url" content="https://pentestreports.com/tools"/><meta property="og:site_name" content="PentestReports.com"/><meta property="og:type" content="website"/><meta name="twitter:card" content="summary"/><meta name="twitter:title" content="Penetration Testing Tools Directory - Commands & Techniques Guide"/><meta name="twitter:description" content="Discover essential tools for penetration testing across multiple categories. Learn command syntax, usage, and real-world penetration testing scenarios."/><meta name="next-size-adjust" content=""/><link rel="icon" type="image/svg+xml" href="/favicon.svg"/>
1<script src="/_next/static/immutable/chunks/0c0hxoamwjsbw.js" noModule=""></script>
1<script id="theme-setup"> 2 (function() { 3 var savedTheme = localStorage.getItem('theme'); 4 var systemTheme = window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'; 5 var theme = savedTheme || systemTheme; 6 document.documentElement.setAttribute('data-theme', theme); 7 })(); 8 </script>
8</head><body class="has-navbar-fixed-top"><div hidden=""><!--$--><!--/$--></div><!--$!--><template data-dgst="BAILOUT_TO_CLIENT_SIDE_RENDERING"></template><!--/$--><div class="container"><nav class="breadcrumb" aria-label="breadcrumbs"><ul><li class=""><a href="/">Home</a></li><li class="is-active"><a aria-current="page">Tools</a></li></ul></nav><div><div class="is-flex is-justify-content-space-between is-align-items-center mb-4"><h2 class="title mb-0">Penetration testing tools</h2><div class="dropdown is-right share-dropdown-container"><div class="dropdown-trigger"><button type="button" class="button is-primary is-outlined share-dropdown-btn" aria-haspopup="true" aria-expanded="false"><span class="icon"><i class="fa-solid fa-share-nodes"></i></span><span>Share</span><span class="icon is-small"><i class="fa-solid fa-angle-down share-dropdown-caret " aria-hidden="true"></i></span></button></div><div class="dropdown-menu" role="menu"><div class="dropdown-content share-dropdown-content"><a href="https://twitter.com/intent/tweet?url=&text=" target="_blank" rel="noopener noreferrer" class="dropdown-item share-dropdown-item"><span class="icon has-text-black"><i class="fa-brands fa-x-twitter"></i></span><span>Twitter/X</span></a><a href="https://www.linkedin.com/sharing/share-offsite/?url=" target="_blank" rel="noopener noreferrer" class="dropdown-item share-dropdown-item"><span class="icon has-text-link"><i class="fa-brands fa-linkedin"></i></span><span>LinkedIn</span></a><a href="https://reddit.com/submit?url=&title=" target="_blank" rel="noopener noreferrer" class="dropdown-item share-dropdown-item"><span class="icon has-text-danger"><i class="fa-brands fa-reddit"></i></span><span>Reddit</span></a><a href="https://www.facebook.com/sharer/sharer.php?u=" target="_blank" rel="noopener noreferrer" class="dropdown-item share-dropdown-item"><span class="icon has-text-info"><i class="fa-brands fa-facebook"></i></span><span>Facebook</span></a><a href="/cdn-cgi/l/email-protection#645b1711060e01071059420509145f060b001d59" class="dropdown-item share-dropdown-item"><span class="icon has-text-grey"><i class="fa-solid fa-envelope"></i></span><span>Email</span></a><hr class="dropdown-divider"/><a href="#" class="dropdown-item share-dropdown-item copy-link-item"><span class="icon has-text-grey-darker"><i class="fa-solid fa-copy"></i></span><strong>Copy link</strong></a></div></div></div></div><p>Unlock the full potential of your penetration testing engagements with our curated collection of essential commands and tools. This resource is designed for security professionals seeking to streamline their workflows, discover new techniques, and enhance their testing capabilities. Whether you are identifying vulnerabilities, exploiting misconfigurations, or automating tasks, these tools will equip you to tackle real-world challenges efficiently and effectively.</p><div class="columns mt-4"><div class="column is-3"><div class="ToolsClient-module__V0PrWq__facetSidebar"><div class="ToolsClient-module__V0PrWq__facetTitleRow"><h3 class="ToolsClient-module__V0PrWq__facetSidebarTitle"><i class="fa-solid fa-filter"></i> Filters</h3></div><div class="ToolsClient-module__V0PrWq__facetGroup"><h4 class="ToolsClient-module__V0PrWq__facetGroupTitle"><span>Category</span></h4><input type="text" placeholder="Search categories..." class="ToolsClient-module__V0PrWq__facetSearchInput" value=""/><div class="ToolsClient-module__V0PrWq__facetOptionsList ToolsClient-module__V0PrWq__facetScrollableList"><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Cloud">Cloud</span></div><span class="ToolsClient-module__V0PrWq__facetCount">10</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Collaboration and Report">
8Collaboration and Report</span></div><span class="ToolsClient-module__V0PrWq__facetCount">55</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Cryptography">Cryptography</span></div><span class="ToolsClient-module__V0PrWq__facetCount">20</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Intentionally Vulnerable Applications">Intentionally Vulnerable Applications</span></div><span class="ToolsClient-module__V0PrWq__facetCount">16</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Other">Other</span></div><span class="ToolsClient-module__V0PrWq__facetCount">47</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Red Teaming">Red Teaming</span></div><span class="ToolsClient-module__V0PrWq__facetCount">78</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="System Exploitation">System Exploitation</span></div><span class="ToolsClient-module__V0PrWq__facetCount">52</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Threat Intelligence">Threat Intelligence</span></div><span class="ToolsClient-module__V0PrWq__facetCount">12</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Configuration Audit">Configuration Audit</span></div><span class="ToolsClient-module__V0PrWq__facetCount">11</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Crisis Management">Crisis Management</span></div><span class="ToolsClient-module__V0PrWq__facetCount">5</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Digital Forensics">Digital Forensics</span></div><span class="ToolsClient-module__V0PrWq__facetCount">19</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Honeypot and Decoy">Honeypot and Decoy</span></div><span class="ToolsClient-module__V0PrWq__facetCount">6</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Incident Response">Incident Response</span></div><span class="ToolsClient-module__V0PrWq__facetCount">17</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="OSINT and Reconnaissance">OSINT and Reconnaissance</span></div><span class="ToolsClient-module__V0PrWq__facetCount">112</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Reverse Engineering">Reverse Engineering</span></div><span class="ToolsClient-module__V0PrWq__facetCount">93</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Vulnerability Assessment">Vulnerability Assessment</span></div><span class="ToolsClient-module__V0PrWq__facetCount">11</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Web Application
8Exploitation">Web Application Exploitation</span></div><span class="ToolsClient-module__V0PrWq__facetCount">228</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Binary Exploitation">Binary Exploitation</span></div><span class="ToolsClient-module__V0PrWq__facetCount">6</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Cracking">Cracking</span></div><span class="ToolsClient-module__V0PrWq__facetCount">55</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Defensive">Defensive</span></div><span class="ToolsClient-module__V0PrWq__facetCount">17</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Hardware">Hardware</span></div><span class="ToolsClient-module__V0PrWq__facetCount">2</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Steganography">Steganography</span></div><span class="ToolsClient-module__V0PrWq__facetCount">17</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Adversary Simulation">Adversary Simulation</span></div><span class="ToolsClient-module__V0PrWq__facetCount">13</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Code Analysis">Code Analysis</span></div><span class="ToolsClient-module__V0PrWq__facetCount">26</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Networking">Networking</span></div><span class="ToolsClient-module__V0PrWq__facetCount">152</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Plugins">Plugins</span></div><span class="ToolsClient-module__V0PrWq__facetCount">30</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Wireless">Wireless</span></div><span class="ToolsClient-module__V0PrWq__facetCount">22</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Auth & perms">Auth & perms</span></div><span class="ToolsClient-module__V0PrWq__facetCount">298</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Bug bounty">Bug bounty</span></div><span class="ToolsClient-module__V0PrWq__facetCount">63</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Cloud & services">Cloud & services</span></div><span class="ToolsClient-module__V0PrWq__facetCount">122</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="CMS">CMS</span></div><span class="ToolsClient-module__V0PrWq__facetCount">17</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Cryptanalysis">Cryptanalysis</span></div><span class="ToolsClient-module__V0PrWq__facetCount">44</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Databases">Databases</span></div><span class="ToolsClient-module__V0PrWq__facetCount">18</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Development">Development</span></div><span class="ToolsClient-module__V0PrWq__facetCount">86</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Informations gathering">Informations gathering</span></div><span class="ToolsClient-module__V0PrWq__facetCount">493</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Network">Network</span></div><span class="ToolsClient-module__V0PrWq__facetCount">109</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Operating systems">Operating systems</span></div><span class="ToolsClient-module__V0PrWq__facetCount">69</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Resources">Resources</span></div><span class="ToolsClient-module__V0PrWq__facetCount">58</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Source code management">Source code management</span></div><span class="ToolsClient-module__V0PrWq__facetCount">14</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Tools categories">Tools categories</span></div><span class="ToolsClient-module__V0PrWq__facetCount">0</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Virtualization">Virtualization</span></div><span class="ToolsClient-module__V0PrWq__facetCount">22</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Vulnerabilities">Vulnerabilities</span></div><span class="ToolsClient-module__V0PrWq__facetCount">152</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Well known products">Well known products</span></div><span class="ToolsClient-module__V0PrWq__facetCount">37</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Misc">Misc</span></div><span class="ToolsClient-module__V0PrWq__facetCount">0</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Mobile">Mobile</span></div><span class="ToolsClient-module__V0PrWq__facetCount">3</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Fuzzing">Fuzzing</span></div><span class="ToolsClient-module__V0PrWq__facetCount">2</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Reconnaissance">Reconnaissance</span></div><span class="ToolsClient-module__V0PrWq__facetCount">4</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Learning">Learning</span></div><span class="ToolsClient-module__V0PrWq__facetCount">1</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="Artificial Intelligence">Artificial Intelligence</span></div><span class="ToolsClient-module__V0PrWq__facetCount">3</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="AI Models">AI Models</span></div><span class="ToolsClient-module__V0PrWq__facetCount">0</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="AI Skills">AI Skills</span></div><span class="ToolsClient-module__V0PrWq__facetCount">6</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText" title="AI MCP Servers">AI MCP Servers</span></div><span class="ToolsClient-module__V0PrWq__facetCount">2</span></label></div></div><div class="ToolsClient-module__V0PrWq__facetGroup"><h4 class="ToolsClient-module__V0PrWq__facetGroupTitle"><span>Open Source</span></h4><div class="ToolsClient-module__V0PrWq__facetOptionsList"><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText">Yes (Has repo)</span></div><span class="ToolsClient-module__V0PrWq__facetCount">2559</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText">No</span></div><span class="ToolsClient-module__V0PrWq__facetCount">198</span></label></div></div><div class="ToolsClient-module__V0PrWq__facetGroup"><h4 class="ToolsClient-module__V0PrWq__facetGroupTitle"><span>Has Video Review</span></h4><div class="ToolsClient-module__V0PrWq__facetOptionsList"><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText">Yes</span></div><span class="ToolsClient-module__V0PrWq__facetCount">17</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText">No</span></div><span class="ToolsClient-module__V0PrWq__facetCount">2740</span></label></div></div><div class="ToolsClient-module__V0PrWq__facetGroup"><h4 class="ToolsClient-module__V0PrWq__facetGroupTitle"><span>Used in Reports</span></h4><div class="ToolsClient-module__V0PrWq__facetOptionsList"><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText">Yes</span></div><span class="ToolsClient-module__V0PrWq__facetCount">319</span></label><label class="ToolsClient-module__V0PrWq__facetOptionRow"><div class="ToolsClient-module__V0PrWq__facetOptionLabelWrapper"><input type="checkbox" class="ToolsClient-module__V0PrWq__facetCheckbox"/><span class="ToolsClient-module__V0PrWq__facetOptionText">No</span></div><span class="ToolsClient-module__V0PrWq__facetCount">2438</span></label></div></div></div></div><div class="column is-9"><div class="ToolsClient-module__V0PrWq__searchHeaderRow"><input type="text" placeholder="Search tools by name, description, or keywords..." class="ToolsClient-module__V0PrWq__toolsSearchInput" value=""/><span class="report-results-count">(<!-- -->2757<!-- --> tool<!-- -->s<!-- -->)</span></div><div class="table-container mt-4"><table class="table is-striped is-hoverable is-fullwidth"><thead><tr><th>
8Name</th><th>Description</th><th>Category</th><th>Attributes</th></tr></thead><tbody><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/0d1n" style="font-weight:600;text-decoration:none">0d1n</a></div></td><td style="vertical-align:middle">Tool for automating customized attacks against web applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/0d1n" style="font-weight:600;text-decoration:none">0d1n</a></div></td><td style="vertical-align:middle">Automate customized attacks against web applications</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/1ums" style="font-weight:600;text-decoration:none">1u.ms</a></div></td><td style="vertical-align:middle">zero-configuration DNS utilities for assisting in detection and exploitation of SSRF-related vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/221b" style="font-weight:600;text-decoration:none">221b</a></div></td><td style="vertical-align:middle">Bake a windows payload from the C2 of your choice to bypass AV</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/230-oob" style="font-weight:600;text-decoration:none">230-OOB</a></div></td><td style="vertical-align:middle">FTP server for OOB XXE attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/2tearsinabucket" style="font-weight:600;text-decoration:none">2tearsinabucket</a></div></td><td style="vertical-align:middle">Enumerate s3 buckets for a specific target.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/4-zero-3" style="font-weight:600;text-decoration:none">4-ZERO-3</a></div></td><td style="vertical-align:middle">403/401 Bypass Methods.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/403-bypasser" style="font-weight:600;text-decoration:none">
8403-bypasser</a></div></td><td style="vertical-align:middle">A Burp Suite extension made to automate the process of bypassing 403 pages.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/403jump" style="font-weight:600;text-decoration:none">403JUMP</a></div></td><td style="vertical-align:middle">HTTP 403 bypass tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aclight" style="font-weight:600;text-decoration:none">ACLight</a></div></td><td style="vertical-align:middle">Advanced discovery of Privileged Accounts, includes Shadow Admins.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adape-script" style="font-weight:600;text-decoration:none">ADAPE Script</a></div></td><td style="vertical-align:middle">Active Directory assessment and privilege escalation script.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adb-toolkit" style="font-weight:600;text-decoration:none">ADB-Toolkit</a></div></td><td style="vertical-align:middle">Wrapper around adb to ease certain tasks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/mobile">Mobile</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adcskiller" style="font-weight:600;text-decoration:none">ADCSKiller</a></div></td><td style="vertical-align:middle">ADCS exploitation automation by weaponizing Certipy and Coercer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adfsdump" style="font-weight:600;text-decoration:none">ADFSDump</a></div></td><td style="vertical-align:middle">Read information from Active Directory and ADFS Configuration Database; fed information into ADFSpoof to generate security tokens</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adfspoof" style="font-weight:600;text-decoration:none">ADFSpoof</a></div></td><td style="vertical-align:middle">Using ADFSDump information, produce a usable key/cert pair for token signing, produce a signed security token that can be used to access a federated application</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adminer" style="font-weight:600;text-decoration:none">ADMiner</a></div></td><td style="vertical-align:middle">Active Directory audit tool that extract data from Bloodhound to uncover security weaknesses and generate an HTML report</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adrt" style="font-weight:600;text-decoration:none">ADRT</a></div></td><td style="vertical-align:middle">Active Directory Report Tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adreaper" style="font-weight:600;text-decoration:none">ADReaper</a></div></td><td style="vertical-align:middle">Enumerate an Active Directory environment with LDAP queries.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adrecon" style="font-weight:600;text-decoration:none">ADRecon</a></div></td><td style="vertical-align:middle">Gather information about the Active Directory and generates a report.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adrecon" style="font-weight:600;text-decoration:none">ADRecon</a></div></td><td style="vertical-align:middle">Gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adeleg" style="font-weight:600;text-decoration:none">ADeleg</a></div></td><td style="vertical-align:middle">Active Directory delegation management tool allowing to make a detailed inventory of delegations set up so far in a forest</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reconnaissance">Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adenum" style="font-weight:600;text-decoration:none">ADenum</a></div></td><td style="vertical-align:middle">Find misconfiguration through the LDAP protocol and exploit some weaknesses with kerberos</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adenum" style="font-weight:600;text-decoration:none">ADenum</a></div></td><td style="vertical-align:middle">Find misconfiguration through LDAP to exploit weaknesses with Kerberos.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/any-run" style="font-weight:600;text-decoration:none">ANY RUN</a></div></td><td style="vertical-align:middle">Online virtual machine for malware hunting, sandbox with interactive access, real-time data-flow</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aort" style="font-weight:600;text-decoration:none">AORT</a></div></td><td style="vertical-align:middle">All in one recon tool for bug bounty.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/api-fuzzer" style="font-weight:600;text-decoration:none">API fuzzer</a></div></td><td style="vertical-align:middle">Fuzz request attributes using common pentesting techniques and lists vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/api-fuzzer" style="font-weight:600;text-decoration:none">API-fuzzer</a></div></td><td style="vertical-align:middle">Library to fuzz request attributes using common pentesting techniques and lists vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apkenum" style="font-weight:600;text-decoration:none">APKEnum</a></div></td><td style="vertical-align:middle">Passive enumeration utility For Android applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apkhunt" style="font-weight:600;text-decoration:none">APKHunt</a></div></td><td style="vertical-align:middle">Static code analysis for Android apps that is based on the OWASP MASVS framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apkleaks" style="font-weight:600;text-decoration:none">APKLeaks</a></div></td><td style="vertical-align:middle">Scanning APK file for URIs, endpoints & secrets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apkleaks" style="font-weight:600;text-decoration:none">APKLeaks</a></div></td><td style="vertical-align:middle">Scanning APK file for URIs, endpoints and secrets</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apkid" style="font-weight:600;text-decoration:none">APKiD</a></div></td><td style="vertical-align:middle">Android application identifier for packers, protectors, obfuscators and oddities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aptrs" style="font-weight:600;text-decoration:none">APTRS</a></div></td><td style="vertical-align:middle">APTRS (Automated Penetration Testing Reporting System) is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It also provides an approach to keeping track of the projects and vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aptrs" style="font-weight:600;text-decoration:none">APTRS</a></div></td><td style="vertical-align:middle">Automated penetration testing reporting system.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aslray" style="font-weight:600;text-decoration:none">ASLRay</a></div></td><td style="vertical-align:middle">Tool for ASLR bypass with stack-spraying</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/binary-exploitation">Binary Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/asnlookup" style="font-weight:600;text-decoration:none">ASNLookup</a></div></td><td style="vertical-align:middle">Leverage ASN to look up IP addresses owned by a specific organization.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/asnmap" style="font-weight:600;text-decoration:none">ASNmap</a></div></td><td style="vertical-align:middle">CLI and Library for quickly mapping organization network ranges using ASN information</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/asnmap" style="font-weight:600;text-decoration:none">ASNmap</a></div></td><td style="vertical-align:middle">Quickly maps organization network ranges using ASN information.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ator" style="font-weight:600;text-decoration:none">ATOR</a></div></td><td style="vertical-align:middle">Authentication Token Obtain and Replace Extender.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/avet" style="font-weight:600;text-decoration:none">AVET</a></div></td><td style="vertical-align:middle">AntiVirus Evasion Tool; targeting windows machines with executable files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aws-extender" style="font-weight:600;text-decoration:none">AWS Extender</a></div></td><td style="vertical-align:middle">Identify and test S3 buckets, Google Storage buckets and Azure Storage containers for common misconfiguration</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aws-extender-cli" style="font-weight:600;text-decoration:none">AWS Extender CLI</a></div></td><td style="vertical-align:middle">Command-line script to test cloud storage for common misconfiguration issues.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aws-extender-cli" style="font-weight:600;text-decoration:none">AWS Extender CLI</a></div></td><td style="vertical-align:middle">Test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aws-sensitive-permissions" style="font-weight:600;text-decoration:none">AWS Sensitive Permissions</a></div></td><td style="vertical-align:middle">This script enumerates the permissions of all the AWS principals of an account.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aws-security-checks" style="font-weight:600;text-decoration:none">AWS security checks</a></div></td><td style="vertical-align:middle">This Burp Suite provides additional Scanner checks for AWS security issues.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/awsbucketdump" style="font-weight:600;text-decoration:none">AWSBucketDump</a></div></td><td style="vertical-align:middle">Security Tool to Look For Interesting Files in S3 Buckets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/awsgoat" style="font-weight:600;text-decoration:none">AWSGoat</a></div></td><td style="vertical-align:middle">
8A damn vulnerable AWS infrastructure.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/awsloot" style="font-weight:600;text-decoration:none">AWSloot</a></div></td><td style="vertical-align:middle">Pull secrets from an AWS environment.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/acra" style="font-weight:600;text-decoration:none">Acra</a></div></td><td style="vertical-align:middle">Database protection suite with field level encryption and intrusion detection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/activedirectoryenumeration" style="font-weight:600;text-decoration:none">ActiveDirectoryEnumeration</a></div></td><td style="vertical-align:middle">Enumerate AD through LDAP with a collection of helpfull scripts being bundled: ASREPRoasting, Kerberoasting, dump AD as BloodHound JSON files, searching GPOs in SYSVOL for cpassword and decrypting, run without creds</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/active-scan-plus-plus" style="font-weight:600;text-decoration:none">ActiveScan++</a></div></td><td style="vertical-align:middle">Extends Burp Suite's active and passive scanning capabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/acunetix" style="font-weight:600;text-decoration:none">Acunetix</a></div></td><td style="vertical-align:middle">Quickly find and fix the vulnerabilities that put your web applications at risk of attack.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/acunetix" style="font-weight:600;text-decoration:none">Acunetix</a></div></td><td style="vertical-align:middle">Web application security scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adalanche" style="font-weight:600;text-decoration:none">Adalanche</a></div></td><td style="vertical-align:middle">Active Directory ACL visualizer and explorer; similar to BloodHound</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adhrit" style="font-weight:600;text-decoration:none">Adhrit</a></div></td><td style="vertical-align:middle">Android APK reversing and analysis suite</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/advancedkeyhacks" style="font-weight:600;text-decoration:none">AdvancedKeyHacks</a></div></td><td style="vertical-align:middle">API key/token exploitation made easy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adversary-emulation-library" style="font-weight:600;text-decoration:none">Adversary Emulation Library</a></div></td><td style="vertical-align:middle">A library of adversary emulation plans to allow organizations to evaluate their defensive capabilities against the real-world threats they face</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/afuzz" style="font-weight:600;text-decoration:none">Afuzz</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/agartha" style="font-weight:600;text-decoration:none">Agartha</a></div></td><td style="vertical-align:middle">Burp Suite extension for dynamic payload generation to detect injection flaws.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ahmyth-android-rat" style="font-weight:600;text-decoration:none">AhMyth Android RAT</a></div></td><td style="vertical-align:middle">Android remote administration tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aircrack-ng" style="font-weight:600;text-decoration:none">Aircrack-Ng</a></div></td><td style="vertical-align:middle">Suite of tools to assess WiFi network security (cracking WEP and WPA PSK)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/allaboutbugbounty" style="font-weight:600;text-decoration:none">AllAboutBugBounty</a></div></td><td style="vertical-align:middle">Bug Bounty notes gathered from various sources.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/altdns" style="font-weight:600;text-decoration:none">Altdns</a></div></td><td style="vertical-align:middle">Generates permutations, alterations and mutations of subdomains and then resolves them.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/amass" style="font-weight:600;text-decoration:none">Amass</a></div></td><td style="vertical-align:middle">DNS enumeration and network mapping tool suite: scraping, recursive brute forcing, crawling web archives, reverse DNS sweeping</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/amass" style="font-weight:600;text-decoration:none">Amass</a></div></td><td style="vertical-align:middle">In-depth Attack Surface Mapping and Asset Discovery.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/amnesiac" style="font-weight:600;text-decoration:none">Amnesiac</a></div></td><td style="vertical-align:middle">Post-exploitation framework designed to assist with lateral movement within Active Directory.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/andriller" style="font-weight:600;text-decoration:none">Andriller</a></div></td><td style="vertical-align:middle">Software utility with a collection of forensic tools for smartphones; performs read-only, non-destructive acquisition</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/androbugs-framework" style="font-weight:600;text-decoration:none">AndroBugs Framework</a></div></td><td style="vertical-align:middle">Android APK vulnerability analyzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/androset" style="font-weight:600;text-decoration:none">AndroSet</a></div></td><td style="vertical-align:middle">Manage Burp Suite certificate in Android to redirect all traffic to Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/android_emuroot" style="font-weight:600;text-decoration:none">Android_Emuroot</a></div></td><td style="vertical-align:middle">Grants root privileges on the fly to shells running on Android virtual machines that use google-provided emulator images called Google API Playstore</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/angry-ip-scanner" style="font-weight:600;text-decoration:none">Angry IP Scanner</a></div></td><td style="vertical-align:middle">Fast and simple-to-use open-source/cross-platform network scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/anomark" style="font-weight:600;text-decoration:none">AnoMark</a></div></td><td style="vertical-align:middle">Statistical learning algorithm to create a model on the command lines of the Process Creation events on Windows, in order to detect anomalies in future events</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/anthropic-cybersecurity-skills" style="font-weight:600;text-decoration:none">Anthropic-Cybersecurity-Skills</a></div></td><td style="vertical-align:middle">817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai-skills">AI Skills</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/antiscanme" style="font-weight:600;text-decoration:none">AntiScan.Me</a></div></td><td style="vertical-align:middle">Multi-AV checker that doesn't distribute the check results, based on Dyncheck.com</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aperisolve" style="font-weight:600;text-decoration:none">Aperi'Solve</a></div></td><td style="vertical-align:middle">Steganalysis web platform with layer, zsteg, steghide and exiftool analysis</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apidor" style="font-weight:600;text-decoration:none">Apidor</a></div></td><td style="vertical-align:middle">Tool for automating the search for IDOR vulnerabilities in web applications and APIs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apk2gold" style="font-weight:600;text-decoration:none">Apk2Gold</a></div></td><td style="vertical-align:middle">Android decompiler (wrapper for apktool, dex2jar, and jd-gui)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apktool" style="font-weight:600;text-decoration:none">Apktool</a></div></td><td style="vertical-align:middle">Android disassembler and rebuilder</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apktool" style="font-weight:600;text-decoration:none">Apktool</a></div></td><td style="vertical-align:middle">A tool for reverse engineering Android APK files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/appsecstudy" style="font-weight:600;text-decoration:none">AppsecStudy</a></div></td><td style="vertical-align:middle">eLearning management system for information security</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/learning">Learning</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aquatone" style="font-weight:600;text-decoration:none">Aquatone</a></div></td><td style="vertical-align:middle">A Tool for Domain Flyovers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aquatone" style="font-weight:600;text-decoration:none">Aquatone</a></div></td><td style="vertical-align:middle">Domain flyover tool; visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/arachni" style="font-weight:600;text-decoration:none">Arachni</a></div></td><td style="vertical-align:middle">Web application security scanner framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/arachni" style="font-weight:600;text-decoration:none">Arachni</a></div></td><td style="vertical-align:middle">Web Application Security Scanner Framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aranea" style="font-weight:600;text-decoration:none">Aranea</a></div></td><td style="vertical-align:middle">OSINT tool used for web crawling or examining JavaScript files for likely useful data.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/archery" style="font-weight:600;text-decoration:none">Archery</a></div></td><td style="vertical-align:middle">Vulnerability Assessment and Management tool, run scan and manage vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/arecibo" style="font-weight:600;text-decoration:none">Arecibo</a></div></td><td style="vertical-align:middle">Endpoint for Out-of-Band Exfiltration (DNS & HTTP)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/argus-saf" style="font-weight:600;text-decoration:none">Argus-SAF</a></div></td><td style="vertical-align:middle">Static analysis framework built in house to do security vetting for Android applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/arjun" style="font-weight:600;text-decoration:none">Arjun</a></div></td><td style="vertical-align:middle">HTTP parameter discovery suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/arjun" style="font-weight:600;text-decoration:none">Arjun</a></div></td><td style="vertical-align:middle">HTTP parameter discovery suite</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/arsenal" style="font-weight:600;text-decoration:none">Arsenal</a></div></td><td style="vertical-align:middle">Just a quick inventory, reminder and launcher for pentest commands.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/as3nt" style="font-weight:600;text-decoration:none">As3nt</a></div></td><td style="vertical-align:middle">Another Subdomain ENumeration Tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/asnlookup" style="font-weight:600;text-decoration:none">Asnlookup</a></div></td><td style="vertical-align:middle">Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/assassingo" style="font-weight:600;text-decoration:none">AssassinGo</a></div></td><td style="vertical-align:middle">Web pentest framework for information gathering and vulnerability scanning</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/astra" style="font-weight:600;text-decoration:none">Astra</a></div></td><td style="vertical-align:middle">Automated Security Testing For REST API's.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/astra" style="font-weight:600;text-decoration:none">Astra</a></div></td><td style="vertical-align:middle">REST API penetration testing tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/async-dns-brute" style="font-weight:600;text-decoration:none">
8Async DNS Brute</a></div></td><td style="vertical-align:middle">DNS asynchronous brute force utility.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/athena-os" style="font-weight:600;text-decoration:none">Athena OS</a></div></td><td style="vertical-align:middle">Arch Linux-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/atheris" style="font-weight:600;text-decoration:none">Atheris</a></div></td><td style="vertical-align:middle">Coverage-guided Python fuzzing engine</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/fuzzing">Fuzzing</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/atlas" style="font-weight:600;text-decoration:none">Atlas</a></div></td><td style="vertical-align:middle">Tool that suggests sqlmap tampers to bypass WAF/IDS/IPS based on status codes</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/atomic-red-team" style="font-weight:600;text-decoration:none">Atomic Red Team</a></div></td><td style="vertical-align:middle">Small and highly portable detection tests based on MITRE's ATT&CK.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/atomic-red-team" style="font-weight:600;text-decoration:none">Atomic Red Team</a></div></td><td style="vertical-align:middle">A library of tests mapped to the MITRE ATT&CK® framework used to quickly, portably, and reproducibly test their environments</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/attackforge" style="font-weight:600;text-decoration:none">AttackForge</a></div></td><td style="vertical-align:middle">A platform built for productivity, collaboration and visibility.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/attackforgecom" style="font-weight:600;text-decoration:none">AttackForge.com</a></div></td><td style="vertical-align:middle">AttackForge helps you manage your penetration testing programs, and deliver large-scale pentesting services. Pentest Management and Reporting Made Easy, A Platform Built for Productivity, Collaboration and Visibility.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/attacksurfacemapper" style="font-weight:600;text-decoration:none">AttackSurfaceMapper</a></div></td><td style="vertical-align:middle">AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/attacksurfacemapper" style="font-weight:600;text-decoration:none">AttackSurfaceMapper</a></div></td><td style="vertical-align:middle">Subdomain enumerator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/attifyos" style="font-weight:600;text-decoration:none">AttifyOS</a></div></td><td style="vertical-align:middle">Distribution for pentesting IoT devices.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/audacity" style="font-weight:600;text-decoration:none">Audacity</a></div></td><td style="vertical-align:middle">Tool to edit and analyze audio tracks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/auth-analyzer" style="font-weight:600;text-decoration:none">Auth Analyzer</a></div></td><td style="vertical-align:middle">The Burp extension helps you to find authorization bugs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/authmatrix" style="font-weight:600;text-decoration:none">AuthMatrix</a></div></td><td style="vertical-align:middle">Provides a simple way to test authorization in web applications and web services.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autorecon" style="font-weight:600;text-decoration:none">AutoRecon</a></div></td><td style="vertical-align:middle">Multi-threaded network reconnaissance tool which performs automated enumeration of services</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autorecon" style="font-weight:600;text-decoration:none">AutoRecon</a></div></td><td style="vertical-align:middle">Multi-threaded network reconnaissance tool which performs automated enumeration of services.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autorepeater" style="font-weight:600;text-decoration:none">AutoRepeater</a></div></td><td style="vertical-align:middle">Automated HTTP request repeating with Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autosploit" style="font-weight:600;text-decoration:none">AutoSploit</a></div></td><td style="vertical-align:middle">Automated Mass Exploiter.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autorize" style="font-weight:600;text-decoration:none">Autorize</a></div></td><td style="vertical-align:middle">Automatic authorization enforcement detection extension for Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autowasp" style="font-weight:600;text-decoration:none">Autowasp</a></div></td><td style="vertical-align:middle">A one-stop pentesting checklist and logger tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/avast-hack-check" style="font-weight:600;text-decoration:none">Avast Hack Check</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, send an email with the breaches not the password</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/awesome-bug-bounty" style="font-weight:600;text-decoration:none">Awesome Bug Bounty</a></div></td><td style="vertical-align:middle">A comprehensive curated list of available Bug Bounty & disclosure programs and writeups.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/awesome-bugbounty-writeups" style="font-weight:600;text-decoration:none">Awesome BugBounty Writeups</a></div></td><td style="vertical-align:middle">A curated list of bugbounty writeups (Bug type wise).</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/awesome-cobaltstrike" style="font-weight:600;text-decoration:none">Awesome-CobaltStrike</a></div></td><td style="vertical-align:middle">
8List of awesome CobaltStrike resources.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/awesome-mcp-security" style="font-weight:600;text-decoration:none">Awesome-mcp-security</a></div></td><td style="vertical-align:middle">ð¥ð Awesome MCP (Model Context Protocol) Security ð¥ï¸</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai-mcp-servers">AI MCP Servers</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/axiom" style="font-weight:600;text-decoration:none">Axiom</a></div></td><td style="vertical-align:middle">Dynamic infrastructure framework to distribute the workload of many different scanning tools with ease</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/azureadlateralmovement" style="font-weight:600;text-decoration:none">AzureADLateralMovement</a></div></td><td style="vertical-align:middle">Lateral movement graph for Azure Active Directory.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/azureadrecon" style="font-weight:600;text-decoration:none">AzureADRecon</a></div></td><td style="vertical-align:middle">Gathers information about the Azure Active Directory and generates a report which can provide a holistic picture of the current state of the target environment</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/azuregoat" style="font-weight:600;text-decoration:none">AzureGoat</a></div></td><td style="vertical-align:middle">
8A damn vulnerable Azure infrastructure.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/b-xssrf" style="font-weight:600;text-decoration:none">B-XSSRF</a></div></td><td style="vertical-align:middle">Toolkit to detect and keep track on Blind XSS, XXE & SSRF.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bbstats" style="font-weight:600;text-decoration:none">BBstats</a></div></td><td style="vertical-align:middle">Displays stats and graphs about your Bug Bounty activity.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bbstats" style="font-weight:600;text-decoration:none">BBstats</a></div></td><td style="vertical-align:middle">Aggregate reports/bounties from different platforms in order to create combined stats and graphs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bewgor" style="font-weight:600;text-decoration:none">BEWGor</a></div></td><td style="vertical-align:middle">Bull's Eye Wordlist Generator, password wordlist generator based on target information</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bfac" style="font-weight:600;text-decoration:none">BFAC</a></div></td><td style="vertical-align:middle">Backup File Artifacts Checker; automated backup artifacts checker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bfac" style="font-weight:600;text-decoration:none">BFAC</a></div></td><td style="vertical-align:middle">Check for backup artifacts that may disclose the web-application's source code.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bhqw" style="font-weight:600;text-decoration:none">BHQW</a></div></td><td style="vertical-align:middle">Extract information from BloodHound and Neo4J</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bofnet" style="font-weight:600;text-decoration:none">BOF.NET</a></div></td><td style="vertical-align:middle">A .NET Runtime for Cobalt Strike's Beacon Object Files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bqm" style="font-weight:600;text-decoration:none">BQM</a></div></td><td style="vertical-align:middle">Bloodhound Query Merger; deduplicate custom BloudHound queries from different datasets and merge them in one customqueries.json file</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/barmie" style="font-weight:600;text-decoration:none">BaRMIe</a></div></td><td style="vertical-align:middle">Enumerating and attacking Java Remote Method Invocation services.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/barmie" style="font-weight:600;text-decoration:none">BaRMIe</a></div></td><td style="vertical-align:middle">Java RMI enumeration and attack tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/backupkiller" style="font-weight:600;text-decoration:none">BackupKiller</a></div></td><td style="vertical-align:middle">Generate wordlist based on the URLs to check for backup, installation, etc files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bandit" style="font-weight:600;text-decoration:none">Bandit</a></div></td><td style="vertical-align:middle">Bandit is a tool designed to find common security issues in Python code.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/barf" style="font-weight:600;text-decoration:none">Barf</a></div></td><td style="vertical-align:middle">Binary Analysis and Reverse engineering Framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/beef" style="font-weight:600;text-decoration:none">BeEF</a></div></td><td style="vertical-align:middle">The Browser Exploitation Framework is a penetration testing tool that focuses on the web browser.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/beroot" style="font-weight:600;text-decoration:none">BeRoot</a></div></td><td style="vertical-align:middle">Multiplaform privilege escalation project.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bearer" style="font-weight:600;text-decoration:none">Bearer</a></div></td><td style="vertical-align:middle">Static application security testing tool that helps discover, filter, and prioritize security risks and vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/beeceptor" style="font-weight:600;text-decoration:none">Beeceptor</a></div></td><td style="vertical-align:middle">HTTP request collector and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/belati" style="font-weight:600;text-decoration:none">Belati</a></div></td><td style="vertical-align:middle">OSINT tool, collect data and document actively or passively</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/betterbackdoor" style="font-weight:600;text-decoration:none">BetterBackdoor</a></div></td><td style="vertical-align:middle">A backdoor with a multitude of features.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/betterscan" style="font-weight:600;text-decoration:none">Betterscan</a></div></td><td style="vertical-align:middle">Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bindiff" style="font-weight:600;text-decoration:none">BinDiff</a></div></td><td style="vertical-align:middle">Quickly find differences and similarities in disassembled code.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/binary-ninja" style="font-weight:600;text-decoration:none">Binary Ninja</a></div></td><td style="vertical-align:middle">Crossplatform binary analysis framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bitblinder" style="font-weight:600;text-decoration:none">BitBlinder</a></div></td><td style="vertical-align:middle">Injects custom XSS payloads on every form/request submitted to detect blind XSS.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bitcrook" style="font-weight:600;text-decoration:none">Bitcrook</a></div></td><td style="vertical-align:middle">Reconnaissance Apparatus; Information gathering, conglomerate of tools including custom algorithms, API wrappers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/blackwidow" style="font-weight:600;text-decoration:none">BlackWidow</a></div></td><td style="vertical-align:middle">Web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/blacklist3r" style="font-weight:600;text-decoration:none">Blacklist3r</a></div></td><td style="vertical-align:middle">
8Identify usage of pre-shared Machine Keys in a application for encryption and decryption.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/blazy" style="font-weight:600;text-decoration:none">Blazy</a></div></td><td style="vertical-align:middle">Login page bruteforcer: CSRF, SQLi, Clickjacking, WAF detection</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bloodhound" style="font-weight:600;text-decoration:none">BloodHound</a></div></td><td style="vertical-align:middle">Tool to reveal the hidden and unintended relationships within an Active Directory environment</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bloodhound" style="font-weight:600;text-decoration:none">BloodHound</a></div></td><td style="vertical-align:middle">Six Degrees of Domain Admin.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bluehound" style="font-weight:600;text-decoration:none">BlueHound</a></div></td><td style="vertical-align:middle">Pinpoint the security issues that actually matter.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bluehound" style="font-weight:600;text-decoration:none">BlueHound</a></div></td><td style="vertical-align:middle">Helps blue teams pinpoint the security issues that actually matter by combining information about user permissions, network access and unpatched vulnerabilities, to reveal the paths attackers would take if they were inside the network</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bodhi" style="font-weight:600;text-decoration:none">Bodhi</a></div></td><td style="vertical-align:middle">Client-side vulnerability playground, CTF style application, a bot program which simulates the real-world victim</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/boomerang" style="font-weight:600;text-decoration:none">Boomerang</a></div></td><td style="vertical-align:middle">Client/Server HTTP pivoting tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bopscrk" style="font-weight:600;text-decoration:none">Bopscrk</a></div></td><td style="vertical-align:middle">Before Outset PaSsword CRacKing, password wordlist generator with exclusive features like lyrics based mode</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bounceback" style="font-weight:600;text-decoration:none">BounceBack</a></div></td><td style="vertical-align:middle">Stealth redirector for your red team operation security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bounty-dashboard" style="font-weight:600;text-decoration:none">Bounty Dashboard</a></div></td><td style="vertical-align:middle">Aggregate reports/bounties from different platforms in order to create combined stats and graphs, report and template management system, invoice creation system </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bountydash" style="font-weight:600;text-decoration:none">BountyDash</a></div></td><td style="vertical-align:middle">Dashboard to combine rewards from all platforms, giving insights about progress and bug hunting patterns</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bountydash" style="font-weight:600;text-decoration:none">BountyDash</a></div></td><td style="vertical-align:middle">Combine your rewards from platforms giving you insights about your bug hunting progress.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brakeman" style="font-weight:600;text-decoration:none">Brakeman</a></div></td><td style="vertical-align:middle">Static analysis security vulnerability scanner for Ruby on Rails applications</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/breachdirectory" style="font-weight:600;text-decoration:none">BreachDirectory</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, display the breaches, partial password and hash</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brute-hacking-framework" style="font-weight:600;text-decoration:none">Brute Hacking Framework</a></div></td><td style="vertical-align:middle">A framework including all the tools that work on Windows.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brute-ratel" style="font-weight:600;text-decoration:none">Brute Ratel</a></div></td><td style="vertical-align:middle">Command & Control server;
8 DNS over HTTPS, external channels, indirect syscalls</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bruteshark" style="font-weight:600;text-decoration:none">BruteShark</a></div></td><td style="vertical-align:middle">Network forensic analysis tool that performs deep processing and inspection of network traffic.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brutespray" style="font-weight:600;text-decoration:none">BruteSpray</a></div></td><td style="vertical-align:middle">Takes nmap GNMAP/XML output or newline seperated JSONS and automatically brute-forces services with default credentials using Medusa</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brutex" style="font-weight:600;text-decoration:none">BruteX</a></div></td><td style="vertical-align:middle">Tool using nmap and hydra to automatically bruteforce network service accounts</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brutex" style="font-weight:600;text-decoration:none">BruteX</a></div></td><td style="vertical-align:middle">Automatically brute force all services running on a target.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brutexss" style="font-weight:600;text-decoration:none">BruteXSS</a></div></td><td style="vertical-align:middle">Tool written in Python simply to find XSS vulnerabilities in web application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/btlejack" style="font-weight:600;text-decoration:none">BtleJack</a></div></td><td style="vertical-align:middle">Bluetooth Low Energy Swiss-army knife</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bucket-stream" style="font-weight:600;text-decoration:none">Bucket Stream</a></div></td><td style="vertical-align:middle">Find interesting Amazon S3 Buckets by watching certificate transparency logs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bucketloot" style="font-weight:600;text-decoration:none">BucketLoot</a></div></td><td style="vertical-align:middle">An automated S3-compatible bucket inspector.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bug-bounty-guide" style="font-weight:600;text-decoration:none">
8Bug Bounty Guide</a></div></td><td style="vertical-align:middle">Launchpad for bug bounty programs and bug bounty hunters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bug-bounty-reference" style="font-weight:600;text-decoration:none">Bug Bounty Reference</a></div></td><td style="vertical-align:middle">A list of Bug Bounty writeups that is categorized by the bug nature.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bug-bounty-reports-explained" style="font-weight:600;text-decoration:none">Bug Bounty Reports Explained</a></div></td><td style="vertical-align:middle">Bug Bounty Reports Explained channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bug-hunter" style="font-weight:600;text-decoration:none">Bug-hunter</a></div></td><td style="vertical-align:middle">Adversarial AI bug hunter with auto-fix skill for Claude Code, Cursor, Codex CLI, GitHub Copilot CLI, Kiro CLI, Opencode, Pi Coding Agent, and more. Multi-agent pipeline finds security vulnerabilities, logic errors, and runtime bugs â then fixes them autonomously on a safe branch.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai-skills">AI Skills</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bugbounty-web-app" style="font-weight:600;text-decoration:none">BugBounty Web App</a></div></td><td style="vertical-align:middle">App that helps bug bounty hunters to manage their bounties and target list</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bugbountyhunter" style="font-weight:600;text-decoration:none">BugBountyHunter</a></div></td><td style="vertical-align:middle">Helping you become a BugBountyHunter.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bugbountyhunting" style="font-weight:600;text-decoration:none">BugBountyHunting</a></div></td><td style="vertical-align:middle">Search Bug Bounty writeups easily.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bugbountyscanner" style="font-weight:600;text-decoration:none">BugBountyScanner</a></div></td><td style="vertical-align:middle">A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bugprove" style="font-weight:600;text-decoration:none">BugProve</a></div></td><td style="vertical-align:middle">Automated firmware analysis tool for composition analysis and vulnerability scanning.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bugtraceai" style="font-weight:600;text-decoration:none">BugTraceAI</a></div></td><td style="vertical-align:middle">Autonomous AI-powered security scanner â multi-agent vulnerability detection, exploitation, and validation engine</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai">Artificial Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bugbountydash" style="font-weight:600;text-decoration:none">Bugbountydash</a></div></td><td style="vertical-align:middle">Terminal dashboard for bug bounty hunters that use HackerOne and Bugcrowd</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bugcrowd-vrt" style="font-weight:600;text-decoration:none">Bugcrowd VRT</a></div></td><td style="vertical-align:middle">Bugcrowdâs baseline priority ratings for common security vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/built-with" style="font-weight:600;text-decoration:none">Built With</a></div></td><td style="vertical-align:middle">Find out what websites are Built With.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bulwark" style="font-weight:600;text-decoration:none">Bulwark</a></div></td><td style="vertical-align:middle">Collaborative penetration test, vulnerability database and reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-extender-api" style="font-weight:600;text-decoration:none">Burp Extender API</a></div></td><td style="vertical-align:middle">Burp Extender API.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-ntlm-challenge-decoder" style="font-weight:600;text-decoration:none">Burp NTLM Challenge Decoder</a></div></td><td style="vertical-align:middle">Burp extension to decode NTLM SSP headers and extract domain/host information.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-suite" style="font-weight:600;text-decoration:none">Burp Suite</a></div></td><td style="vertical-align:middle">The class-leading vulnerability scanning, penetration testing, and web app security platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-suite" style="font-weight:600;text-decoration:none">Burp Suite</a></div></td><td style="vertical-align:middle">Intercepting proxy to replay, inject, scan and fuzz HTTP requests (a limited free version exists)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-wp" style="font-weight:600;text-decoration:none">Burp WP</a></div></td><td style="vertical-align:middle">Find known vulnerabilities in WordPress plugins and themes, WPScan like plugin for Burp.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-anonymouscloud" style="font-weight:600;text-decoration:none">Burp-AnonymousCloud</a></div></td><td style="vertical-align:middle">Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-encode-ip" style="font-weight:600;text-decoration:none">Burp-Encode-IP</a></div></td><td style="vertical-align:middle">Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-wordlist-generator" style="font-weight:600;text-decoration:none">Burp-Wordlist-Generator</a></div></td><td style="vertical-align:middle">Generates wordlists from the Burp sitemap.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-to-sqlmap" style="font-weight:600;text-decoration:none">Burp-to-SQLMap</a></div></td><td style="vertical-align:middle">Performing SQLInjection test on Burp Suite Bulk Requests using SQLMap.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burpbeautifier" style="font-weight:600;text-decoration:none">BurpBeautifier</a></div></td><td style="vertical-align:middle">Burpsuite extension for beautifying request/response body.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burpbounty" style="font-weight:600;text-decoration:none">BurpBounty</a></div></td><td style="vertical-align:middle">Improve the active and passive Burp Suite scanner by means of custom rules through GUI.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burpbounty" style="font-weight:600;text-decoration:none">BurpBounty</a></div></td><td style="vertical-align:middle">Scan Check Builder in BApp Store, improve the active and passive scanner by means of personalized rules through a graphical interface</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burpgpt" style="font-weight:600;text-decoration:none">BurpGPT</a></div></td><td style="vertical-align:middle">A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burpjslinkfinder" style="font-weight:600;text-decoration:none">BurpJSLinkFinder</a></div></td><td style="vertical-align:middle">Burp Extension for a passive scanning JS files for endpoint links.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burpsentinel" style="font-weight:600;text-decoration:none">BurpSentinel</a></div></td><td style="vertical-align:middle">GUI Burp Plugin to ease discovering of security holes in web applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burpsmartbuster" style="font-weight:600;text-decoration:none">BurpSmartBuster</a></div></td><td style="vertical-align:middle">A Burp Suite content discovery plugin that add the smart into the Buster.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burpsuitehttpsmuggler" style="font-weight:600;text-decoration:none">BurpSuiteHTTPSmuggler</a></div></td><td style="vertical-align:middle">A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bust-a-kube" style="font-weight:600;text-decoration:none">Bust-A-Kube</a></div></td><td style="vertical-align:middle">Intentionally-vulnerable Kubernetes cluster, intended to help people self-train on attacking and defending Kubernetes clusters</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bypass-url-parser" style="font-weight:600;text-decoration:none">Bypass URL Parser</a></div></td><td style="vertical-align:middle">Tool that tests MANY url bypasses to reach a 40X protected page.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bypass-403" style="font-weight:600;text-decoration:none">Bypass-403</a></div></td><td style="vertical-align:middle">A simple script just made for self use for bypassing 403.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/capev2" style="font-weight:600;text-decoration:none">CAPEv2</a></div></td><td style="vertical-align:middle">Malware sandbox derived from Cuckoo with the goal of adding automated malware unpacking, config and payload extraction</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cdk" style="font-weight:600;text-decoration:none">CDK</a></div></td><td style="vertical-align:middle">Make security testing of K8s, Docker, and Containerd easier.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cdn-proxy" style="font-weight:600;text-decoration:none">CDN Proxy</a></div></td><td style="vertical-align:middle">Create a copy of a targeted website with CDN and WAF restrictions disabled.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cff-explorer" style="font-weight:600;text-decoration:none">CFF Explorer</a></div></td><td style="vertical-align:middle">PE Editor</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cis-cat-lite" style="font-weight:600;text-decoration:none">CIS CAT Lite</a></div></td><td style="vertical-align:middle">Asses systems against CIS Benchmarks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cis-cat-pro" style="font-weight:600;text-decoration:none">CIS CAT Pro</a></div></td><td style="vertical-align:middle">Asses systems against CIS Benchmarks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/clzero" style="font-weight:600;text-decoration:none">CLZero</a></div></td><td style="vertical-align:middle">A project for fuzzing HTTP/1.1 CL.0 Request Smuggling attack vectors.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cmsscan" style="font-weight:600;text-decoration:none">CMSScan</a></div></td><td style="vertical-align:middle">Scan Wordpress, Drupal, Joomla, vBulletin websites for security issues.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cmsscan" style="font-weight:600;text-decoration:none">CMSScan</a></div></td><td style="vertical-align:middle">Wordpress, Drupal, Joomla, vBulletin CMS security scanner with dashboard</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cmseek" style="font-weight:600;text-decoration:none">CMSeek</a></div></td><td style="vertical-align:middle">CMS Detection and Exploitation suite that supports over 180 other CMSs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cmseek" style="font-weight:600;text-decoration:none">CMSeek</a></div></td><td style="vertical-align:middle">CMS detection and exploitation suite; capable of detecting more than 180 CMS</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cmsmap" style="font-weight:600;text-decoration:none">CMSmap</a></div></td><td style="vertical-align:middle">CMS scanner that automates the process of detecting security flaws of the most popular CMSs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cmsmap" style="font-weight:600;text-decoration:none">CMSmap</a></div></td><td style="vertical-align:middle">WordPress, Joomla, Drupal, Moodle CMS security scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cors-scanner" style="font-weight:600;text-decoration:none">CORS Scanner</a></div></td><td style="vertical-align:middle">A multi-threaded scanner that helps identify CORS flaws/misconfigurations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/corstest" style="font-weight:600;text-decoration:none">CORStest</a></div></td><td style="vertical-align:middle">A simple CORS misconfiguration scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crlf-injection-scanner" style="font-weight:600;text-decoration:none">CRLF-Injection-Scanner</a></div></td><td style="vertical-align:middle">Command line tool for testing CRLF injection on a list of domains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crlfmap" style="font-weight:600;text-decoration:none">CRLFMap</a></div></td><td style="vertical-align:middle">CRLFMap is a tool to find HTTP Splitting vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crlfsuite" style="font-weight:600;text-decoration:none">CRLFsuite</a></div></td><td style="vertical-align:middle">The most powerful CRLF injection scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crlfuzz" style="font-weight:600;text-decoration:none">CRLFuzz</a></div></td><td style="vertical-align:middle">A fast tool to scan CRLF vulnerability written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cryptohack" style="font-weight:600;text-decoration:none">CRYPTOHACK</a></div></td><td style="vertical-align:middle">A fun, free platform for learning modern cryptography.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cryptorex" style="font-weight:600;text-decoration:none">CRYPTOREX</a></div></td><td style="vertical-align:middle"> Large-scale firmware analysis of cryptographic misuse in IoT devices; supports ARM, MIPS, MIPSel architetures</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/csp-evaluator" style="font-weight:600;text-decoration:none">CSP Evaluator</a></div></td><td style="vertical-align:middle">Check CSP serves as a strong mitigation against cross-site scripting attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/csp-evaluator" style="font-weight:600;text-decoration:none">CSP Evaluator</a></div></td><td style="vertical-align:middle">Check Content Security Policy (CSP) configuration and assists with the reviewing process</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cspass" style="font-weight:600;text-decoration:none">CSPass</a></div></td><td style="vertical-align:middle">Test for CSP bypass payloads</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/csrft" style="font-weight:600;text-decoration:none">CSRFT</a></div></td><td style="vertical-align:middle">A lightweight CSRF Toolkit for easy Proof of Concept.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cssg" style="font-weight:600;text-decoration:none">CSSG</a></div></td><td style="vertical-align:middle">Cobalt Strike Shellcode Generator; script used to more easily generate and format beacon shellcode in Cobalt Strike</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cstc" style="font-weight:600;text-decoration:none">CSTC</a></div></td><td style="vertical-align:middle">Cyber Security Transformation Chef; chaining simple operations and formatting on each incoming or outgoing HTTP message</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cswsh" style="font-weight:600;text-decoration:none">CSWSH</a></div></td><td style="vertical-align:middle">Cross-Site WebSocket Hijacking Tester</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ctfnote" style="font-weight:600;text-decoration:none">CTFNote</a></div></td><td style="vertical-align:middle">Collaborative platform for CTF teams, event planning, credentials sharing, tasks management, notes taking</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ctfr" style="font-weight:600;text-decoration:none">CTFR</a></div></td><td style="vertical-align:middle">Abusing Certificate Transparency logs for getting HTTPS websites subdomains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ctfd" style="font-weight:600;text-decoration:none">CTFd</a></div></td><td style="vertical-align:middle">A Capture The Flag framework focusing on ease of use and customizability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cupp" style="font-weight:600;text-decoration:none">CUPP</a></div></td><td style="vertical-align:middle">Common User Passwords Profiler, wordlist generator based on user profiling</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cupp" style="font-weight:600;text-decoration:none">CUPP</a></div></td><td style="vertical-align:middle">Common User Passwords Profiler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cve-maker" style="font-weight:600;text-decoration:none">CVE-MAKER</a></div></td><td style="vertical-align:middle">A hub for finding CVEs and exploits based on the official NIST, ExploitDB and Github databases.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cvemap" style="font-weight:600;text-decoration:none">CVEMap</a></div></td><td style="vertical-align:middle">CLI tool designed to provide a structured interface to various vulnerability databases</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cvemap" style="font-weight:600;text-decoration:none">CVEMap</a></div></td><td style="vertical-align:middle">Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/caido" style="font-weight:600;text-decoration:none">Caido</a></div></td><td style="vertical-align:middle">Intercepting proxy to replay, inject, scan and fuzz HTTP requests (a limited free version exists)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cain-and-abel" style="font-weight:600;text-decoration:none">Cain and Abel</a></div></td><td style="vertical-align:middle">Password recovery tool for Microsoft Operating Systems.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cake-fuzzer" style="font-weight:600;text-decoration:none">Cake Fuzzer</a></div></td><td style="vertical-align:middle">Cutting-edge project designed to automate the continuous discovery of vulnerabilities in webapps.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/caldera" style="font-weight:600;text-decoration:none">Caldera</a></div></td><td style="vertical-align:middle">Cyber security platform designed to easily automate adversary emulation, assist manual red-teams, and automate incident response</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/caldera" style="font-weight:600;text-decoration:none">Caldera</a></div></td><td style="vertical-align:middle">Automated adversary emulation platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cameradar" style="font-weight:600;text-decoration:none">Cameradar</a></div></td><td style="vertical-align:middle">RTSP stream access; detect open hosts, device model, automated dictionary attacks on stream route and credentials</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reconnaissance">Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/can-i-take-over-dns-" style="font-weight:600;text-decoration:none">Can I Take Over DNS?</a></div></td><td style="vertical-align:middle">A list of DNS providers and how to claim (sub)domains via missing hosted zones.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/can-i-take-over-xyz" style="font-weight:600;text-decoration:none">Can I take over XYZ?</a></div></td><td style="vertical-align:middle">A list of services and how to claim (sub)domains with dangling DNS records.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/canarytokens" style="font-weight:600;text-decoration:none">Canarytokens</a></div></td><td style="vertical-align:middle">Quickly deployable honeypot with docker image, the online service allows to get alerted by email for URL token, DNS token, unique email address, custom image, MS word doc., Acrobat Reader PDF doc., and more</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/honeypot-and-decoy">Honeypot and Decoy</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/canarytokens" style="font-weight:600;text-decoration:none">Canarytokens</a></div></td><td style="vertical-align:middle">Track activity and actions on your network.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/canopy" style="font-weight:600;text-decoration:none">Canopy</a></div></td><td style="vertical-align:middle">Penetration test platform: vulnerability database and reporting</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cansina" style="font-weight:600;text-decoration:none">Cansina</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/canvas" style="font-weight:600;text-decoration:none">Canvas</a></div></td><td style="vertical-align:middle">Assessment tool that allows penetration testing and hostile attack simulations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/capanalysis" style="font-weight:600;text-decoration:none">CapAnalysis</a></div></td><td style="vertical-align:middle">PCAP analyzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/carboncopy" style="font-weight:600;text-decoration:none">CarbonCopy</a></div></td><td style="vertical-align:middle">Create a spoofed certificate of any online website and signs an executable for AV Evasion; works for Windows and Linux</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/carboncopy" style="font-weight:600;text-decoration:none">CarbonCopy</a></div></td><td style="vertical-align:middle">Creates a spoofed certificate of any online website and signs an executable for AV evasion.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/carnivore" style="font-weight:600;text-decoration:none">Carnivore</a></div></td><td style="vertical-align:middle">Assessment of on-premises Microsoft servers such as ADFS, Skype, Exchange, and RDWeb</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cewl" style="font-weight:600;text-decoration:none">CeWL</a></div></td><td style="vertical-align:middle">Custom Word List Generator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cewl" style="font-weight:600;text-decoration:none">CeWL</a></div></td><td style="vertical-align:middle">CeWL is a Custom Word List Generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cewler" style="font-weight:600;text-decoration:none">CeWLeR</a></div></td><td style="vertical-align:middle">Custom word list generator redefined, based on the Scrapy framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/censys-enumeration" style="font-weight:600;text-decoration:none">Censys Enumeration</a></div></td><td style="vertical-align:middle">Extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/censys-subdomain-finder" style="font-weight:600;text-decoration:none">Censys subdomain finder</a></div></td><td style="vertical-align:middle">Perform subdomain enumeration using the certificate transparency logs from Censys.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cerbero-profiler" style="font-weight:600;text-decoration:none">Cerbero Profiler</a></div></td><td style="vertical-align:middle">File analyzer and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cerberus" style="font-weight:600;text-decoration:none">Cerberus</a></div></td><td style="vertical-align:middle">Unstrip Rust and Go binaries (ELF and PE) for static analysis; based on hashing and scoring systems, it can retrieve lots of symbol names</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cerbrutus" style="font-weight:600;text-decoration:none">Cerbrutus</a></div></td><td style="vertical-align:middle">Network services credentials brute-forcer: SSH, FTP</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certcrunchy" style="font-weight:600;text-decoration:none">CertCrunchy</a></div></td><td style="vertical-align:middle">Uses data from SSL Certificates to find potential host names.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certstealer" style="font-weight:600;text-decoration:none">CertStealer</a></div></td><td style="vertical-align:middle">A .NET tool for exporting and importing certificates without touching disk.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certificate-ripper" style="font-weight:600;text-decoration:none">Certificate Ripper</a></div></td><td style="vertical-align:middle">A CLI tool to extract server certificates.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certificate-search" style="font-weight:600;text-decoration:none">Certificate Search</a></div></td><td style="vertical-align:middle">Get informations about SSL certificates.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certify" style="font-weight:600;text-decoration:none">Certify</a></div></td><td style="vertical-align:middle">Active Directory certificate abuse.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certipy" style="font-weight:600;text-decoration:none">Certipy</a></div></td><td style="vertical-align:middle">Active Directory Certificate Services enumeration and abuse.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certipy" style="font-weight:600;text-decoration:none">Certipy</a></div></td><td style="vertical-align:middle">Active Directory Certificate Services enumeration and exploitation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certstream" style="font-weight:600;text-decoration:none">Certstream</a></div></td><td style="vertical-align:middle">Intelligence feed that gives real-time updates from the Certificate Transparency Log network</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cervantes" style="font-weight:600;text-decoration:none">Cervantes</a></div></td><td style="vertical-align:middle">Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chankro" style="font-weight:600;text-decoration:none">Chankro</a></div></td><td style="vertical-align:middle">Tool to bypass disable_functions and open_basedir in PHP by calling sendmail and setting LD_PRELOAD environment variable</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chaos" style="font-weight:600;text-decoration:none">Chaos</a></div></td><td style="vertical-align:middle">Collect and maintain internet-wide assets data for public Bug Bounty programs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/charles" style="font-weight:600;text-decoration:none">Charles</a></div></td><td style="vertical-align:middle">HTTP proxy / monitor / reverse proxy that allows to view all of the HTTP(S) traffic.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/charles" style="font-weight:600;text-decoration:none">Charles</a></div></td><td style="vertical-align:middle">Intercepting proxy to replay, inject, scan and fuzz HTTP requests</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chimera" style="font-weight:600;text-decoration:none">Chimera</a></div></td><td style="vertical-align:middle">Obfuscation script designed to bypass AMSI and commercial antivirus solution.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chipwhisperer" style="font-weight:600;text-decoration:none">ChipWhisperer</a></div></td><td style="vertical-align:middle">Toolchain for side-channel power analysis and glitching attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/hardware">Hardware</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chopchop" style="font-weight:600;text-decoration:none">ChopChop</a></div></td><td style="vertical-align:middle">Web application security scanner based on templates</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chopchop" style="font-weight:600;text-decoration:none">ChopChop</a></div></td><td style="vertical-align:middle">Scan endpoints and identify exposition of sensitive services/files/folders.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cipher-suite-info" style="font-weight:600;text-decoration:none">Cipher Suite Info</a></div></td><td style="vertical-align:middle">A searchable directory of TLS ciphersuites and related security details</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ciphey" style="font-weight:600;text-decoration:none">Ciphey</a></div></td><td style="vertical-align:middle">Automates decryptions & decodings with encodings, classical ciphers, hashes, or more.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/classyshark" style="font-weight:600;text-decoration:none">ClassyShark</a></div></td><td style="vertical-align:middle">Android and Java bytecode viewer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloakquest3r" style="font-weight:600;text-decoration:none">CloakQuest3r</a></div></td><td style="vertical-align:middle">Uncover the true IP address of websites safeguarded by Cloudflare & others.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudbrute" style="font-weight:600;text-decoration:none">CloudBrute</a></div></td><td style="vertical-align:middle">Awesome cloud enumerator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudfail" style="font-weight:600;text-decoration:none">CloudFail</a></div></td><td style="vertical-align:middle">Utilize misconfigured DNS and old database records to find hidden IPs behind CloudFlare network.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudflair" style="font-weight:600;text-decoration:none">CloudFlair</a></div></td><td style="vertical-align:middle">Find origin servers of websites behind Cloudflare by using Internet-wide scan data from Censys.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudfrunt" style="font-weight:600;text-decoration:none">CloudFrunt</a></div></td><td style="vertical-align:middle">Scanner to identify misconfigured CloudFront domains</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudfrunt" style="font-weight:600;text-decoration:none">CloudFrunt</a></div></td><td style="vertical-align:middle">A tool for identifying misconfigured CloudFront domains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudgpt" style="font-weight:600;text-decoration:none">CloudGPT</a></div></td><td style="vertical-align:middle">Vulnerability scanner for AWS customer managed policies using ChatGPT</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudgoat" style="font-weight:600;text-decoration:none">CloudGoat</a></div></td><td style="vertical-align:middle">Vulnerable by design AWS deployment tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudjack" style="font-weight:600;text-decoration:none">CloudJack</a></div></td><td style="vertical-align:middle">Route53/CloudFront Vulnerability assessment utility.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudmapper" style="font-weight:600;text-decoration:none">CloudMapper</a></div></td><td style="vertical-align:middle">CloudMapper helps you analyze your Amazon Web Services environments.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudmapper" style="font-weight:600;text-decoration:none">CloudMapper</a></div></td><td style="vertical-align:middle">Analyze AWS environments auditing for security issues</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudrecon" style="font-weight:600;text-decoration:none">CloudRecon</a></div></td><td style="vertical-align:middle">Finding assets and subdomains from certificates! Scan the web!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudscraper" style="font-weight:600;text-decoration:none">CloudScraper</a></div></td><td style="vertical-align:middle">Tool to enumerate targets in search of cloud resources.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudshark" style="font-weight:600;text-decoration:none">CloudShark</a></div></td><td style="vertical-align:middle">PCAP analyzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudtracker" style="font-weight:600;text-decoration:none">CloudTracker</a></div></td><td style="vertical-align:middle">Find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudfox" style="font-weight:600;text-decoration:none">Cloudfox</a></div></td><td style="vertical-align:middle">Automating situational awareness for cloud penetration tests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/codecat" style="font-weight:600;text-decoration:none">CodeCat</a></div></td><td style="vertical-align:middle">Automatic code static analysis tool to detect bugs and vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/codeql" style="font-weight:600;text-decoration:none">CodeQL</a></div></td><td style="vertical-align:middle">Semantic code analysis engine; discover vulnerabilities across a codebase, lets you query code as though it were data, write a query to find all variants of a vulnerability</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/codechella-crisis-response" style="font-weight:600;text-decoration:none">Codechella Crisis Response</a></div></td><td style="vertical-align:middle">An application curated to crisis zones to facilitate the dissemination of accurate mission-critical information from sources on the ground to key partners with minimal lag time</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/crisis-management">Crisis Management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/coerced-potato" style="font-weight:600;text-decoration:none">Coerced potato</a></div></td><td style="vertical-align:middle">
8A Windows potato to privesc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/coercer" style="font-weight:600;text-decoration:none">Coercer</a></div></td><td style="vertical-align:middle">Coerce a Windows server to authenticate on an arbitrary machine through 12 methods</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/coercer" style="font-weight:600;text-decoration:none">Coercer</a></div></td><td style="vertical-align:middle">Automatically coerce a Windows server to authenticate on an arbitrary machine.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cognicrypt" style="font-weight:600;text-decoration:none">CogniCrypt</a></div></td><td style="vertical-align:middle">Supports Java developers in using Java Cryptographic APIs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/collaborator-everywhere" style="font-weight:600;text-decoration:none">Collaborator Everywhere</a></div></td><td style="vertical-align:middle">Burp Suite extension which injects non-invasive headers to reveal backend systems.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/compp" style="font-weight:600;text-decoration:none">ComPP</a></div></td><td style="vertical-align:middle">Company Passwords Profiler helps making a bruteforce wordlist for a targeted company</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/commando-vm" style="font-weight:600;text-decoration:none">Commando VM</a></div></td><td style="vertical-align:middle">Fully customizable Windows-based pentesting virtual machine distribution.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/commix" style="font-weight:600;text-decoration:none">Commix</a></div></td><td style="vertical-align:middle">
8Automated All-in-One OS Command Injection Exploitation Tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/comperio" style="font-weight:600;text-decoration:none">Comperio</a></div></td><td style="vertical-align:middle">OSINT tool to find usernames across 80+ social media and social networking sites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/conpass" style="font-weight:600;text-decoration:none">ConPass</a></div></td><td style="vertical-align:middle">Password spraying in Active Directory checking the default domain password policy as well as PSO and the badpwdcount LDAP attribute to avoid account locking</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/confuserex" style="font-weight:600;text-decoration:none">ConfuserEx</a></div></td><td style="vertical-align:middle">An open-source, free protector for .NET applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/confuserex" style="font-weight:600;text-decoration:none">ConfuserEx</a></div></td><td style="vertical-align:middle">Protector for .NET applications</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/converthound" style="font-weight:600;text-decoration:none">ConvertHound</a></div></td><td style="vertical-align:middle">Convert BloodHound output files into nmap XML that can be imported into reporting software like Dradis and Plextrac</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cookiecrimesjs" style="font-weight:600;text-decoration:none">CookieCrimesJS</a></div></td><td style="vertical-align:middle">Read local Chrome cookies without root or decrypting and display then in JSON; Javascript implementation of cookie_crimes</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/copy-as-ffuf" style="font-weight:600;text-decoration:none">Copy As FFUF</a></div></td><td style="vertical-align:middle">Copies the selected request(s) as FFUF skeleton</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/copy-as-go-request" style="font-weight:600;text-decoration:none">Copy As Go Request</a></div></td><td style="vertical-align:middle">Copies the selected request(s) as Go Request invocations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/copy-as-python-requests" style="font-weight:600;text-decoration:none">Copy As Python-Requests</a></div></td><td style="vertical-align:middle">Copies selected request(s) as Python-Requests invocations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/copy-as-xmlhttprequest" style="font-weight:600;text-decoration:none">Copy As XMLHttpRequest</a></div></td><td style="vertical-align:middle">Copies selected request(s) as JavaScript XMLHttpRequest invocations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/copy-as-node-request" style="font-weight:600;text-decoration:none">Copy as Node Request</a></div></td><td style="vertical-align:middle">Copies the selected request(s) as Node.JS Request invocations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/copy-as-powershell-requests" style="font-weight:600;text-decoration:none">Copy as PowerShell Requests</a></div></td><td style="vertical-align:middle">Copies the selected request(s) as PowerShell invocation(s)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/core-impact" style="font-weight:600;text-decoration:none">Core Impact</a></div></td><td style="vertical-align:middle">
8Designed to enable security teams to conduct advanced penetration tests with ease.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/corsme" style="font-weight:600;text-decoration:none">CorsMe</a></div></td><td style="vertical-align:middle">CORS misconfiguration scanner tool with speed and precision in mind!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/corsy" style="font-weight:600;text-decoration:none">Corsy</a></div></td><td style="vertical-align:middle">CORS Misconfiguration Scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cortex-xdr-config-extractor" style="font-weight:600;text-decoration:none">Cortex XDR Config Extractor</a></div></td><td style="vertical-align:middle">Parse the Database Lock Files of the Cortex XDR Agent by Palo Alto Networks and extract Agent Settings, the Hash and Salt of the Uninstall Password, as well as possible Exclusions</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/covenant" style="font-weight:600;text-decoration:none">Covenant</a></div></td><td style="vertical-align:middle">Collaborative C2 framework for red teamers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/covenant" style="font-weight:600;text-decoration:none">Covenant</a></div></td><td style="vertical-align:middle">Command & Control framework with multi-user collaboration</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cr3dov3r" style="font-weight:600;text-decoration:none">Cr3dOv3r</a></div></td><td style="vertical-align:middle">Know the dangers of credential reuse attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crackmapexec" style="font-weight:600;text-decoration:none">CrackMapExec</a></div></td><td style="vertical-align:middle">A swiss army knife for pentesting networks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crackmapexec" style="font-weight:600;text-decoration:none">CrackMapExec</a></div></td><td style="vertical-align:middle">Post-exploitation tool to assess Active Directory networks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crackq" style="font-weight:600;text-decoration:none">CrackQ</a></div></td><td style="vertical-align:middle">Hashcat cracking queue system, API and WebUI</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crackql" style="font-weight:600;text-decoration:none">CrackQL</a></div></td><td style="vertical-align:middle">GraphQL password brute-force and fuzzing utility</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
8Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crackstation" style="font-weight:600;text-decoration:none">CrackStation</a></div></td><td style="vertical-align:middle">Pre-computed lookup tables to crack password hashes</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cracken" style="font-weight:600;text-decoration:none">Cracken</a></div></td><td style="vertical-align:middle">Password wordlist generator, Smartlist creation and password hybrid-mask</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crackerjack" style="font-weight:600;text-decoration:none">CrackerJack</a></div></td><td style="vertical-align:middle">Hashcat WebUI; session management, mask generation, API, notifications, local and LDAP authentication</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cracklord" style="font-weight:600;text-decoration:none">Cracklord</a></div></td><td style="vertical-align:middle">Scalable, pluggable, and distributed system for hash cracking, supports Hashcat</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crawlergo" style="font-weight:600;text-decoration:none">Crawlergo</a></div></td><td style="vertical-align:middle">A powerful browser crawler for web vulnerability scanners</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/credmaster" style="font-weight:600;text-decoration:none">CredMaster</a></div></td><td style="vertical-align:middle">Password spraying, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crlfi" style="font-weight:600;text-decoration:none">Crlfi</a></div></td><td style="vertical-align:middle">CRLF bug scanner for WebPentesters and Bugbounty Hunters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cross-site-scripting-cheat-sheet" style="font-weight:600;text-decoration:none">Cross-site scripting cheat sheet</a></div></td><td style="vertical-align:middle">
8PortSwigger XSS cheat sheet that contains many vectors that can help you bypass WAFs and filters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crossc2" style="font-weight:600;text-decoration:none">CrossC2</a></div></td><td style="vertical-align:middle">Generate CobaltStrike's cross-platform payload.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crosslinked" style="font-weight:600;text-decoration:none">CrossLinked</a></div></td><td style="vertical-align:middle">LinkedIn enumeration tool to get employee names from an organization using scraping.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crunch-cracker" style="font-weight:600;text-decoration:none">Crunch-Cracker</a></div></td><td style="vertical-align:middle">Wordlist generator and Wi-Fi cracker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cryptoguard" style="font-weight:600;text-decoration:none">CryptoGuard</a></div></td><td style="vertical-align:middle">Program analysis tool to find cryptographic misuse in Java and Android</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crypton" style="font-weight:600;text-decoration:none">Crypton</a></div></td><td style="vertical-align:middle">Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Hashing Algorithms along with example challenges from CTFs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cryscanner" style="font-weight:600;text-decoration:none">Cryscanner</a></div></td><td style="vertical-align:middle">Identify misuse of cryptographic libraries by collecting and analysing logs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/csper" style="font-weight:600;text-decoration:none">Csper</a></div></td><td style="vertical-align:middle">The most advance set of Content Security Policy tools.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cuckoo-3" style="font-weight:600;text-decoration:none">Cuckoo 3</a></div></td><td style="vertical-align:middle">Python 3 port of Cuckoo, automated malware analysis system</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cuckoo-sandbox" style="font-weight:600;text-decoration:none">Cuckoo Sandbox</a></div></td><td style="vertical-align:middle">An automated dynamic malware analysis system.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cutter" style="font-weight:600;text-decoration:none">Cutter</a></div></td><td style="vertical-align:middle">Qt and C++ GUI for radare2</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cyberchef" style="font-weight:600;text-decoration:none">CyberChef</a></div></td><td style="vertical-align:middle">A web app for encryption, encoding, compression and data analysis.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cyberchef" style="font-weight:600;text-decoration:none">CyberChef</a></div></td><td style="vertical-align:middle">Data manipulation toolkit in web browser</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cybersec-quizzes" style="font-weight:600;text-decoration:none">CyberSec Quizzes</a></div></td><td style="vertical-align:middle">Test your knowledge on cyber security and practice for industry recognised certifications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cyberstrike" style="font-weight:600;text-decoration:none">CyberStrike</a></div></td><td style="vertical-align:middle">Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai">Artificial Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cygeniq" style="font-weight:600;text-decoration:none">Cygeniq</a></div></td><td style="vertical-align:middle">
8Cygeniq is an end-to-end AI security, governance, and compliance platform designed to protect artificial intelligence systems from emerging threats, operational risks, and regulatory challenges. 9As AI becomes central to enterprise decision-making, organizations face new and evolving risks such as prompt injection, data poisoning, model theft, adversarial manipulation, and non-compliance with AI regulations. Cygeniq addresses these challenges by securing AI systems across their full lifecycle, from development and testing to deployment, monitoring, and governance. 10Cygeniqâs platform is powered by three integrated solutions: 11Hexashield AI â Advanced AI Security & Protection 12Hexashield AI protects AI models and applications against modern attack vectors including prompt injection, data poisoning, adversarial threats, and model exploitation. It provides continuous monitoring, vulnerability detection, and runtime protection to ensure AI systems remain resilient and trustworthy. 13GRCortex AI â AI Governance, Risk & Compliance (AI GRC) 14GRCortex AI enables organizations to manage AI risk, enforce governance frameworks, and maintain compliance with evolving global AI regulations. It provides visibility into AI usage, risk assessments, policy enforcement, audit readiness, and regulatory alignment, ensuring responsible and compliant AI adoption. 15CyberTiX AI â Intelligent Threat Intelligence & Risk Insights 16CyberTiX AI delivers actionable intelligence and risk insights tailored to AI ecosystems. It helps security teams proactively identify vulnerabilities, assess emerging AI-related threats, and strengthen defensive posture across AI-driven environments. 17Together, these solutions provide unified visibility, control, and protection across the AI lifecycle. Cygeniq integrates seamlessly with modern AI stacks, cloud environments, and enterprise systems, allowing organizations to deploy and scale AI securely without disrupting innovation. 18Built for enterprises, regulated industries, and AI-first organizations, Cygeniq ensures that AI systems remain secure, compliant, and resilient in an increasingly complex digital and regulatory landscape.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cypherdog" style="font-weight:600;text-decoration:none">CypherDog</a></div></td><td style="vertical-align:middle">PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cyver-core" style="font-weight:600;text-decoration:none">Cyver Core</a></div></td><td style="vertical-align:middle">Automate pentest reporting & project management, generate content with AI, improve client retention, and organize your pentest workload.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/d3m0n1z3dshell" style="font-weight:600;text-decoration:none">D3m0n1z3dShell</a></div></td><td style="vertical-align:middle">An advanced tool for persistence in Linux.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/darksurgeon" style="font-weight:600;text-decoration:none">DARKSURGEON</a></div></td><td style="vertical-align:middle">Windows project to empower incident response, digital forensics, malware analysis, and network defense with HashiCorp Packer and Vagrant</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dart" style="font-weight:600;text-decoration:none">DART</a></div></td><td style="vertical-align:middle">Documentation And Reporting Tool;
18 Collaborative penetration test and vulnerability database platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dc-detector" style="font-weight:600;text-decoration:none">DC Detector</a></div></td><td style="vertical-align:middle">Spot all domain controllers in a Microsoft Active Directory environment, find computer name, FQDN, and IP address(es) of all DCs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dcomrade" style="font-weight:600;text-decoration:none">DCOMrade</a></div></td><td style="vertical-align:middle">Script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement, code execution, data exfiltration, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/defcon" style="font-weight:600;text-decoration:none">DEFCON</a></div></td><td style="vertical-align:middle">The worldâs most prominent and well-known computer security conferences.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dfir-orc" style="font-weight:600;text-decoration:none">DFIR ORC</a></div></td><td style="vertical-align:middle">Forensics artefact collection tool for systems running Microsoft Windows</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dfirtrack" style="font-weight:600;text-decoration:none">DFIRTrack</a></div></td><td style="vertical-align:middle">Incident response tracking web application, focused on handling one major incident with a lot of affected systems</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dllinjector" style="font-weight:600;text-decoration:none">DLLInjector</a></div></td><td style="vertical-align:middle">Dll injection tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
18<a href="/tool/dllpasswordfilterimplant" style="font-weight:600;text-decoration:none">DLLPasswordFilterImplant</a></div></td><td style="vertical-align:middle">Password filter DLL, triggered on password change to exfiltrate credentials</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dns-rebinding-tool" style="font-weight:600;text-decoration:none">DNS Rebinding Tool</a></div></td><td style="vertical-align:middle">Toolkit to test further DNS rebinding attacks </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnscewl" style="font-weight:600;text-decoration:none">DNSCewl</a></div></td><td style="vertical-align:middle">A DNS bruteforcing wordlist generator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsdumpster" style="font-weight:600;text-decoration:none">DNSDumpster</a></div></td><td style="vertical-align:middle">Domain research tool that can discover hosts related to a domain</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsexfiltrator" style="font-weight:600;text-decoration:none">DNSExfiltrator</a></div></td><td style="vertical-align:middle">Data exfiltration over DNS request covert channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsmorph" style="font-weight:600;text-decoration:none">DNSMORPH</a></div></td><td style="vertical-align:middle">Domain name permutation engine written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsprobe" style="font-weight:600;text-decoration:none">DNSProbe</a></div></td><td style="vertical-align:middle">Allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
18<a href="/tool/dnsrecon" style="font-weight:600;text-decoration:none">DNSRecon</a></div></td><td style="vertical-align:middle">DNS reconnaissance tool: AXFR, DNS records enumeration, TLD expansion, wildcard resolution, subdomain bruteforce, PTR record lookup, check for cached records</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsrecon" style="font-weight:600;text-decoration:none">DNSRecon</a></div></td><td style="vertical-align:middle">DNS Enumeration Script.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnstake" style="font-weight:600;text-decoration:none">DNSTake</a></div></td><td style="vertical-align:middle">A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnstracer" style="font-weight:600;text-decoration:none">DNSTracer</a></div></td><td style="vertical-align:middle">Trace the path of a DNS query.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnswatch" style="font-weight:600;text-decoration:none">DNSWatch</a></div></td><td style="vertical-align:middle">DNS traffic sniffer and analyzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dom-xss-scanner" style="font-weight:600;text-decoration:none">DOM XSS Scanner</a></div></td><td style="vertical-align:middle">A tool to scan source code for DOM based XSS vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dom-based-xss-finder" style="font-weight:600;text-decoration:none">DOM based XSS finder</a></div></td><td style="vertical-align:middle">Chrome extension that finds DOM based XSS vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/domdig" style="font-weight:600;text-decoration:none">DOMDig</a></div></td><td style="vertical-align:middle">DOM XSS scanner for Single Page Applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dompurify" style="font-weight:600;text-decoration:none">DOMPurify</a></div></td><td style="vertical-align:middle">A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/drakvuf-sandbox" style="font-weight:600;text-decoration:none">DRAKVUF Sandbox</a></div></td><td style="vertical-align:middle">Automated black-box hypervisor-level malware analysis system</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dsstoreview" style="font-weight:600;text-decoration:none">DSStoreView</a></div></td><td style="vertical-align:middle">DS_Store file parser/viewer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dtd-finder" style="font-weight:600;text-decoration:none">DTD Finder</a></div></td><td style="vertical-align:middle">List DTDs and generate XXE payloads using those local DTDs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvca" style="font-weight:600;text-decoration:none">DVCA</a></div></td><td style="vertical-align:middle">Damn vulnerable cloud application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvcs-pillage" style="font-weight:600;text-decoration:none">DVCS-Pillage</a></div></td><td style="vertical-align:middle">Dump web accessible (distributed) version control systems (DVCS/VCS): GIT, Mercurial/hg, Bazaar/bzr, â¦</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvga" style="font-weight:600;text-decoration:none">DVGA</a></div></td><td style="vertical-align:middle">Damn Vulnerable GraphQL Application, insecure webapp for GraphQL security trainings</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvia" style="font-weight:600;text-decoration:none">DVIA</a></div></td><td style="vertical-align:middle">Damn Vulnerable iOS App, insecure webapp for mobile security trainings</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvrf" style="font-weight:600;text-decoration:none">DVRF</a></div></td><td style="vertical-align:middle">The Damn Vulnerable Router Firmware project.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvwa" style="font-weight:600;text-decoration:none">DVWA</a></div></td><td style="vertical-align:middle">Damn Vulnerable Web Application, insecure webapp for security trainings</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvwa" style="font-weight:600;text-decoration:none">DVWA</a></div></td><td style="vertical-align:middle">Damn Vulnerable Web Application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvws" style="font-weight:600;text-decoration:none">DVWS</a></div></td><td style="vertical-align:middle">Vulnerable application with a web service and an API.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvenom" style="font-weight:600;text-decoration:none">DVenom</a></div></td><td style="vertical-align:middle">Helps to bypass antiviruses by providing an encryption wrapper and loader for your shellcode.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dalfox" style="font-weight:600;text-decoration:none">DalFox</a></div></td><td style="vertical-align:middle">Powerful open source XSS scanning tool and parameter analyzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dalfox" style="font-weight:600;text-decoration:none">Dalfox</a></div></td><td style="vertical-align:middle">XSS scanner and utility focused on automation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/damn-vulnerable-bank" style="font-weight:600;text-decoration:none">Damn Vulnerable Bank</a></div></td><td style="vertical-align:middle">A vulnerable Android application with an interface to test your mobile hacking skills.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/damn-vulnerable-restaurant" style="font-weight:600;text-decoration:none">Damn Vulnerable RESTaurant</a></div></td><td style="vertical-align:middle">An intentionally vulnerable web API game for learning and training purposes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dangerous-methods" style="font-weight:600;text-decoration:none">Dangerous Methods</a></div></td><td style="vertical-align:middle">A Burp Suite extension for finding the use of potentially dangerous methods/functions.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/darkshot" style="font-weight:600;text-decoration:none">Darkshot</a></div></td><td style="vertical-align:middle">Lightshot scraper with multi-threaded OCR and auto categorizing screenshots</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dastardly-scan-action" style="font-weight:600;text-decoration:none">Dastardly Scan Action</a></div></td><td style="vertical-align:middle">Runs a scan using Dastardly by Burp Suite against a target site and generates a report.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dataextractor" style="font-weight:600;text-decoration:none">DataExtractor</a></div></td><td style="vertical-align:middle">A Burp Suite extension to extract data from source code while browsing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dawnscanner" style="font-weight:600;text-decoration:none">Dawnscanner</a></div></td><td style="vertical-align:middle">Sstatic analysis security scanner for ruby written web applications; supports Sinatra, Padrino and Ruby on Rails frameworks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dbgshell" style="font-weight:600;text-decoration:none">DbgShell</a></div></td><td style="vertical-align:middle">Front-end for the Windows debugger engine</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dcode" style="font-weight:600;text-decoration:none">Dcode</a></div></td><td style="vertical-align:middle">Code and decode all kind of checksums, algorithms, codes or ciphers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/de4py" style="font-weight:600;text-decoration:none">De4py</a></div></td><td style="vertical-align:middle">toolkit for python reverse engineering.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dehashed" style="font-weight:600;text-decoration:none">DeHashed</a></div></td><td style="vertical-align:middle">DeHashed provides free deep-web scans and protection against credential leaks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dehashed" style="font-weight:600;text-decoration:none">DeHashed</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/deadtrap" style="font-weight:600;text-decoration:none">DeadTrap</a></div></td><td style="vertical-align:middle">Track down footprints of a phone number</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/decompiler-explorer" style="font-weight:600;text-decoration:none">Decompiler Explorer</a></div></td><td style="vertical-align:middle">Multi-decompiler engine; supports angr, BinaryNinja, Boomerang, dewolf, Ghidra, Hex-Rays, RecStudio, Reko, Relyze, RetDec, Snowman</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/decompilercom" style="font-weight:600;text-decoration:none">Decompiler.com</a></div></td><td style="vertical-align:middle">C#, Python, Android and Java online decompiler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/decompilers-online" style="font-weight:600;text-decoration:none">Decompilers online</a></div></td><td style="vertical-align:middle">Free, accessible, and platform-independent decompilation service.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/deepsecrets" style="font-weight:600;text-decoration:none">DeepSecrets</a></div></td><td style="vertical-align:middle">Secrets scanner that understands code.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/default-credentials-cheat-sheet" style="font-weight:600;text-decoration:none">Default Credentials Cheat Sheet</a></div></td><td style="vertical-align:middle">One place for all the default credentials to assist on finding devices with default password.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/defaultpassword" style="font-weight:600;text-decoration:none">DefaultPassword</a></div></td><td style="vertical-align:middle">Default passwords database sorted by manufacturers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/defectdojo" style="font-weight:600;text-decoration:none">DefectDojo</a></div></td><td style="vertical-align:middle">Vulnerability management application built for DevOps and continuous security integration</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/defuse-online-disassembler" style="font-weight:600;text-decoration:none">Defuse online disassembler</a></div></td><td style="vertical-align:middle">Online x86 (32/64 bits) assembler and disassembler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dejavu" style="font-weight:600;text-decoration:none">DejaVU</a></div></td><td style="vertical-align:middle">Deception framework which can be used to deploy decoys across the infrastru
18cture</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/honeypot-and-decoy">Honeypot and Decoy</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/demiguise" style="font-weight:600;text-decoration:none">Demiguise</a></div></td><td style="vertical-align:middle">HTA encryption tool for Red Teams.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/deming" style="font-weight:600;text-decoration:none">Deming</a></div></td><td style="vertical-align:middle">Management tool for the information security management system (ISMS); manage, plan, track and report the effectiveness of security controls</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dependencycheck" style="font-weight:600;text-decoration:none">DependencyCheck</a></div></td><td style="vertical-align:middle">Utility that detects publicly disclosed vulnerabilities in application dependencies.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/depix" style="font-weight:600;text-decoration:none">Depix</a></div></td><td style="vertical-align:middle">Recovers passwords from pixelized screenshots.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dexcalibur" style="font-weight:600;text-decoration:none">Dexcalibur</a></div></td><td style="vertical-align:middle">Android reverse engineering platform focus on instrumentation automation (decompile/disass intercepted bytecode at runtime, write hook code, search interesting pattern</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dirbuster" style="font-weight:600;text-decoration:none">DirBuster</a></div></td><td style="vertical-align:middle">Multi threaded application to brute force directories and files names on web/application servers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/godirsearch" style="font-weight:600;text-decoration:none">DirSearch (Golang)</a></div></td><td style="vertical-align:middle">A Go implementation of dirsearch.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dirb" style="font-weight:600;text-decoration:none">Dirb</a></div></td><td style="vertical-align:middle">Web Fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dirstalk" style="font-weight:600;text-decoration:none">Dirstalk</a></div></td><td style="vertical-align:middle">Multi threaded application designed to brute force paths on web servers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dismap" style="font-weight:600;text-decoration:none">Dismap</a></div></td><td style="vertical-align:middle">Asset discovery and identification tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dispatch" style="font-weight:600;text-decoration:none">Dispatch</a></div></td><td style="vertical-align:middle">All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/distribute-damage" style="font-weight:600;text-decoration:none">Distribute Damage</a></div></td><td style="vertical-align:middle">Evenly distributes scanner load across targets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/divideandscan" style="font-weight:600;text-decoration:none">DivideAndScan</a></div></td><td style="vertical-align:middle">Divide full port scan results and use it for targeted Nmap runs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsfookup" style="font-weight:600;text-decoration:none">DnsFookup</a></div></td><td style="vertical-align:middle">Create DNS request collector and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/domlink" style="font-weight:600;text-decoration:none">DomLink</a></div></td><td style="vertical-align:middle">Link a domain with registered organisation names and emails, to other domains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/domain-analyzer" style="font-weight:600;text-decoration:none">Domain Analyzer</a></div></td><td style="vertical-align:middle">Analyze the security of any domain by finding all the information possible. Made in python.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/domain-hunter" style="font-weight:600;text-decoration:none">Domain Hunter</a></div></td><td style="vertical-align:middle">Checks expired domains to determine good candidates for phishing and C2 domain names.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/domainim" style="font-weight:600;text-decoration:none">Domainim</a></div></td><td style="vertical-align:middle">Domain reconnaissance for organizational network scanning</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dome" style="font-weight:600;text-decoration:none">Dome</a></div></td><td style="vertical-align:middle">Script that makes active and/or passive scan to obtain subdomains and search for open ports.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/donpapi" style="font-weight:600;text-decoration:none">DonPAPI</a></div></td><td style="vertical-align:middle">Dumping DPAPI credentials remotely; dumps relevant information on compromised targets without AV detection</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/donut" style="font-weight:600;text-decoration:none">Donut</a></div></td><td style="vertical-align:middle">Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/donut" style="font-weight:600;text-decoration:none">Donut</a></div></td><td style="vertical-align:middle">Generates x86_32, x86_64, or AMD64 position-independent shellcode that loads .NET Assemblies, PE files (EXE), VBScript, JScript, and DLL files from memory and runs them with parameters</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dork-search-files" style="font-weight:600;text-decoration:none">Dork Search Files</a></div></td><td style="vertical-align:middle">Advanced Google searches using dorks to locate specific files on the internet.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dorkgpt" style="font-weight:600;text-decoration:none">DorkGPT</a></div></td><td style="vertical-align:middle">Generate Google dorks with AI.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dotdotpwn" style="font-weight:600;text-decoration:none">DotDotPwn</a></div></td><td style="vertical-align:middle">Directory Traversal fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dotdotpwn" style="font-weight:600;text-decoration:none">DotDotPwn</a></div></td><td style="vertical-align:middle">The Directory Traversal Fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dotgit" style="font-weight:600;text-decoration:none">DotGit</a></div></td><td style="vertical-align:middle">An extension for checking if .git is exposed in visited websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dotgit" style="font-weight:600;text-decoration:none">DotGit</a></div></td><td style="vertical-align:middle">Web browser extension (Firefox and CHromium) checking if .git is exposed in visited websites</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/doubletap" style="font-weight:600;text-decoration:none">DoubleTap</a></div></td><td style="vertical-align:middle">Headless browser in order to load pages and execute JavaScript that often generates things like dynamic nonces that validate the page was actually rendered by a human for password spraying</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dradis" style="font-weight:600;text-decoration:none">Dradis</a></div></td><td style="vertical-align:middle">Collaboration and reporting for infosec teams made simple.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dradis-ce" style="font-weight:600;text-decoration:none">Dradis CE</a></div></td><td style="vertical-align:middle">Dradis is an open-source reporting and collaboration tool trusted by 1,000s of InfoSec professionals around the world.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dradis-pro" style="font-weight:600;text-decoration:none">Dradis Pro</a></div></td><td style="vertical-align:middle">Collaborative penetration test, vulnerability database and reporting platform; Pro edition</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/driploader" style="font-weight:600;text-decoration:none">DripLoader</a></div></td><td style="vertical-align:middle">Evasive shellcode loader for bypassing injection detection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/droidguard-vm-samples" style="font-weight:600;text-decoration:none">DroidGuard VM Samples</a></div></td><td style="vertical-align:middle">Different versions of the DroidGuard VM as well as different version of the bytecode running through this VM</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/droidefense" style="font-weight:600;text-decoration:none">Droidefense</a></div></td><td style="vertical-align:middle">Android apps/malware analysis/reversing tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dronesploit" style="font-weight:600;text-decoration:none">DroneSploit</a></div></td><td style="vertical-align:middle">Drone pentesting framework console.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/drupwn" style="font-weight:600;text-decoration:none">Drupwn</a></div></td><td style="vertical-align:middle">Drupal enumeration & exploitation tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dshell" style="font-weight:600;text-decoration:none">Dshell</a></div></td><td style="vertical-align:middle">A network forensic analysis framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dumpert" style="font-weight:600;text-decoration:none">Dumpert</a></div></td><td style="vertical-align:middle">LSASS memory dumper using direct system calls and API unhooking.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dumpsterdiver" style="font-weight:600;text-decoration:none">DumpsterDiver</a></div></td><td style="vertical-align:middle">Tool to search secrets in various filetypes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/duplicut" style="font-weight:600;text-decoration:none">Duplicut</a></div></td><td style="vertical-align:middle">Remove duplicates from massive wordlist, without sorting it (for dictionary-based password cracking)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eaphammer" style="font-weight:600;text-decoration:none">EAPHammer</a></div></td><td style="vertical-align:middle">Targeted attacks against WPA2-Enterprise networks, wireless pivots using hostile portal attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/edd" style="font-weight:600;text-decoration:none">EDD</a></div></td><td style="vertical-align:middle">Ultimate domain enumeration tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/edrsilencer" style="font-weight:600;text-decoration:none">EDRSilencer</a></div></td><td style="vertical-align:middle">Uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/emba" style="font-weight:600;text-decoration:none">EMBA</a></div></td><td style="vertical-align:middle">The security analyzer for firmware of embedded devices.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/emba" style="font-weight:600;text-decoration:none">EMBA</a></div></td><td style="vertical-align:middle">Security analyzer for firmware of embedded devices</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eml-analyzer" style="font-weight:600;text-decoration:none">EML analyzer</a></div></td><td style="vertical-align:middle">
18Analyze EML files: headers, bodies, attachments; extract IOCs; identify suspicious attachments</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eagle" style="font-weight:600;text-decoration:none">Eagle</a></div></td><td style="vertical-align:middle">Vulnerability scanner for mass detection of web-based applications vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eagleeye" style="font-weight:600;text-decoration:none">EagleEye</a></div></td><td style="vertical-align:middle">Image recognition on instagram, facebook and twitter</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eagleeye" style="font-weight:600;text-decoration:none">EagleEye</a></div></td><td style="vertical-align:middle">Stalk your friends on social media using image recognition and reverse image search.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/earlybird" style="font-weight:600;text-decoration:none">EarlyBird</a></div></td><td style="vertical-align:middle">Sensitive data detection tool capable of scanning source code repositories.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/echidna" style="font-weight:600;text-decoration:none">Echidna</a></div></td><td style="vertical-align:middle">Collaborative penetration test platform; terminal sharing, target information extraction, command suggestion, exploit searching, chatting, graph visualization</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/empire" style="font-weight:600;text-decoration:none">Empire</a></div></td><td style="vertical-align:middle">Post-exploitation and adversary emulation framework that is used to aid Red Teams and pentesters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/empire" style="font-weight:600;text-decoration:none">Empire</a></div></td><td style="vertical-align:middle">PowerShell and Python post-exploitation agent</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/empire-gui" style="font-weight:600;text-decoration:none">Empire GUI</a></div></td><td style="vertical-align:middle">GUI for Empire framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/endpointer" style="font-weight:600;text-decoration:none">EndPointer</a></div></td><td style="vertical-align:middle">An extension that auto extracts URLs from the current webpage and JS files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/enemies-of-symfony" style="font-weight:600;text-decoration:none">Enemies Of Symfony</a></div></td><td style="vertical-align:middle">Loots information from a Symfony target using profiler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/enki" style="font-weight:600;text-decoration:none">Enki</a></div></td><td style="vertical-align:middle">Crisis management platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/crisis-management">Crisis Management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/enlightn" style="font-weight:600;text-decoration:none">Enlightn</a></div></td><td style="vertical-align:middle">Your performance & security consultant, an artisan command away.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/espresso-sso-extension-for-burp-suite" style="font-weight:600;text-decoration:none">EsPReSSO (SSO extension for Burp Suite)</a></div></td><td style="vertical-align:middle">The extension is based on the BurpSSO Extension, developed by the Chair of Network and Data Security, Ruhr University Bochum and the Hackmanit GmbH. The extension is part of a bachelor thesis by Tim Guenther at the Ruhr-University Bochum in cooperation with Context Information Security Ltd..</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/espionage" style="font-weight:600;text-decoration:none">Espionage</a></div></td><td style="vertical-align:middle">Domain information gathering: whois, history, dns records, web technologies, records</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ettercap" style="font-weight:600;text-decoration:none">Ettercap</a></div></td><td style="vertical-align:middle">Free and open source network security tool for man-in-the-middle attacks on a LAN.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/evil-sql-client" style="font-weight:600;text-decoration:none">Evil SQL Client</a></div></td><td style="vertical-align:middle">Interactive .NET SQL console client with enhanced SQL Server discovery/access/exfiltration features.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/evil-winrm" style="font-weight:600;text-decoration:none">Evil-WinRM</a></div></td><td style="vertical-align:middle">Enhanced WinRM shell</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/evilclippy" style="font-weight:600;text-decoration:none">EvilClippy</a></div></td><td style="vertical-align:middle">Create malicious MS Office documents to hide VBA macros, stomp VBA co
18de.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/evilginx3" style="font-weight:600;text-decoration:none">Evilginx3</a></div></td><td style="vertical-align:middle">Standalone MITM attack framework allowing for the bypass of 2-factor authentication.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/exiftool" style="font-weight:600;text-decoration:none">ExifTool</a></div></td><td style="vertical-align:middle">Library and CLI tool to read and write meta information (EXIF, GPS, IPTC, XMP, JFIF, â¦) in files (JPEG, PNG, SVG, MPEG, â¦)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/exiftool" style="font-weight:600;text-decoration:none">ExifTool</a></div></td><td style="vertical-align:middle">ExifTool meta information reader/writer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/exiftool" style="font-weight:600;text-decoration:none">ExifTool</a></div></td><td style="vertical-align:middle">Library and CLI tool for reading, writing and editing metadata for a lot of file types</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/exiv2" style="font-weight:600;text-decoration:none">Exiv2</a></div></td><td style="vertical-align:middle">Library and CLI tool to read and write meta information (Exif, IPTC & XMP metadata and ICC Profile) in images (JPEG, TIFF, PNG, â¦)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/exploitalert" style="font-weight:600;text-decoration:none">Exploitalert</a></div></td><td style="vertical-align:middle">Exploits found on the INTERNET.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/exporter" style="font-weight:600;text-decoration:none">Exporter</a></div></td><td style="vertical-align:middle">Copies selected request(s) as cURL, wget, Python Request, Perl LWP, PHP HTTP_Request2, Go, NodeJS Request, jQuery AJAX, PowerShell, HTML Forms, Ruby Net::HTTP, JavaScript XHR invocations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/extended-ssrf-search" style="font-weight:600;text-decoration:none">Extended SSRF search</a></div></td><td style="vertical-align:middle">Smart SSRF scanner using different methods like parameter brute forcing in POST and GET.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/extended-xss-searcher-and-finder" style="font-weight:600;text-decoration:none">Extended XSS Searcher and Finder</a></div></td><td style="vertical-align:middle">Scans for different types of XSS on a list of urls.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eyespy" style="font-weight:600;text-decoration:none">EyeSpy</a></div></td><td style="vertical-align:middle">Designed to enumerate and gain access to IP cameras via RTSP.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eyewitness" style="font-weight:600;text-decoration:none">EyeWitness</a></div></td><td style="vertical-align:middle">Take screenshots of websites, provide some server header info, and identify default credentials if possible</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eyewitness" style="font-weight:600;text-decoration:none">EyeWitness</a></div></td><td style="vertical-align:middle">Take screenshots of websites, provide server header info and identify default credentials.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eyeballer" style="font-weight:600;text-decoration:none">Eyeballer</a></div></td><td style="vertical-align:middle">Convolutional neural network for analyzing pentest screenshots.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eyeballer" style="font-weight:600;text-decoration:none">Eyeballer</a></div></td><td style="vertical-align:middle">Convolutional neural network for analyzing pentest screenshots and automatically label them</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/f-secure-identity-theft-checker" style="font-weight:600;text-decoration:none">F-Secure Identity Theft Checker</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, send an email with the breaches not the password</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fdsploit" style="font-weight:600;text-decoration:none">FDsploit</a></div></td><td style="vertical-align:middle">File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ffm" style="font-weight:600;text-decoration:none">FFM</a></div></td><td style="vertical-align:middle">Freedom Fighting Mode (FFM), hacking harness, post-exploitation tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/foca" style="font-weight:600;text-decoration:none">FOCA</a></div></td><td style="vertical-align:middle">OSINT framework and metadata analyser</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/foca" style="font-weight:600;text-decoration:none">FOCA</a></div></td><td style="vertical-align:middle">Tool to find metadata and hidden information in the documents.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ftk-imager" style="font-weight:600;text-decoration:none">FTK Imager</a></div></td><td style="vertical-align:middle">Investigate electronic devices; full disk imaging capabilities: preview and image hard drives from Windows and Linux computers, CDs, DVDs, thumb drives, and other USB; forensic image mounting: mount an image for a read-only view that leverages file explorer; preview data; RAM capture</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/facebook_osint_dump" style="font-weight:600;text-decoration:none">Facebook_OSINT_Dump</a></div></td><td style="vertical-align:middle">OSINT tool, facebook profile dumper, windows and chrome only</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fakeimageexploiter" style="font-weight:600;text-decoration:none">FakeImageExploiter</a></div></td><td style="vertical-align:middle">Use a Fake image.jpg to exploit targets (hide known file extensions).</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/falconhound" style="font-weight:600;text-decoration:none">FalconHound</a></div></td><td style="vertical-align:middle">Plug BloodHound with a SIEM or other log aggregation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/faraday" style="font-weight:600;text-decoration:none">Faraday</a></div></td><td style="vertical-align:middle">Collaborative penetration test and reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/faraday-security" style="font-weight:600;text-decoration:none">Faraday security</a></div></td><td style="vertical-align:middle">Open source sulnerability management and orchestration platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fastfuzz-chrome-extension" style="font-weight:600;text-decoration:none">FastFuzz Chrome Extension</a></div></td><td style="vertical-align:middle">Site fast fuzzing with chorme extension.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fav-up" style="font-weight:600;text-decoration:none">Fav-up</a></div></td><td style="vertical-align:middle">Favicon fingerprinting using Shodan</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/favfreak" style="font-weight:600;text-decoration:none">FavFreak</a></div></td><td style="vertical-align:middle">Favicon fingerprinting</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/favfreak" style="font-weight:600;text-decoration:none">FavFreak</a></div></td><td style="vertical-align:middle">Making favicon.ico based recon great again.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/favinizer" style="font-weight:600;text-decoration:none">Favinizer</a></div></td><td style="vertical-align:middle">Favicon fingerprinting</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/featherduster" style="font-weight:600;text-decoration:none">FeatherDuster</a></div></td><td style="vertical-align:middle">Cryptanalysis tool and library</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/femida" style="font-weight:600;text-decoration:none">Femida</a></div></td><td style="vertical-align:middle">Automated blind-xss search for Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fenrir" style="font-weight:600;text-decoration:none">Fenrir</a></div></td><td style="vertical-align:middle">IOC scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/feroxbuster" style="font-weight:600;text-decoration:none">Feroxbuster</a></div></td><td style="vertical-align:middle">A fast, simple, recursive content discovery tool written in Rust.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/festin" style="font-weight:600;text-decoration:none">FestIN</a></div></td><td style="vertical-align:middle">The powered S3 bucket finder and content discover.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fibratus" style="font-weight:600;text-decoration:none">Fibratus</a></div></td><td style="vertical-align:middle">Tool for exploration and tracing of the Windows kernel</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fiddler-everywhere" style="font-weight:600;text-decoration:none">Fiddler Everywhere</a></div></td><td style="vertical-align:middle">Web debugging proxy for MacOS, Windows, and Linux.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fierce" style="font-weight:600;text-decoration:none">Fierce</a></div></td><td style="vertical-align:middle">A DNS reconnaissance tool for locating non-contiguous IP space.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fiercephish" style="font-weight:600;text-decoration:none">FiercePhish</a></div></td><td style="vertical-align:middle">Full-fledged phishing framework to manage all phishing engagements.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/filebuster" style="font-weight:600;text-decoration:none">Filebuster</a></div></td><td style="vertical-align:middle">An extremely fast and flexible web fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/findom-xss" style="font-weight:600;text-decoration:none">FinDOM-XSS</a></div></td><td style="vertical-align:middle">A fast DOM based XSS vulnerability scanner with simplicity.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/finalrecon" style="font-weight:600;text-decoration:none">FinalRecon</a></div></td><td style="vertical-align:middle">All In One Web Recon.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/finalrecon" style="font-weight:600;text-decoration:none">FinalRecon</a></div></td><td style="vertical-align:middle">Web reconnaissance script</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/finduncommonshares" style="font-weight:600;text-decoration:none">FindUncommonShares</a></div></td><td style="vertical-align:middle">Quickly find uncommon shares in vast Windows domains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/findomain" style="font-weight:600;text-decoration:none">Findomain</a></div></td><td style="vertical-align:middle">Fast subdomain enumerator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/findomain" style="font-weight:600;text-decoration:none">Findomain</a></div></td><td style="vertical-align:middle">The complete solution for domain recognition.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/findsploit" style="font-weight:600;text-decoration:none">Findsploit</a></div></td><td style="vertical-align:middle">Find exploits in local and online databases instantly.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fingerprinter" style="font-weight:600;text-decoration:none">Fingerprinter</a></div></td><td style="vertical-align:middle">CMS version detection tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fingerprinter" style="font-weight:600;text-decoration:none">Fingerprinter</a></div></td><td style="vertical-align:middle">CMS/LMS/Library etc Versions Fingerprinter.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/firebounty" style="font-weight:600;text-decoration:none">FireBounty</a></div></td><td style="vertical-align:middle">The ultimate Vulnerability Disclosure Policy and Bug Bounty list!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fireshodanmap" style="font-weight:600;text-decoration:none">FireShodanMap</a></div></td><td style="vertical-align:middle">Realtime map that integrates Firebase, Google Maps and Shodan.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/firebase-extractor" style="font-weight:600;text-decoration:none">Firebase-Extractor</a></div></td><td style="vertical-align:middle">A tool written in python for scraping firebase data.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/firefly" style="font-weight:600;text-decoration:none">Firefly</a></div></td><td style="vertical-align:middle">Black box fuzzer for web applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/firefly" style="font-weight:600;text-decoration:none">Firefly</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce); but also a web fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/firefox-monitor" style="font-weight:600;text-decoration:none">Firefox Monitor</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, display the breaches not the password</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fitcrack" style="font-weight:600;text-decoration:none">Fitcrack</a></div></td><td style="vertical-align:middle">Hashcat-based distributed password cracking system with WebUI</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/flare" style="font-weight:600;text-decoration:none">Flare</a></div></td><td style="vertical-align:middle">Processes SWF and extract scripts from it</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
18<a href="/tool/flask-session-cookie-decoderencoder" style="font-weight:600;text-decoration:none">Flask Session Cookie Decoder/Encoder</a></div></td><td style="vertical-align:middle">A script that let you encode and decode a Flask session cookie</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/flasm" style="font-weight:600;text-decoration:none">Flasm</a></div></td><td style="vertical-align:middle">Disassembler tool for SWF bytecode</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/floss" style="font-weight:600;text-decoration:none">Floss</a></div></td><td style="vertical-align:middle">Automatically extract obfuscated strings from malware.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/flow" style="font-weight:600;text-decoration:none">Flow</a></div></td><td style="vertical-align:middle">Provides view with filtering capabilities for all requests from all Burp Suite tools.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/flowmate" style="font-weight:600;text-decoration:none">FlowMate</a></div></td><td style="vertical-align:middle">A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/flutter-spy" style="font-weight:600;text-decoration:none">Flutter Spy</a></div></td><td style="vertical-align:middle">Explore, analyze, and gain valuable data & insights from reverse engineered Flutter apps</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fluxion" style="font-weight:600;text-decoration:none">Fluxion</a></div></td><td style="vertical-align:middle">Fluxion is the future of MITM WPA attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fluxion" style="font-weight:600;text-decoration:none">Fluxion</a></div></td><td style="vertical-align:middle">MITM WPA attack tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fockcache" style="font-weight:600;text-decoration:none">FockCache</a></div></td><td style="vertical-align:middle">Test Cache Poisoning</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/foremost" style="font-weight:600;text-decoration:none">Foremost</a></div></td><td style="vertical-align:middle">CLI tool to recover files based on their headers, footers, and internal data structures</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/forensicminer" style="font-weight:600;text-decoration:none">ForensicMiner</a></div></td><td style="vertical-align:middle">DFIR automation for collecting and analyzing evidence</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/freddy-deserialization-bug-finder" style="font-weight:600;text-decoration:none">Freddy Deserialization Bug Finder</a></div></td><td style="vertical-align:middle">A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/free-certifications" style="font-weight:600;text-decoration:none">Free Certifications</a></div></td><td style="vertical-align:middle">A curated list of free courses & certifications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/freeze" style="font-weight:600;text-decoration:none">Freeze</a></div></td><td style="vertical-align:middle">Payload creation tool used for circumventing EDR security controls to execute shellcode in a stealthy manner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/freeze-rs" style="font-weight:600;text-decoration:none">Freeze-rs</a></div></td><td style="vertical-align:middle">Payload toolkit for bypassing EDRs using suspended processes, direct syscalls written.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fresh-resolvers" style="font-weight:600;text-decoration:none">Fresh Resolvers</a></div></td><td style="vertical-align:middle">List of fresh DNS resolvers updated every 12h.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/frida" style="font-weight:600;text-decoration:none">Frida</a></div></td><td style="vertical-align:middle">Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/frida" style="font-weight:600;text-decoration:none">Frida</a></div></td><td style="vertical-align:middle">Dynamic code instrumentation toolkit</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fridaandroidtracer" style="font-weight:600;text-decoration:none">FridaAndroidTracer</a></div></td><td style="vertical-align:middle">Android application tracer powered by Frida.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fruitywifi" style="font-weight:600;text-decoration:none">FruityWiFi</a></div></td><td style="vertical-align:middle">Wireless network auditing tool controlled by a web interface</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fruitywifi" style="font-weight:600;text-decoration:none">FruityWifi</a></div></td><td style="vertical-align:middle">Wireless network auditing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fuxi" style="font-weight:600;text-decoration:none">Fuxi</a></div></td><td style="vertical-align:middle">Penetration testing platform, automate some scan & attack</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fuzzdb" style="font-weight:600;text-decoration:none">FuzzDB</a></div></td><td style="vertical-align:middle">Attack patterns and primitives for black-box application fault injection and resource discovery.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fuzzapi" style="font-weight:600;text-decoration:none">Fuzzapi</a></div></td><td style="vertical-align:middle">Web-UI for API-fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fuzzapi" style="font-weight:600;text-decoration:none">Fuzzapi</a></div></td><td style="vertical-align:middle">Used for REST API pentesting and provide UI solution for gem.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fuzzilli" style="font-weight:600;text-decoration:none">Fuzzilli</a></div></td><td style="vertical-align:middle">A JavaScript Engine Fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gap" style="font-weight:600;text-decoration:none">GAP</a></div></td><td style="vertical-align:middle">A Burp Suite extension to find potential endpoints and parameters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gau" style="font-weight:600;text-decoration:none">GAU</a></div></td><td style="vertical-align:middle">Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gcpbucketbrute" style="font-weight:600;text-decoration:none">GCPBucketBrute</a></div></td><td style="vertical-align:middle">Enumerate Google Storage buckets, check the access and if they can be privilege escalated.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gd-thief" style="font-weight:600;text-decoration:none">GD-Thief</a></div></td><td style="vertical-align:middle">Exfiltrate files from a target's Google Drive that you have access to, via Google's API.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gdb" style="font-weight:600;text-decoration:none">GDB</a></div></td><td style="vertical-align:middle">GNU debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gef" style="font-weight:600;text-decoration:none">GEF</a></div></td><td style="vertical-align:middle">GDB Enhanced Features, multi-architecture</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/get-acq" style="font-weight:600;text-decoration:none">GET-ACQ</a></div></td><td style="vertical-align:middle">Gather all companies acquired by a given company domain name.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gh-dll-injector" style="font-weight:600;text-decoration:none">GH DLL Injector</a></div></td><td style="vertical-align:middle">DLL injection library supporting x86, WOW64 and x64 injections; 5 injection methods, 4 shellcode execution methods and various additional options; session separation can be bypassed with all methods</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ghunt" style="font-weight:600;text-decoration:none">GHunt</a></div></td><td style="vertical-align:middle">Investigate Google accounts with emails and find name, usernames, Youtube Channel, probable location, Maps reviews, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goad" style="font-weight:600;text-decoration:none">GOAD</a></div></td><td style="vertical-align:middle">Game Of Active Directory is a test environment lab that includes all the common vulnerabilities of an active directory</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goad" style="font-weight:600;text-decoration:none">GOAD</a></div></td><td style="vertical-align:middle">Game of Active Directory.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gpt_vuln-analyzer" style="font-weight:600;text-decoration:none">GPT_Vuln-Analyzer</a></div></td><td style="vertical-align:middle">A powerful network scanner, DNS recon, subdomain enumeration and IP Geolocator tool powered by GPT.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/grecon" style="font-weight:600;text-decoration:none">GRecon</a></div></td><td style="vertical-align:middle">Run a Google based passive recon against your scope.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gsan" style="font-weight:600;text-decoration:none">GSAN</a></div></td><td style="vertical-align:middle">Extract subdomains from SSL certificates in HTTPS sites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gsil" style="font-weight:600;text-decoration:none">GSIL</a></div></td><td style="vertical-align:middle">GitHub Sensitive Information Leakage.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gtfoargs" style="font-weight:600;text-decoration:none">GTFOArgs</a></div></td><td style="vertical-align:middle">Unix binaries that can be manipulated for argument injection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gtfoblookup" style="font-weight:600;text-decoration:none">GTFOBLookup</a></div></td><td style="vertical-align:middle">CLI for earching gtfobins and lolbas from the terminal; allows more advanced search than gtfo</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gtfobins.github.io" style="font-weight:600;text-decoration:none">GTFOBins</a></div></td><td style="vertical-align:middle">Unix binaries that can be used to bypass local security restrictions in misconfigured systems.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gtfonow" style="font-weight:600;text-decoration:none">GTFONow</a></div></td><td style="vertical-align:middle">Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gvm" style="font-weight:600;text-decoration:none">GVM</a></div></td><td style="vertical-align:middle">The Greenbone Vulnerability Management (GVM) is a framework of several services: gvmd is the central service that c
18onsolidates plain vulnerability scanning into a full vulnerability management solution. The Greenbone Security Assistant (GSA) is the web interface of GVM. The main scanner (OpenVAS) is a full-featured scan engine that executes a continuously updated and extended feed of Network Vulnerability Tests (NVTs). Complementary to the web interface, GVM-Tools allows batch processing / scripting via the Greenbone Management Protocol (GMP). Additional scanners can be integrated via the Open Scanner Protocol (OSP)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gadgetprobe" style="font-weight:600;text-decoration:none">GadgetProbe</a></div></td><td style="vertical-align:middle">Probe endpoints consuming Java serialized objects for fingerprinting.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/galah" style="font-weight:600;text-decoration:none">Galah</a></div></td><td style="vertical-align:middle">LLM-powered web honeypot using the OpenAI API</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/honeypot-and-decoy">Honeypot and Decoy</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/garfield" style="font-weight:600;text-decoration:none">Garfield</a></div></td><td style="vertical-align:middle">Attack framework for distributed systems</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gatekeeper" style="font-weight:600;text-decoration:none">Gatekeeper</a></div></td><td style="vertical-align:middle">Policy controller for Kubernetes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gathercontacts" style="font-weight:600;text-decoration:none">GatherContacts</a></div></td><td style="vertical-align:middle">Burp Suite extension to pull employee names from Google and Bing LinkedIn search results.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gau" style="font-weight:600;text-decoration:none">Gau</a></div></td><td style="vertical-align:middle">Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/genzai" style="font-weight:600;text-decoration:none">Genzai</a></div></td><td style="vertical-align:middle">Helps to identify IoT related dashboards and scan them for default passwords.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/geowordlists" style="font-weight:600;text-decoration:none">GeoWordlists</a></div></td><td style="vertical-align:middle">Generate wordlists of passwords containing cities at a defined distance around the client city.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/geowordlists" style="font-weight:600;text-decoration:none">GeoWordlists</a></div></td><td style="vertical-align:middle">Generate wordlists of passwords containing cities at a defined distance around the client city</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/geolocation-estimation" style="font-weight:600;text-decoration:none">Geolocation Estimation</a></div></td><td style="vertical-align:middle">Automatic GEOINT using deep learning</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ghauri" style="font-weight:600;text-decoration:none">Ghauri</a></div></td><td style="vertical-align:middle">Automates the process of detecting and exploiting SQL injection security flaws.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ghauri" style="font-weight:600;text-decoration:none">Ghauri</a></div></td><td style="vertical-align:middle">Automatic SQL injection and database takeover; inspired by SQLmap</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ghidra" style="font-weight:600;text-decoration:none">Ghidra</a></div></td><td style="vertical-align:middle">Software reverse engineering (SRE) suite of tools: disassembly, assembly, decompilation, graphing, scripting, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ghosttrack" style="font-weight:600;text-decoration:none">GhostTrack</a></div></td><td style="vertical-align:middle">Useful tool to track location or mobile number.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ghostbuster" style="font-weight:600;text-decoration:none">Ghostbuster</a></div></td><td style="vertical-align:middle">Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ghostwriter" style="font-weight:600;text-decoration:none">Ghostwriter</a></div></td><td style="vertical-align:middle">Project management and reporting engine</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/girsh" style="font-weight:600;text-decoration:none">Girsh</a></div></td><td style="vertical-align:middle">Detect the OS and execute the correct commands to upgrade it to a full interactive reverse shell</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitfive" style="font-weight:600;text-decoration:none">GitFive</a></div></td><td style="vertical-align:middle">Investigate GitHub profiles; features: username history, email address to GitHub account, finds potential secondary GitHub accounts, dumps SSH public keys, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitfive" style="font-weight:600;text-decoration:none">GitFive</a></div></td><td style="vertical-align:middle">An OSINT tool to investigate GitHub profiles.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitgot" style="font-weight:600;text-decoration:none">GitGot</a></div></td><td style="vertical-align:middle">Rapidly search through troves of public data on GitHub for sensitive secrets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/githacker" style="font-weight:600;text-decoration:none">GitHacker</a></div></td><td style="vertical-align:middle">A Git source leak exploit tool that restores the entire Git repository, including data from stash.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/githarvester" style="font-weight:600;text-decoration:none">GitHarvester</a></div></td><td style="vertical-align:middle">Tool used for harvesting information from GitHub.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/githound" style="font-weight:600;text-decoration:none">GitHound</a></div></td><td style="vertical-align:middle">Find sensitive information in git repositories</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/githunter" style="font-weight:600;text-decoration:none">GitHunter</a></div></td><td style="vertical-align:middle">A tool for searching a Git repository for interesting content.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitminer" style="font-weight:600;text-decoration:none">GitMiner</a></div></td><td style="vertical-align:middle">Tool for advanced mining for content on Github.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gittools" style="font-weight:600;text-decoration:none">GitTools</a></div></td><td style="vertical-align:middle">A repository with 3 tools for pwn'ing websites with .git repositories available.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gittools" style="font-weight:600;text-decoration:none">GitTools</a></div></td><td style="vertical-align:middle">3 tools: Finder (find websites with .git repository exposed), Dumper (dump exposed .git), Extractor (extract commits and their content from a broken repository)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitrob" style="font-weight:600;text-decoration:none">Gitrob</a></div></td><td style="vertical-align:middle">Reconnaissance tool for GitHub organizations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/go-routersocks" style="font-weight:600;text-decoration:none">Go-RouterSocks</a></div></td><td style="vertical-align:middle">Socks proxy router to handle multi-clients on the same port</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/go365" style="font-weight:600;text-decoration:none">Go365</a></div></td><td style="vertical-align:middle">Go365 performs user enumeration and password guessing attacks on organizations that use Office365.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/go365" style="font-weight:600;text-decoration:none">Go365</a></div></td><td style="vertical-align:middle">User enumeration and password guessing for Office 365 / Microsoft365</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goaltdns" style="font-weight:600;text-decoration:none">GoAltdns</a></div></td><td style="vertical-align:middle">A permutation generation tool written in golang.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gocloud" style="font-weight:600;text-decoration:none">GoCloud</a></div></td><td style="vertical-align:middle">Checks whether a domain is hosted on a cloud service.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gocrack" style="font-weight:600;text-decoration:none">GoCrack</a></div></td><td style="vertical-align:middle">Management frontend for hash cracking tools, supporting hashcat</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/golinkfinder" style="font-weight:600;text-decoration:none">GoLinkFinder</a></div></td><td style="vertical-align:middle">A fast and minimal JS endpoint extractor.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gomapenum" style="font-weight:600;text-decoration:none">
18GoMapEnum</a></div></td><td style="vertical-align:middle">User enumeration and password bruteforce on Azure, ADFS, OWA, O365 and gather emails on Linkedin</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gophish" style="font-weight:600;text-decoration:none">GoPhish</a></div></td><td style="vertical-align:middle">Open-source phishing toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goseek" style="font-weight:600;text-decoration:none">GoSeek</a></div></td><td style="vertical-align:middle">Username lookup comparable to Maigret/Sherlock, IP Lookup, License Plate & VIN Lookup, Info Cull, and Fake Identity Generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gobuster" style="font-weight:600;text-decoration:none">Gobuster</a></div></td><td style="vertical-align:middle">Directory/File, DNS and VHost busting tool written in Go</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reconnaissance">Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gobuster" style="font-weight:600;text-decoration:none">Gobuster</a></div></td><td style="vertical-align:middle">Directory/File, DNS and VHost busting tool written in Go</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reconnaissance">Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gobuster,endpoints" style="font-weight:600;text-decoration:none">Gobuster</a></div></td><td style="vertical-align:middle">Directory/File, DNS and VHost busting tool written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goby" style="font-weight:600;text-decoration:none">Goby</a></div></td><td style="vertical-align:middle">Network security technology that achieves rapid security emergency.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/godpotato" style="font-weight:600;text-decoration:none">GodPotato</a></div></td><td style="vertical-align:middle">Privilege escalation tool for Windows.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/godehashed" style="font-weight:600;text-decoration:none">Godehashed</a></div></td><td style="vertical-align:middle">Uses the dehashed.com API to search for compromised assets</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goldencopy" style="font-weight:600;text-decoration:none">GoldenCopy</a></div></td><td style="vertical-align:middle">Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goofuzz" style="font-weight:600;text-decoration:none">GooFuzz</a></div></td><td style="vertical-align:middle">Passive reconaissance enumerating directories, files, subdomains or parameters using google dorks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goodhound" style="font-weight:600;text-decoration:none">GoodHound</a></div></td><td style="vertical-align:middle">Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/google-gruyere" style="font-weight:600;text-decoration:none">Google Gruyere</a></div></td><td style="vertical-align:middle">Codelab for white-box and black-box hacking</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/google-recaptcha-solver" style="font-weight:600;text-decoration:none">Google Recaptcha Solver</a></div></td><td style="vertical-align:middle">Solve Google reCAPTCHA in less than 5 seconds!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gopherus" style="font-weight:600;text-decoration:none">Gopherus</a></div></td><td style="vertical-align:middle">Generates gopher link for exploiting SSRF and gaining RCE access from unprotected services</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gopherus" style="font-weight:600;text-decoration:none">Gopherus</a></div></td><td style="vertical-align:middle">Generates gopher link for exploiting SSRF and gaining RCE in various servers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gophish" style="font-weight:600;text-decoration:none">Gophish</a></div></td><td style="vertical-align:middle">Phishing toolkit providing the ability to setup and execute phishing engagements and security awareness training</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gorecon" style="font-weight:600;text-decoration:none">Gorecon</a></div></td><td style="vertical-align:middle">Reconnaissance toolkit</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gorsair" style="font-weight:600;text-decoration:none">Gorsair</a></div></td><td style="vertical-align:middle">Gives root access on remote docker containers that expose their APIs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gowhois" style="font-weight:600;text-decoration:none">Gowhois</a></div></td><td style="vertical-align:middle">Whois command implemented by golang with awesome whois servers list.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphcrawler" style="font-weight:600;text-decoration:none">GraphCrawler</a></div></td><td style="vertical-align:middle">GraphQL automated security testing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphman" style="font-weight:600;text-decoration:none">GraphMan</a></div></td><td style="vertical-align:middle">Scaffold a postman collection for a GraphQL API; compatible with Postman and Insomnia</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-armor" style="font-weight:600;text-decoration:none">GraphQL Armor</a></div></td><td style="vertical-align:middle">GraphQL security layer for Apollo and Yoga / Envelop servers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-beautifier" style="font-weight:600;text-decoration:none">GraphQL Beautifier</a></div></td><td style="vertical-align:middle">Burp Suite extension to help make Graphql request more readable.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-cop" style="font-weight:600;text-decoration:none">GraphQL Cop</a></div></td><td style="vertical-align:middle">Run common security tests against GraphQL</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-threat-matrix" style="font-weight:600;text-decoration:none">GraphQL Threat Matrix</a></div></td><td style="vertical-align:middle">Threat framework to research security gaps in GraphQL implementations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-voyager" style="font-weight:600;text-decoration:none">GraphQL Voyager</a></div></td><td style="vertical-align:middle">Represent any GraphQL API as an interactive graph</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphqler" style="font-weight:600;text-decoration:none">GraphQLer</a></div></td><td style="vertical-align:middle">Context-aware GraphQL Fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/fuzzing">Fuzzing</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphqlmap" style="font-weight:600;text-decoration:none">GraphQLmap</a></div></td><td style="vertical-align:middle">Scripting engine to interact with a graphql endpoint for pentesting purposes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphqlmap" style="font-weight:600;text-decoration:none">GraphQLmap</a></div></td><td style="vertical-align:middle">Scripting engine to interact with a graphql endpoint for pentesting purposes</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphicator" style="font-weight:600;text-decoration:none">Graphicator</a></div></td><td style="vertical-align:middle">GraphQL enumeration and extraction</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphicator" style="font-weight:600;text-decoration:none">Graphicator</a></div></td><td style="vertical-align:middle">Enumerate and extract GraphQL APIs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphinder" style="font-weight:600;text-decoration:none">Graphinder</a></div></td><td style="vertical-align:middle">GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphpython" style="font-weight:600;text-decoration:none">Graphpython</a></div></td><td style="vertical-align:middle">Modular cross-platform Microsoft Graph API enumeration and exploitation toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/grayhatwarfare" style="font-weight:600;text-decoration:none">GrayhatWarfare</a></div></td><td style="vertical-align:middle">Search for buckets and URL shorteners.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/grendel-scan" style="font-weight:600;text-decoration:none">Grendel-Scan</a></div></td><td style="vertical-align:middle">A tool for automated security scanning of web applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ground-control" style="font-weight:600;text-decoration:none">Ground control</a></div></td><td style="vertical-align:middle">A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/group3r" style="font-weight:600;text-decoration:none">Group3r</a></div></td><td style="vertical-align:middle">Enumerate relevant settings in AD Group Policy, identify exploitable misconfigurations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gsec" style="font-weight:600;text-decoration:none">Gsec</a></div></td><td style="vertical-align:middle">Web security scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/guppy-proxy" style="font-weight:600;text-decoration:none">Guppy Proxy</a></div></td><td style="vertical-align:middle">GUI HTTP intercepting proxy based on Pappy Proxy</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gyoithon" style="font-weight:600;text-decoration:none">GyoiThon</a></div></td><td style="vertical-align:middle">Growing penetration test tool using Machine Learning.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/h1-report-finder" style="font-weight:600;text-decoration:none">H1 Report Finder</a></div></td><td style="vertical-align:middle">A burpsuite extension to find security reports published on HackerOne based on the selected host.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/haiti" style="font-weight:600;text-decoration:none">HAITI</a></div></td><td style="vertical-align:middle">Hash type identifier.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/harpwn" style="font-weight:600;text-decoration:none">HARpwn</a></div></td><td style="vertical-align:middle">Designed to streamline the extraction and sanitization of HARTokens from HTTP archives.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hassh" style="font-weight:600;text-decoration:none">HASSH</a></div></td><td style="vertical-align:middle">Network fingerprinting standard which can be used to identify specific client and server SSH implementations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hbsqli" style="font-weight:600;text-decoration:none">HBSQLI</a></div></td><td style="vertical-align:middle">Automated tool for testing header based blind SQL injection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hekatomb" style="font-weight:600;text-decoration:none">HEKATOMB</a></div></td><td style="vertical-align:middle">Connects to LDAP directory to retrieve all computers and users informations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hekatomb" style="font-weight:600;text-decoration:none">HEKATOMB</a></div></td><td style="vertical-align:middle">Retrieve all computers and users informations from AD LDAP; download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/htshells" style="font-weight:600;text-decoration:none">HTSHELLS</a></div></td><td style="vertical-align:middle">Self contained web shells and other attacks via .htaccess files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/http-request-smuggler" style="font-weight:600;text-decoration:none">HTTP Request Smuggler</a></div></td><td style="vertical-align:middle">Extension for Burp Suite designed to help you launch HTTP Request Smuggling attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/http-revshell" style="font-weight:600;text-decoration:none">HTTP-revshell</a></div></td><td style="vertical-align:middle">Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/http-traceroute" style="font-weight:600;text-decoration:none">HTTP-traceroute</a></div></td><td style="vertical-align:middle">HTTP-traceroute in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/httprebind" style="font-weight:600;text-decoration:none">HTTPRebind</a></div></td><td style="vertical-align:middle">Automatic DNS rebinding-based SSRF attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/httpoxy-scanner" style="font-weight:600;text-decoration:none">HTTPoxy Scanner</a></div></td><td style="vertical-align:middle">A Burp Suite extension that checks for the HTTPoxy vulnerability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hunt" style="font-weight:600;text-decoration:none">HUNT</a></div></td><td style="vertical-align:middle">HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
18Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hack-the-box" style="font-weight:600;text-decoration:none">Hack The Box</a></div></td><td style="vertical-align:middle">Massive hacking playground, and infosec community.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackbrowserdata" style="font-weight:600;text-decoration:none">HackBrowserData</a></div></td><td style="vertical-align:middle">Decrypt passwords/cookies/history/bookmarks from the browser.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hacktools" style="font-weight:600;text-decoration:none">HackTools</a></div></td><td style="vertical-align:middle">Web browser extension (Chromium, Firefox, Safari) including common functions for web pentest</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hacktools" style="font-weight:600;text-decoration:none">HackTools</a></div></td><td style="vertical-align:middle">The all-in-one browser extension for offensive security professionals.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hacktricks" style="font-weight:600;text-decoration:none">HackTricks</a></div></td><td style="vertical-align:middle">Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackability" style="font-weight:600;text-decoration:none">Hackability</a></div></td><td style="vertical-align:middle">Probe a rendering engine for vulnerabilities and other features.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackazon" style="font-weight:600;text-decoration:none">Hackazon</a></div></td><td style="vertical-align:middle">Intentionally vulnerable web shopping application using modern technologies and containing configurable areas</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hacker101" style="font-weight:600;text-decoration:none">Hacker101</a></div></td><td style="vertical-align:middle">A free class for web security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackersploit" style="font-weight:600;text-decoration:none">HackerSploit</a></div></td><td style="vertical-align:middle">HackerSploit YouTube channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackeroneclient" style="font-weight:600;text-decoration:none">Hackerone::Client</a></div></td><td style="vertical-align:middle">A limited client library for interacting with HackerOne</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackinghub" style="font-weight:600;text-decoration:none">HackingHub</a></div></td><td style="vertical-align:middle">Join the front line of the internet, learn applicable cyber security skills.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackingtool" style="font-weight:600;text-decoration:none">Hackingtool</a></div></td><td style="vertical-align:middle">
18ALL IN ONE Hacking Tool For Hackers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackuity" style="font-weight:600;text-decoration:none">Hackuity</a></div></td><td style="vertical-align:middle">Risk Based Vulnerablity Management platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackvertor" style="font-weight:600;text-decoration:none">Hackvertor</a></div></td><td style="vertical-align:middle">Tag based conversion tool written in Java implemented as a Burp Suite extension.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hades" style="font-weight:600;text-decoration:none">Hades</a></div></td><td style="vertical-align:middle">Shellcode loader that combines multiple evasion techniques with the aim of bypassing the defensive mechanisms commonly used by modern AV/EDRs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hades" style="font-weight:600;text-decoration:none">Hades</a></div></td><td style="vertical-align:middle">Go shellcode loader that combines multiple evasion techniques.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hades-c2" style="font-weight:600;text-decoration:none">Hades C2</a></div></td><td style="vertical-align:middle">Basic Command and Control server</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/haiti" style="font-weight:600;text-decoration:none">Haiti</a></div></td><td style="vertical-align:middle">Hash type identifier (CLI & lib)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hamburglar" style="font-weight:600;text-decoration:none">Hamburglar</a></div></td><td style="vertical-align:middle">Collect useful information from urls, directories, and files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hardhat-c2" style="font-weight:600;text-decoration:none">HardHat C2</a></div></td><td style="vertical-align:middle">A cross-platform, collaborative, Command & Control framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hardhat-c2" style="font-weight:600;text-decoration:none">HardHat C2</a></div></td><td style="vertical-align:middle">Cross-platform, collaborative, Command & Control framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hardeningkitty" style="font-weight:600;text-decoration:none">HardeningKitty</a></div></td><td style="vertical-align:middle">Checks and hardens your Windows configuration.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/harpoon" style="font-weight:600;text-decoration:none">Harpoon</a></div></td><td style="vertical-align:middle">CLI tool; collect data and document actively or passively</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hasmysecretleaked" style="font-weight:600;text-decoration:none">HasMySecretLeaked</a></div></td><td style="vertical-align:middle">Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hash-buster" style="font-weight:600;text-decoration:none">Hash Buster</a></div></td><td style="vertical-align:middle">Crack hashes in seconds.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hash-muncher" style="font-weight:600;text-decoration:none">Hash Muncher</a></div></td><td style="vertical-align:middle">Grab NetNTLMv2 hashes using ETW with administrative rights on Windows.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hashkitty" style="font-weight:600;text-decoration:none">HashKitty</a></div></td><td style="vertical-align:middle">Web interface for Hashcat</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hashcat" style="font-weight:600;text-decoration:none">Hashcat</a></div></td><td style="vertical-align:middle">Hash cracking tool and World'
18s fastest and most advanced password recovery utility</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hashpass" style="font-weight:600;text-decoration:none">Hashpass</a></div></td><td style="vertical-align:middle">Hashcat WebUI; queuing, local authentication, SMS and email notifications, map integration</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hashtopolis" style="font-weight:600;text-decoration:none">Hashtopolis</a></div></td><td style="vertical-align:middle">Hashcat wrapper for distributed hashcracking</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hashview" style="font-weight:600;text-decoration:none">Hashview</a></div></td><td style="vertical-align:middle">Web-UI for managing, organizing, automating Hashcat commands/tasks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/have-i-been-squatted-twistr" style="font-weight:600;text-decoration:none">Have I Been Squatted? - Twistr</a></div></td><td style="vertical-align:middle">Generate all permutations of a domain which are enriched for typosquatting detection</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/have-i-been-pwned" style="font-weight:600;text-decoration:none">Have I been pwned?</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, display the breaches not the password</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/have-i-been-pwned" style="font-weight:600;text-decoration:none">Have i been pwned?</a></div></td><td style="vertical-align:middle">Check if your email or phone is in a data breach.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/havoc" style="font-weight:600;text-decoration:none">Havoc</a></div></td><td style="vertical-align:middle">Malleable post-exploitation command and control framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/havoc" style="font-weight:600;text-decoration:none">Havoc</a></div></td><td style="vertical-align:middle">Modern and malleable post-exploitation command and control framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hawk" style="font-weight:600;text-decoration:none">Hawk</a></div></td><td style="vertical-align:middle">Network, recon and offensive-security tool for Linux.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hawkeye" style="font-weight:600;text-decoration:none">Hawkeye</a></div></td><td style="vertical-align:middle">Filesystem analysis tool/directory looking for interesting stuff.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/haxhq" style="font-weight:600;text-decoration:none">HaxHQ</a></div></td><td style="vertical-align:middle">Do more with less effort 19Whether you do pentesting, vulnerabillity scanning or a custom mix of the two, don't waste your time on repetitive work</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/haylxon" style="font-weight:600;text-decoration:none">Haylxon</a></div></td><td style="vertical-align:middle">Blazing-fast tool to grab screenshots of your domain list right from terminal.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/headless-burp" style="font-weight:600;text-decoration:none">Headless Burp</a></div></td><td style="vertical-align:middle">Provides a suite of extensions and a maven plugin to automate security tests using Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hellraiser" style="font-weight:600;text-decoration:none">HellRaiser</a></div></td><td style="vertical-align:middle">Scan with nmap to correlate CPE's found with cve-search to enumerate vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hetty" style="font-weight:600;text-decoration:none">Hetty</a></div></td><td style="vertical-align:middle">HTTP toolkit for security research; alternative to BurpSuite</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
19Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hexstrike-ai" style="font-weight:600;text-decoration:none">Hexstrike-ai</a></div></td><td style="vertical-align:middle">HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai-mcp-servers">AI MCP Servers</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hiddenwall" style="font-weight:600;text-decoration:none">HiddenWall</a></div></td><td style="vertical-align:middle">Linux kernel module generator for custom rules with netfilter</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hiew" style="font-weight:600;text-decoration:none">Hiew</a></div></td><td style="vertical-align:middle">x86_64 disassembler for multiple formats</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/highlighter-and-extractor" style="font-weight:600;text-decoration:none">Highlighter and Extractor</a></div></td><td style="vertical-align:middle">Collect, categorize and highlight requests and/or responses according to their content.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hijacker" style="font-weight:600;text-decoration:none">Hijacker</a></div></td><td style="vertical-align:middle">Android GUI for Aircrack, Airodump, Aireplay, MDK3 and Reaver</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hijacker" style="font-weight:600;text-decoration:none">Hijacker</a></div></td><td style="vertical-align:middle">GUI for the penetration testing tools Aircrack-ng, Airodump-ng, MDK3 and Reaver.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hivexcavator" style="font-weight:600;text-decoration:none">HivExcavator</a></div></td><td style="vertical-align:middle">Extracting the contents of Microsoft Windows Registry (hive) and display it as a colorful tree but mainly focu
19sed on parsing BCD files to extract WIM files path for PXE attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hive" style="font-weight:600;text-decoration:none">Hive</a></div></td><td style="vertical-align:middle">Collaborative penetration test and reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hollows_hunter" style="font-weight:600;text-decoration:none">Hollows Hunter</a></div></td><td style="vertical-align:middle">Scans processes to detect and dump potentially malicious implants.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/honggfuzz" style="font-weight:600;text-decoration:none">Honggfuzz</a></div></td><td style="vertical-align:middle">Security oriented software fuzzer; supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hookbin" style="font-weight:600;text-decoration:none">Hookbin</a></div></td><td style="vertical-align:middle">HTTP request collector and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hopla" style="font-weight:600;text-decoration:none">HopLa</a></div></td><td style="vertical-align:middle">Adds autocompletion support and useful payloads in Burp Suite</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hopper" style="font-weight:600;text-decoration:none">Hopper</a></div></td><td style="vertical-align:middle">Disassembler, decompiler and debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hostilesubbruteforcer" style="font-weight:600;text-decoration:none">HostileSubBruteforcer</a></div></td><td style="vertical-align:middle">Bruteforce existing subdomains and provide informations about them.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/houndsploit" style="font-weight:600;text-decoration:none">HoundSploit</a></div></td><td style="vertical-align:middle">Graphical search engine for Exploit-DB</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/house" style="font-weight:600;text-decoration:none">House</a></div></td><td style="vertical-align:middle">A runtime mobile application analysis toolkit with a Web GUI.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hunt3r" style="font-weight:600;text-decoration:none">Hunt3r</a></div></td><td style="vertical-align:middle">Automatic domain recognition (via amass) and vulnerability scan (via nuclei) platform with a WebUI</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hydra" style="font-weight:600;text-decoration:none">Hydra</a></div></td><td style="vertical-align:middle">Very fast password cracking tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hydra" style="font-weight:600;text-decoration:none">Hydra</a></div></td><td style="vertical-align:middle">Network login cracker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hyperpwn" style="font-weight:600;text-decoration:none">Hyperpwn</a></div></td><td style="vertical-align:middle">Improve the display when debugging with GDB, needs GEF, pwndbg or peda to be loaded in GDB as a backend</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/iamagic" style="font-weight:600;text-decoration:none">IAMagic</a></div></td><td style="vertical-align:middle">Advanced AWS access credentials scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ida-pro" style="font-weight:600;text-decoration:none">IDA Pro</a></div></td><td style="vertical-align:middle">Disassembler and debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/idontspeakssl" style="font-weight:600;text-decoration:none">IDontSpeakSSL</a></div></td><td style="vertical-align:middle">Simple tool to scan large scope and provide SSL/TLS vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/iis-tilde-enumeration-scanner" style="font-weight:600;text-decoration:none">IIS Tilde Enumeration Scanner</a></div></td><td style="vertical-align:middle">Check for the IIS tilde enumeration / IIS 8.3 short filename disclosure vulnerability and to exploit it by enumerating all the short names in an IIS web server</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ilspy" style="font-weight:600;text-decoration:none">ILSpy</a></div></td><td style="vertical-align:middle">.NET assembly browser and decompiler to C#</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ilspy" style="font-weight:600;text-decoration:none">ILSpy</a></div></td><td style="vertical-align:middle">NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ipfuscator" style="font-weight:600;text-decoration:none">IPFuscator</a></div></td><td style="vertical-align:middle">A tool to automatically generate alternative IP representations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/iprotate" style="font-weight:600;text-decoration:none">IPRotate</a></div></td><td style="vertical-align:middle">Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/iris" style="font-weight:600;text-decoration:none">IRIS</a></div></td><td style="vertical-align:middle">Collaborative platform aiming to help incident responders sharing technical details during investigations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ivre" style="font-weight:600;text-decoration:none">IVRE</a></div></td><td style="vertical-align:middle">Network recon framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ivre" style="font-weight:600;text-decoration:none">IVRE</a></div></td><td style="vertical-align:middle">
19IVRE (Instrument de veille sur les réseaux extérieurs) or DRUNK (Dynamic Recon of UNKnown networks); network recon framework including tools ofr passive and active recon</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ica2tcp" style="font-weight:600;text-decoration:none">Ica2Tcp</a></div></td><td style="vertical-align:middle">SOCKS proxy for Citrix</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/identity-leak-checker" style="font-weight:600;text-decoration:none">Identity Leak Checker</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, send the breaches by email</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ignorant" style="font-weight:600;text-decoration:none">Ignorant</a></div></td><td style="vertical-align:middle">Check if a phone number is used on different sites like snapchat, instagram</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/imhex" style="font-weight:600;text-decoration:none">ImHex</a></div></td><td style="vertical-align:middle">Hexadecimal editor tailored for reverse engineers; byte patching, data import / export, data inspector, huge file support, file hashing, disassembler for many architectures, data analyzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/imhex" style="font-weight:600;text-decoration:none">ImHex</a></div></td><td style="vertical-align:middle">Hex editor for reverse engineers, programmers and people who value their retinas when working at 3am.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/imagemagick" style="font-weight:600;text-decoration:none">ImageMagick</a></div></td><td style="vertical-align:middle">Software suite and library to create, edit, compose, or convert images</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/imagemagick-security-policy-evaluator" style="font-weight:600;text-decoration:none">Imagemagick Security Policy Evaluator</a></div></td><td style="vertical-align:middle">Allows developers and security experts to check if an Imagemagick XML Security Policy is hardened against a wide set of malicious attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/immunitydbg" style="font-weight:600;text-decoration:none">ImmunityDbg</a></div></td><td style="vertical-align:middle">Windows debugger with Python scripting support</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/improhound" style="font-weight:600;text-decoration:none">ImproHound</a></div></td><td style="vertical-align:middle">Identify the attack paths in BloodHound breaking AD tiering</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/inql" style="font-weight:600;text-decoration:none">InQL</a></div></td><td style="vertical-align:middle">GraphQL security audit</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
19Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/inql" style="font-weight:600;text-decoration:none">InQL</a></div></td><td style="vertical-align:middle">Burp Extension for GraphQL Security Testing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/infection-monkey" style="font-weight:600;text-decoration:none">Infection Monkey</a></div></td><td style="vertical-align:middle">Test a data center's resiliency to perimeter breaches and internal server infection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/infection-monkey" style="font-weight:600;text-decoration:none">Infection Monkey</a></div></td><td style="vertical-align:middle">Adversary emulation platform; test a data center's resiliency to perimeter breaches and internal server infection</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/infernal-wireless" style="font-weight:600;text-decoration:none">Infernal-Wireless</a></div></td><td style="vertical-align:middle">Automated wireless hacking tool </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/infoga" style="font-weight:600;text-decoration:none">Infoga</a></div></td><td style="vertical-align:middle">Email OSINT.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/iniscan" style="font-weight:600;text-decoration:none">Iniscan</a></div></td><td style="vertical-align:middle">php.ini scanner for security best practices</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/injectify" style="font-weight:600;text-decoration:none">Injectify</a></div></td><td style="vertical-align:middle">Perform advanced MiTM attacks on websites with ease.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/injectus" style="font-weight:600;text-decoration:none">Injectus</a></div></td><td style="vertical-align:middle">CRLF and open redirect fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/insiderphd" style="font-weight:600;text-decoration:none">InsiderPhD</a></div></td><td style="vertical-align:middle">InsiderPhD Youtube channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/inspeckage" style="font-weight:600;text-decoration:none">Inspeckage</a></div></td><td style="vertical-align:middle">Android package inspector.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/intelmq" style="font-weight:600;text-decoration:none">IntelMQ</a></div></td><td style="vertical-align:middle">Solution for collecting and processing security feeds using a message queuing protocol</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/intelowl" style="font-weight:600;text-decoration:none">IntelOwl</a></div></td><td style="vertical-align:middle">Manage your threat intelligence at scale.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/intelspy" style="font-weight:600;text-decoration:none">IntelSpy</a></div></td><td style="vertical-align:middle">Perform automated network reconnaissance scans to gather network intelligence.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/interactsh" style="font-weight:600;text-decoration:none">Interactsh</a></div></td><td style="vertical-align:middle">HTTP request collector and inspector; OOB interaction gathering server and client library; DNS / HTTP / SMTP interaction support</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
19Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/interlace" style="font-weight:600;text-decoration:none">Interlace</a></div></td><td style="vertical-align:middle">Turn single threaded command line applications into a fast, multi-threaded application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/interlace" style="font-weight:600;text-decoration:none">Interlace</a></div></td><td style="vertical-align:middle">Turn single threaded command line applications into a multi-threaded application with CIDR and glob support</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/intrigue-core" style="font-weight:600;text-decoration:none">Intrigue Core</a></div></td><td style="vertical-align:middle">Framework for discovering attack surface</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/intruderpayloads" style="font-weight:600;text-decoration:none">IntruderPayloads</a></div></td><td style="vertical-align:middle">Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invicti" style="font-weight:600;text-decoration:none">Invicti</a></div></td><td style="vertical-align:middle">Web Application Security For Enterprise.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invoke-aclpwn" style="font-weight:600;text-decoration:none">Invoke-ACLPwn</a></div></td><td style="vertical-align:middle">Automates the discovery and pwnage of ACLs in Active Directory that are unsafe configure.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invoke-adenum" style="font-weight:600;text-decoration:none">Invoke-ADEnum</a></div></td><td style="vertical-align:middle">Automate Active Directory Enumeration using PowerView.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invoke-apex" style="font-weight:600;text-decoration:none">Invoke-Apex</a></div></td><td style="vertical-align:middle">PowerShell-based toolkit consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invoke-bsod" style="font-weight:600;text-decoration:none">Invoke-BSOD</a></div></td><td style="vertical-align:middle">For when you want a computer to be done - without admin!.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invoke-psimage" style="font-weight:600;text-decoration:none">Invoke-PSImage</a></div></td><td style="vertical-align:middle">Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invoke-powerthief" style="font-weight:600;text-decoration:none">Invoke-PowerThIEf</a></div></td><td style="vertical-align:middle">An Internet Explorer post exploitation library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invoke-socksproxy" style="font-weight:600;text-decoration:none">Invoke-SocksProxy</a></div></td><td style="vertical-align:middle">Socks proxy, and reverse socks server using powershell.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invoke-tmpdavfs" style="font-weight:600;text-decoration:none">Invoke-TmpDavFS</a></div></td><td style="vertical-align:middle">Memory Backed Powershell WebDav Server.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/invoke-wcmdump" style="font-weight:600;text-decoration:none">Invoke-WCMDump</a></div></td><td style="vertical-align:middle">PowerShell script to dump Windows credentials from the Credential Manager.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ironwasp" style="font-weight:600;text-decoration:none">IronWASP</a></div></td><td style="vertical-align:middle">Web security/vulnerability scanner (native for Windows only)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
19Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/j2eescan" style="font-weight:600;text-decoration:none">J2EEScan</a></div></td><td style="vertical-align:middle">Improve the test coverage during web application penetration tests on J2EE applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jast" style="font-weight:600;text-decoration:none">JAST</a></div></td><td style="vertical-align:middle">Take screenshots of websites</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jaws" style="font-weight:600;text-decoration:none">JAWS</a></div></td><td style="vertical-align:middle">Just Another Windows (Enum) Script; quickly identify potential privilege escalation vectors on Windows systems</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jd-gui" style="font-weight:600;text-decoration:none">JD-GUI</a></div></td><td style="vertical-align:middle">A standalone Java decompiler GUI.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jd-gui" style="font-weight:600;text-decoration:none">JD-GUI</a></div></td><td style="vertical-align:middle">GUI tool decompiling JAVA</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jeb" style="font-weight:600;text-decoration:none">JEB</a></div></td><td style="vertical-align:middle">Disassembler, decompiler and debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jeb-decompiler" style="font-weight:600;text-decoration:none">JEB Decompiler</a></div></td><td style="vertical-align:middle">Decompile and debug binary code and obfuscated apps, break down and analyze document files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jndi-injection-exploit" style="font-weight:600;text-decoration:none">JNDI-Injection-Exploit</a></div></td><td style="vertical-align:middle">Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/joseph" style="font-weight:600;text-decoration:none">JOSEPH</a></div></td><td style="vertical-align:middle">JavaScript Object Signing and Encryption Pentesting Helper.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jpexs" style="font-weight:600;text-decoration:none">JPEXS</a></div></td><td style="vertical-align:middle">Free Flash decompiler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jpexs-free-flash-decompiler" style="font-weight:600;text-decoration:none">JPEXS Free Flash Decompiler</a></div></td><td style="vertical-align:middle">A.k.a ffdec, flash SWF decompiler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/js-scan" style="font-weight:600;text-decoration:none">JS-Scan</a></div></td><td style="vertical-align:middle">A .js scanner, built in PHP, designed to scrape urls and other info.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/js-tap" style="font-weight:600;text-decoration:none">JS-Tap</a></div></td><td style="vertical-align:middle">JavaScript payload and supporting software to be used as XSS payload or post exploitation implant.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsdetox" style="font-weight:600;text-decoration:none">JSDetox</a></div></td><td style="vertical-align:middle">Javascript deobfustcator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsonbeautifier" style="font-weight:600;text-decoration:none">JSONBeautifier</a></div></td><td style="vertical-align:middle">JSON Beautifier for Burp written in Java.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsonbee" style="font-weight:600;text-decoration:none">
19JSONBee</a></div></td><td style="vertical-align:middle">JSONP endpoints/payloads to help bypass content security policy of different websites</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsonbee" style="font-weight:600;text-decoration:none">JSONBee</a></div></td><td style="vertical-align:middle">A ready to use JSONP endpoints/payloads to help bypass Content Security Policy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsparser" style="font-weight:600;text-decoration:none">JSParser</a></div></td><td style="vertical-align:middle">Python script to parse relative URLs from JavaScript files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsshell" style="font-weight:600;text-decoration:none">JSShell</a></div></td><td style="vertical-align:middle">An interactive multi-user web JS shell.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsgen" style="font-weight:600;text-decoration:none">JSgen</a></div></td><td style="vertical-align:middle">Generate javascript code to be injected in case you find a Server Side Javascript Injection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jspector" style="font-weight:600;text-decoration:none">JSpector</a></div></td><td style="vertical-align:middle">Burp Suite extension to crawl JS files in passive mode and display the results on the issues.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt-key-id-injector" style="font-weight:600;text-decoration:none">JWT Key ID Injector</a></div></td><td style="vertical-align:middle">Simple python script to check against hypothetical JWT vulnerability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt-tool" style="font-weight:600;text-decoration:none">JWT Tool</a></div></td><td style="vertical-align:middle">A toolkit for testing, tweaking and cracking JSON Web Tokens.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/c-jwt-cracker" style="font-weight:600;text-decoration:none">JWT cracker</a></div></td><td style="vertical-align:middle">JWT brute force cracker written in C.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt-cracker" style="font-weight:600;text-decoration:none">JWT cracker</a></div></td><td style="vertical-align:middle">Multi-threaded JWT brute-force cracker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
19Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt-key-recovery" style="font-weight:600;text-decoration:none">JWT-Key-Recovery</a></div></td><td style="vertical-align:middle">Recover the public key used to sign JWT tokens</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt4b" style="font-weight:600;text-decoration:none">JWT4B</a></div></td><td style="vertical-align:middle">JWT Support for Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwtweak" style="font-weight:600;text-decoration:none">JWTweak</a></div></td><td style="vertical-align:middle">Detects JWT algorithm and provides options to generate a new JWT based on another algorithm.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jaeles" style="font-weight:600;text-decoration:none">Jaeles</a></div></td><td style="vertical-align:middle">The Swiss Army knife for automated Web Application Testing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jaeles" style="font-weight:600;text-decoration:none">Jaeles</a></div></td><td style="vertical-align:middle">Framework for building your own Web Application Scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jaqen" style="font-weight:600;text-decoration:none">Jaqen</a></div></td><td style="vertical-align:middle">Abstracts away the complex steps required to perform a DNS rebind and exposes a HTML5 Fetch interface which transparently triggers a DNS rebind</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/java-decompilers" style="font-weight:600;text-decoration:none">Java Decompilers</a></div></td><td style="vertical-align:middle">.JAR and .Class to Java decompiler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/java-deserialization-scanner" style="font-weight:600;text-decoration:none">Java Deserialization Scanner</a></div></td><td style="vertical-align:middle">All-in-one plugin for the detection and exploitation of Java deserialization vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/javascript-obfuscator" style="font-weight:600;text-decoration:none">JavaScript Obfuscator</a></div></td><td style="vertical-align:middle">JavaScript obfuscator; features: variables renaming, strings extraction and encryption, dead code injection, control flow flattening, various code transformations, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jira-lens" style="font-weight:600;text-decoration:none">Jira-Lens</a></div></td><td style="vertical-align:middle">Fast and customizable vulnerability scanner for Jira.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jiraffe" style="font-weight:600;text-decoration:none">Jiraffe</a></div></td><td style="vertical-align:middle">### Jiraffe 20 21Jiraffe is a modern, modular security reconnaissance and vulnerability validation framework for Atlassian Jira deployments. 22 23Designed for security professionals, Jiraffe focuses on accuracy, signal quality, and safe validation rather than noisy scanning. It follows a recon-first, exploit-second model, allowing users to understand a target's exposure before performing controlled vulnerability validation. 24 25Jiraffe currently includes 14+ dedicated reconnaissance modules covering unauthenticated access checks, information disclosures, and common Jira misconfigurations, along with 16 custom CVE exploit implementations, with new modules added continuously. 26 27#### Features 28 29* Modular reconnaissance and exploit framework 30* Passive, unauthenticated recon modules for: 31 * Information disclosure 32 * Misconfigurations 33 * Exposed or weakly protected endpoints 34* Safe CVE validation with severity filtering 35* Jira version and deployment awareness (Cloud vs Server/DC) to avoid misleading or invalid checks 36* SSRF helpers, including cloud metadata and custom targets 37* JSON output for automation, CI/CD, and scripting
38* No automatic shell execution or intrusive behavior by default 39 40#### Use cases 41 42* Bug bounty reconnaissance 43* Internal security assessments 44* Red team tooling 45* Responsible vulnerability validation 46 47Jiraffe is actively maintained, extensible, and built with clean architecture to support long-term evolution as Jira's attack surface changes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/joern" style="font-weight:600;text-decoration:none">Joern</a></div></td><td style="vertical-align:middle">Code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/john-hammond" style="font-weight:600;text-decoration:none">John Hammond</a></div></td><td style="vertical-align:middle">John Hammond YouTube channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/john-the-ripper" style="font-weight:600;text-decoration:none">John The Ripper</a></div></td><td style="vertical-align:middle">Password cracker tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/john-the-ripper" style="font-weight:600;text-decoration:none">John The Ripper</a></div></td><td style="vertical-align:middle">Hash cracking tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/john-the-ripper-jumbo-version" style="font-weight:600;text-decoration:none">John the Ripper, Jumbo version</a></div></td><td style="vertical-align:middle">Hash cracking tool, community-enhanced version of John The Ripper</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/joomscan" style="font-weight:600;text-decoration:none">JoomScan</a></div></td><td style="vertical-align:middle">OWASP Joomla Vulnerability Scanner Project.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/juumla" style="font-weight:600;text-decoration:none">Juumla</a></div></td><td style="vertical-align:middle">Identify Joomla version, scan for vulnerabilities and sensitive files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt-cracker" style="font-weight:600;text-decoration:none">Jwt-cracker</a></div></td><td style="vertical-align:middle">Simple HS256, HS384 & HS512 JWT token brute force cracker.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kics" style="font-weight:600;text-decoration:none">KICS</a></div></td><td style="vertical-align:middle">
47Find vulnerabilities, compliance issues and infrastructure misconfigurations in your IAC.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/knoxss" style="font-weight:600;text-decoration:none">KNOXSS</a></div></td><td style="vertical-align:middle">Online XSS tool with demonstration of vulnerability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/krbjack" style="font-weight:600;text-decoration:none">KRBJack</a></div></td><td style="vertical-align:middle">DNS dynamic update abuse in ADIDNS via DSPROPERTY_ZONE_ALLOW_UPDATE set to ZONE_UPDATE_UNSECURE combined with MitM attack using Kerberos AP-REQ hijacking</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kadimus" style="font-weight:600;text-decoration:none">Kadimus</a></div></td><td style="vertical-align:middle">LFI, RFI, RCE scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kadimus" style="font-weight:600;text-decoration:none">Kadimus</a></div></td><td style="vertical-align:middle">Check for and exploit LFI vulnerabilities with a focus on PHP systems.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kaeferjaeger" style="font-weight:600;text-decoration:none">Kaeferjaeger</a></div></td><td style="vertical-align:middle">Lists of resources: cdn ranges, ips ranges, sni ip ranges...</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kage" style="font-weight:600;text-decoration:none">Kage</a></div></td><td style="vertical-align:middle">Graphical user interface for Metasploit Meterpreter and session handler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kage" style="font-weight:600;text-decoration:none">Kage</a></div></td><td style="vertical-align:middle">Graphical user interface for Metasploit Meterpreter and session handler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kaitai-struct" style="font-weight:600;text-decoration:none">Kaitai Struct</a></div></td><td style="vertical-align:middle">Declarative language to generate binary data parsers in various languages</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kali-linux" style="font-weight:600;text-decoration:none">Kali Linux</a></div></td><td style="vertical-align:middle">The most advanced penetration testing distribution.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/katana" style="font-weight:600;text-decoration:none">Katana</a></div></td><td style="vertical-align:middle">Crawling and spidering framework, supporting headless mode, JavaScript, customizable automatic form filling and scope control</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
47Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/keepwn" style="font-weight:600;text-decoration:none">KeePwn</a></div></td><td style="vertical-align:middle">Automate KeePass discovery and secret extraction</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/keepwn" style="font-weight:600;text-decoration:none">KeePwn</a></div></td><td style="vertical-align:middle">A python script to help red teamers discover KeePass instances and extract secrets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kekeo" style="font-weight:600;text-decoration:none">Kekeo</a></div></td><td style="vertical-align:middle">A little toolbox to play with Microsoft Kerberos in C.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kemon" style="font-weight:600;text-decoration:none">Kemon</a></div></td><td style="vertical-align:middle">macOS kernel pre and post callback-based framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kerbeus-bof" style="font-weight:600;text-decoration:none">Kerbeus-BOF</a></div></td><td style="vertical-align:middle">Beacon Object Files for Kerberos abuse.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kerbrute" style="font-weight:600;text-decoration:none">Kerbrute</a></div></td><td style="vertical-align:middle">Bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/keytabextract" style="font-weight:600;text-decoration:none">KeyTabExtract</a></div></td><td style="vertical-align:middle">Extracts Key Values from .keytab files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/keyfinder" style="font-weight:600;text-decoration:none">Keyfinder</a></div></td><td style="vertical-align:middle">Find and analyze private/public key files and Android APK files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/king-phisher" style="font-weight:600;text-decoration:none">King Phisher</a></div></td><td style="vertical-align:middle">A tool for testing and promoting user awareness by simulating real world phishing attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kismac" style="font-weight:600;text-decoration:none">KisMac</a></div></td><td style="vertical-align:middle">A free, open source wireless stumbling and security tool for Mac OS X.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kismet" style="font-weight:600;text-decoration:none">Kismet</a></div></td><td style="vertical-align:middle">Sniffer, WIDS, and wardriving tool for Wi-Fi, Bluetooth, Zigbee, RF</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kismet" style="font-weight:600;text-decoration:none">Kismet</a></div></td><td style="vertical-align:middle">Remote capture for all capture types over TCP sockets or websockets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/klyda" style="font-weight:600;text-decoration:none">Klyda</a></div></td><td style="vertical-align:middle">Highly configurable script for dictionary/spray attacks against online web applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/knockpy" style="font-weight:600;text-decoration:none">Knockpy</a></div></td><td style="vertical-align:middle">Knock Subdomain Scan.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/knoxnl" style="font-weight:600;text-decoration:none">Knoxnl</a></div></td><td style="vertical-align:middle">This is a python wrapper around the amazing KNOXSS.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kostebek" style="font-weight:600;text-decoration:none">Kostebek</a></div></td><td style="vertical-align:middle">
47Tool to find firms domains by searching their trademark information</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/krakatau" style="font-weight:600;text-decoration:none">Krakatau</a></div></td><td style="vertical-align:middle">Java decompiler, assembler, and disassembler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/krakatau" style="font-weight:600;text-decoration:none">Krakatau</a></div></td><td style="vertical-align:middle">Java decompiler, assembler, and disassembler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kraken" style="font-weight:600;text-decoration:none">Kraken</a></div></td><td style="vertical-align:middle">Hashcat-based distributed password cracking system with WebUI; has a desktop client in addition</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kraken" style="font-weight:600;text-decoration:none">Kraken</a></div></td><td style="vertical-align:middle">Modular multi-language webshell focused on web post-exploitation and defense evasion; supports PHP, JSP and ASPX</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kraken" style="font-weight:600;text-decoration:none">Kraken</a></div></td><td style="vertical-align:middle">A modular multi-language webshell.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kraker" style="font-weight:600;text-decoration:none">Kraker</a></div></td><td style="vertical-align:middle">Distributed password brute-force system, supports Hashcat</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/krbrelayx" style="font-weight:600;text-decoration:none">Krbrelayx</a></div></td><td style="vertical-align:middle">Toolkit for abusing unconstrained delegation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kscan" style="font-weight:600;text-decoration:none">Kscan</a></div></td><td style="vertical-align:middle">Kscan is an all-round scanner developed purely in Go, with functions such as port scanning, protocol.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kube-hunter" style="font-weight:600;text-decoration:none">Kube-hunter</a></div></td><td style="vertical-align:middle">Scanner for security weaknesses in Kubernetes clusters</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kubehound" style="font-weight:600;text-decoration:none">KubeHound</a></div></td><td style="vertical-align:middle">Kubernetes attack graph tool allowing automated calculation of attack paths between assets in a cluster</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kubernetes-goat" style="font-weight:600;text-decoration:none">Kubernetes Goat</a></div></td><td style="vertical-align:middle">Vulnerable by design cluster environment to learn and practice Kubernetes security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kubesploit" style="font-weight:600;text-decoration:none">Kubesploit</a></div></td><td style="vertical-align:middle">Post-exploitation HTTP/2 Command & Control server and agent focused on containerized environments</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kubesploit" style="font-weight:600;text-decoration:none">Kubesploit</a></div></td><td style="vertical-align:middle">Cross-platform command & control server and agent focused on containerized environments.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kubestroyer" style="font-weight:600;text-decoration:none">
47Kubestroyer</a></div></td><td style="vertical-align:middle">Exploit Kubernetes clusters misconfigurations and be the swiss army knife of your pentests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kvasir" style="font-weight:600;text-decoration:none">Kvasir</a></div></td><td style="vertical-align:middle">Pentest data management tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kwetza" style="font-weight:600;text-decoration:none">Kwetza</a></div></td><td style="vertical-align:middle">Infect an existing Android application with a Meterpreter payload.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lazypariah" style="font-weight:600;text-decoration:none">LAZYPARIAH</a></div></td><td style="vertical-align:middle">Generate reverse shell payloads on the fly.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ldap-password-hunter" style="font-weight:600;text-decoration:none">LDAP Password Hunter</a></div></td><td style="vertical-align:middle">Password Hunter in active directory.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ldap-relay-scan" style="font-weight:600;text-decoration:none">LDAP Relay Scan</a></div></td><td style="vertical-align:middle">Check for LDAP protections regarding the relay of NTLM authentication.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ldapnomnom" style="font-weight:600;text-decoration:none">LDAPNomNom</a></div></td><td style="vertical-align:middle">Anonymously bruteforce Active Directory usernames by abusing LDAP Ping requests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ldapmonitor" style="font-weight:600;text-decoration:none">LDAPmonitor</a></div></td><td style="vertical-align:middle">
47Monitor creation, deletion and changes to LDAP objects live during pentest or system administration</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/leakey" style="font-weight:600;text-decoration:none">LEAKEY</a></div></td><td style="vertical-align:middle">Bash script which checks and validates for leaked credentials.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lfi-freak" style="font-weight:600;text-decoration:none">LFI Freak</a></div></td><td style="vertical-align:middle">LFI scan and exploit tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lfi-suite" style="font-weight:600;text-decoration:none">LFI Suite</a></div></td><td style="vertical-align:middle">Totally Automatic LFI Exploiter and Scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lfi-suite" style="font-weight:600;text-decoration:none">LFI Suite</a></div></td><td style="vertical-align:middle">Automatic LFI scanner and exploiter</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lfi-enum" style="font-weight:600;text-decoration:none">LFI-Enum</a></div></td><td style="vertical-align:middle">Scripts to execute enumeration via LFI</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lfidump" style="font-weight:600;text-decoration:none">LFIDump</a></div></td><td style="vertical-align:middle">Dump remote files through a local file read or Local File Inclusion web vulnerability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/licma" style="font-weight:600;text-decoration:none">LICMA</a></div></td><td style="vertical-align:middle">Language Independent Crypto-Misuse Analysis; multi-language analysis tool to identify incorrect initialization of crypto functions</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/load" style="font-weight:600;text-decoration:none">LOAD</a></div></td><td style="vertical-align:middle">Lord Of Active Directory is a test environment lab that includes all the common vulnerabilities of an active directory and deploys automatically on AWS; based on AWS-Redteam-Lab and GOAD</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lolbas" style="font-weight:600;text-decoration:none">LOLBAS</a></div></td><td style="vertical-align:middle">Living Off The Land Binaries, Scripts and Libraries.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/loobins" style="font-weight:600;text-decoration:none">LOOBins</a></div></td><td style="vertical-align:middle">Living Off the Orchard: macOS Binaries.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lp-db" style="font-weight:600;text-decoration:none">LP-DB</a></div></td><td style="vertical-align:middle">Login Pages Database forms a knowledge base on login pages related to malicious activities (C2 panels, phishing kits...)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lazagne" style="font-weight:600;text-decoration:none">LaZagne</a></div></td><td style="vertical-align:middle">Password retriever</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lazagne" style="font-weight:600;text-decoration:none">LaZagne</a></div></td><td style="vertical-align:middle">Credentials recovery project.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lair" style="font-weight:600;text-decoration:none">
47Lair</a></div></td><td style="vertical-align:middle">Collaborative penetration test and vulnerability management framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/languard" style="font-weight:600;text-decoration:none">LanGuard</a></div></td><td style="vertical-align:middle">Patch management, vulnerability scanning, and network auditing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lazyhunter" style="font-weight:600;text-decoration:none">LazyHunter</a></div></td><td style="vertical-align:middle">A framework that provides a web UI to commonly used Bug Hunting/Pentesting tools.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/leak-lookup" style="font-weight:600;text-decoration:none">Leak Lookup</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, requires an account</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/leakdb" style="font-weight:600;text-decoration:none">LeakDB</a></div></td><td style="vertical-align:middle">Normalize, deduplicate, index, sort, and search leaked data sets on the multi-terabyte-scale</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/leakix" style="font-weight:600;text-decoration:none">LeakIX</a></div></td><td style="vertical-align:middle">Search engine for devices and services exposed on the Internet</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/leaklooker" style="font-weight:600;text-decoration:none">LeakLooker</a></div></td><td style="vertical-align:middle">Discover, browse and monitor database/source code leaks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/leaklooker-x" style="font-weight:600;text-decoration:none">LeakLooker-X</a></div></td><td style="vertical-align:middle">Discover, browse and monitor database/source code leaks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/legba" style="font-weight:600;text-decoration:none">Legba</a></div></td><td style="vertical-align:middle">Multiprotocol credentials bruteforcer, password sprayer and enumerator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/legion" style="font-weight:600;text-decoration:none">Legion</a></div></td><td style="vertical-align:middle">Aids in discovery, reconnaissance and exploitation of information systems.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/legitify" style="font-weight:600;text-decoration:none">Legitify</a></div></td><td style="vertical-align:middle">Detect misconfigurations and security risks across GitHub and GitLab assets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/leonidas" style="font-weight:600;text-decoration:none">Leonidas</a></div></td><td style="vertical-align:middle">Automated attack simulation in the cloud, complete with detection use cases.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/libafl" style="font-weight:600;text-decoration:none">LibAFL</a></div></td><td style="vertical-align:middle">Advanced fuzzing librar. Slot your fuzzers together and extend their features using Rust.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/liffy" style="font-weight:600;text-decoration:none">Liffy</a></div></td><td style="vertical-align:middle">Local file inclusion exploitation tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/liffy" style="font-weight:600;text-decoration:none">Liffy</a></div></td><td style="vertical-align:middle">LFI exploitation tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
47Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lightbulb" style="font-weight:600;text-decoration:none">LightBulb</a></div></td><td style="vertical-align:middle">Framework for auditing web application firewalls and filters</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lightsout" style="font-weight:600;text-decoration:none">LightsOut</a></div></td><td style="vertical-align:middle">Generate an obfuscated DLL that will disable AMSI & ETW</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ligolo" style="font-weight:600;text-decoration:none">Ligolo</a></div></td><td style="vertical-align:middle">Pivot / reverse tunneling tool with SOCKS5 and TCP tunnel support</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ligolo-ng" style="font-weight:600;text-decoration:none">Ligolo-ng</a></div></td><td style="vertical-align:middle">Pivoting via TCP/TLS reverse tunneling with TUN interface</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ligolo-ng" style="font-weight:600;text-decoration:none">Ligolo-ng</a></div></td><td style="vertical-align:middle">An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linenum" style="font-weight:600;text-decoration:none">LinEnum</a></div></td><td style="vertical-align:middle">Linux enumeration and privilege escalation script</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linenum" style="font-weight:600;text-decoration:none">LinEnum</a></div></td><td style="vertical-align:middle">System script for local Linux enumeration and privilege escalation checks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linenum" style="font-weight:600;text-decoration:none">LinEnum</a></div></td><td style="vertical-align:middle">Scripted Local Linux Enumeration & Privilege Escalation Checks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linkfinder" style="font-weight:600;text-decoration:none">LinkFinder</a></div></td><td style="vertical-align:middle">Find URL endpoints and their parameters in JavaScript files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
47Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linkfinder" style="font-weight:600;text-decoration:none">LinkFinder</a></div></td><td style="vertical-align:middle">A python script that finds endpoints in JavaScript files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linkedindumper" style="font-weight:600;text-decoration:none">LinkedInDumper</a></div></td><td style="vertical-align:middle">Dump company employees from LinkedIn API</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linkedindumper" style="font-weight:600;text-decoration:none">LinkedInDumper</a></div></td><td style="vertical-align:middle">Script that dumps employee data from the LinkedIn social networking platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linpmem" style="font-weight:600;text-decoration:none">Linpmem</a></div></td><td style="vertical-align:middle">The Linux memory acquisition tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linux-exploit-suggester" style="font-weight:600;text-decoration:none">Linux Exploit Suggester</a></div></td><td style="vertical-align:middle">Based on operating system release number.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linux-exploit-suggester-2" style="font-weight:600;text-decoration:none">Linux Exploit Suggester 2</a></div></td><td style="vertical-align:middle">Linux kernel exploit suggester</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/littlebrother" style="font-weight:600;text-decoration:none">LittleBrother</a></div></td><td style="vertical-align:middle">Information gathering (OSINT) on a person (EU), checks social networks and Pages Jaunes</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/live-forensicator" style="font-weight:600;text-decoration:none">Live Forensicator</a></div></td><td style="vertical-align:middle">Assist forensic investigators and incidence responders in carrying out a quick live forensic investigation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/liveoverflow" style="font-weight:600;text-decoration:none">LiveOverflow</a></div></td><td style="vertical-align:middle">LiveOverflow YouTube channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/livetargetsfinder" style="font-weight:600;text-decoration:none">LiveTargetsFinder</a></div></td><td style="vertical-align:middle">Generates lists of live hosts and URLs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/local-php-security-checker" style="font-weight:600;text-decoration:none">Local PHP Security Checker</a></div></td><td style="vertical-align:middle">CLI tool that checks if your PHP application depends on PHP packages with known security vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/localpotato" style="font-weight:600;text-decoration:none">LocalPotato</a></div></td><td style="vertical-align:middle">Another local Windows privilege escalation using a new potato technique.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/locksmith" style="font-weight:600;text-decoration:none">Locksmith</a></div></td><td style="vertical-align:middle">Detect and fix common misconfigurations in Active Directory Certificate Services.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/locksmith" style="font-weight:600;text-decoration:none">Locksmith</a></div></td><td style="vertical-align:middle">Find and fix common misconfigurations in AD CS</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/logger-plus-plus" style="font-weight:600;text-decoration:none">Logger++</a></div></td><td style="vertical-align:middle">Log activities of all the tools in Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/logontracer" style="font-weight:600;text-decoration:none">LogonTracer</a></div></td><td style="vertical-align:middle">Investigate malicious Windows logon by visualizing and analyzing Windows event log.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/loki" style="font-weight:600;text-decoration:none">Loki</a></div></td><td style="vertical-align:middle">IOC scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lookyloo" style="font-weight:600;text-decoration:none">Lookyloo</a></div></td><td style="vertical-align:middle">
47Allows users to capture a website page and then display a tree of domains that call each other.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lookyloo" style="font-weight:600;text-decoration:none">Lookyloo</a></div></td><td style="vertical-align:middle">A web interface that allows you to capture a website page and display a tree of domains</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lulzbuster" style="font-weight:600;text-decoration:none">Lulzbuster</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/luyten" style="font-weight:600;text-decoration:none">Luyten</a></div></td><td style="vertical-align:middle">An Open Source Java Decompiler GUI for Procyon.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lynis" style="font-weight:600;text-decoration:none">Lynis</a></div></td><td style="vertical-align:middle">Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/movfuscator" style="font-weight:600;text-decoration:none">M/o/Vfuscator</a></div></td><td style="vertical-align:middle">The single instruction C compiler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/man-spider" style="font-weight:600;text-decoration:none">MAN-SPIDER</a></div></td><td style="vertical-align:middle">Crawl SMB shares for juicy information; supports file content searching and regex</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/manspider" style="font-weight:600;text-decoration:none">MANSPIDER</a></div></td><td style="vertical-align:middle">Spider entire networks for juicy files sitting on SMB shares.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mdk3-master" style="font-weight:600;text-decoration:none">MDK3-master</a></div></td><td style="vertical-align:middle">PoC tool to exploit common IEEE 802.11 protocol weaknesses</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mdk4" style="font-weight:600;text-decoration:none">MDK4</a></div></td><td style="vertical-align:middle">PoC tool to exploit common IEEE 802.11 protocol weaknesses</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mfasweep" style="font-weight:600;text-decoration:none">MFASweep</a></div></td><td style="vertical-align:middle">Check if MFA is enabled on multiple Microsoft services</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/misp" style="font-weight:600;text-decoration:none">MISP</a></div></td><td style="vertical-align:middle">Threat intelligence platform & open standards for threat information sharing (formerly known as Malware Information Sharing Platform)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/misp" style="font-weight:600;text-decoration:none">MISP</a></div></td><td style="vertical-align:middle">Malware Information Sharing Platform, an Open Source threat intelligence platform and open standards for threat information sharing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mitre-att-ck" style="font-weight:600;text-decoration:none">MITRE ATT&CK</a></div></td><td style="vertical-align:middle">Knowledge base of adversary tactics and techniques based on real-world observations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mitre-attck-defender" style="font-weight:600;text-decoration:none">MITRE ATT&CK Defender</a></div></td><td style="vertical-align:middle">ATT&CK training and certification program produced by MITREâs own ATT&CK subject matter experts</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/msdat" style="font-weight:600;text-decoration:none">MSDAT</a></div></td><td style="vertical-align:middle">Microsoft SQL database attacking tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/msdnsscan" style="font-weight:600;text-decoration:none">MSDNSScan</a></div></td><td style="vertical-align:middle">Identify DNS records, check for zone transfers and conduct subdomain enumeration.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/msdorkdump" style="font-weight:600;text-decoration:none">MSDorkDump</a></div></td><td style="vertical-align:middle">Google Dork File Finder.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/msolspray" style="font-weight:600;text-decoration:none">MSOLSpray</a></div></td><td style="vertical-align:middle">A password spraying tool for Microsoft Online accounts (Azure/O365).</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mssqlrelay" style="font-weight:600;text-decoration:none">MSSQLRelay</a></div></td><td style="vertical-align:middle">MSSQL relay audit and abuse</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mssqli-duet" style="font-weight:600;text-decoration:none">MSSQLi-DUET</a></div></td><td style="vertical-align:middle">SQL injection script for Microsoft SQL Server.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mvt" style="font-weight:600;text-decoration:none">MVT</a></div></td><td style="vertical-align:middle">Mobile Verification Toolkit; collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/magicrecon" style="font-weight:600;text-decoration:none">MagicRecon</a></div></td><td style="vertical-align:middle">A powerful shell script to maximize the recon and data collection process.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/maigret" style="font-weight:600;text-decoration:none">Maigret</a></div></td><td style="vertical-align:middle">Collect a dossier on a person by username from thousands of sites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/maigret" style="font-weight:600;text-decoration:none">Maigret</a></div></td><td style="vertical-align:middle">Collect a dossier on a person by username from a huge number of sites, and extract details from them</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mailrip-v2" style="font-weight:600;text-decoration:none">Mail.Rip V2</a></div></td><td style="vertical-align:middle">SMTP credentials bruteforcer / checker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/malbuzz" style="font-weight:600;text-decoration:none">MalBuzz</a></div></td><td style="vertical-align:middle">It's a handy tool to help you analyze malware.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/malfrats-osint-map" style="font-weight:600;text-decoration:none">Malfrat's OSINT Map</a></div></td><td style="vertical-align:middle">A web-based collection of tools and resources for OSINT; successor of OSINT Framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></
47div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/maltego" style="font-weight:600;text-decoration:none">Maltego</a></div></td><td style="vertical-align:middle">Interactive data mining tool that renders directed graphs for link analysis. The tool is used in online investigations for finding relationships between pieces of information from various sources located on the Internet (exists in Community Edition)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/maltego" style="font-weight:600;text-decoration:none">Maltego</a></div></td><td style="vertical-align:middle">Open source intelligence and forensics application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/malwarebazaar" style="font-weight:600;text-decoration:none">MalwareBazaar</a></div></td><td style="vertical-align:middle">Malware sample database.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/malwaresourcecode" style="font-weight:600;text-decoration:none">MalwareSourceCode</a></div></td><td style="vertical-align:middle">Collection of malware source code for a variety of platforms in an array of different programming la.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/malzilla" style="font-weight:600;text-decoration:none">Malzilla</a></div></td><td style="vertical-align:middle">Web oriented deobfuscating tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mangle" style="font-weight:600;text-decoration:none">Mangle</a></div></td><td style="vertical-align:middle">Manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/manticore" style="font-weight:600;text-decoration:none">Manticore</a></div></td><td style="vertical-align:middle">Adversary emulation command line tool is parsing complex scenarios from Manticore public-threats repository and run these scenarios</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mapperplus" style="font-weight:600;text-decoration:none">MapperPlus</a></div></td><td style="vertical-align:middle">An advanced source map extractor based on headless browser.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/maryam" style="font-weight:600;text-decoration:none">Maryam</a></div></td><td style="vertical-align:middle">Open-source Intelligence Framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/masky" style="font-weight:600;text-decoration:none">Masky</a></div></td><td style="vertical-align:middle">Library and CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mass3" style="font-weight:600;text-decoration:none">Mass3</a></div></td><td style="vertical-align:middle">Enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/massdns" style="font-weight:600;text-decoration:none">MassDNS</a></div></td><td style="vertical-align:middle">High-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/massdns" style="font-weight:600;text-decoration:none">MassDNS</a></div></td><td style="vertical-align:middle">A high-performance DNS stub resolver for bulk lookups and reconnaissance.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/masscan" style="font-weight:600;text-decoration:none">Masscan</a></div></td><td style="vertical-align:middle">TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/masscan" style="font-weight:600;text-decoration:none">Masscan</a></div></td><td style="vertical-align:middle">Port scanner for massive networks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/master-librarian" style="font-weight:600;text-decoration:none">Master librarian</a></div></td><td style="vertical-align:middle">Audit Unix/*BSD/Linux system libraries to find public security vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/matro7sh-loaders" style="font-weight:600;text-decoration:none">Matro7sh loaders</a></div></td><td style="vertical-align:middle">
47Encode Havoc shellcode (.bin) in XOR, chacha20, AES; supports 2 loaders: Myph, 221b</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/medusa" style="font-weight:600;text-decoration:none">Medusa</a></div></td><td style="vertical-align:middle">Network login cracker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/medusa" style="font-weight:600;text-decoration:none">Medusa</a></div></td><td style="vertical-align:middle">Medusa is a speedy, parallel, and modular, login brute-forcer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/medusa" style="font-weight:600;text-decoration:none">Medusa</a></div></td><td style="vertical-align:middle">Interactive multi-architecture and multi-formats disassembler running on Windows and Linux</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/medusa-gui" style="font-weight:600;text-decoration:none">Medusa-gui</a></div></td><td style="vertical-align:middle">GUI for Medusa</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mentalist" style="font-weight:600;text-decoration:none">Mentalist</a></div></td><td style="vertical-align:middle">Graphical tool for custom wordlist generation, can output rules compatible with Hashcat and John the Ripper</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mercator" style="font-weight:600;text-decoration:none">Mercator</a></div></td><td style="vertical-align:middle">Web application to manage the mapping of an information system as de
47scribed in the Mapping The Information System Guide of the ANSSI</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/merlin" style="font-weight:600;text-decoration:none">Merlin</a></div></td><td style="vertical-align:middle">Post-exploitation HTTP/2 Command & Control server and agent</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metadetective" style="font-weight:600;text-decoration:none">MetaDetective</a></div></td><td style="vertical-align:middle">Unleash metadata intelligence, bridging the chasm in metadata extraction and analysis.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metabigor" style="font-weight:600;text-decoration:none">Metabigor</a></div></td><td style="vertical-align:middle">Searching information about IP address, ASN and organization; doesn't require any API key</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metabigor" style="font-weight:600;text-decoration:none">Metabigor</a></div></td><td style="vertical-align:middle">Intelligence tool to do OSINT tasks and more but without any API key.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metadata-attacker" style="font-weight:600;text-decoration:none">Metadata-Attacker</a></div></td><td style="vertical-align:middle">This tools covers Cross-Site Scripting (XSS) security issues with media-files containing metadata. Such data is usually created by trusted devices like cameras. Therefore, there is the chance that providers handling this metadata, also trust them and that they thus use insufficient or no filter mechanisms. 48 49We have developed an open source penetration testing tool called Metadata-Attacker. It consists of a suite of self-developed tools that allow to create malicious proof-of-concept image (.jpg), audio (.mp3), and video (.mp4) files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metagoofil" style="font-weight:600;text-decoration:none">Metagoofil</a></div></td><td style="vertical-align:middle">Search Google and download specific file types.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metasm" style="font-weight:600;text-decoration:none">Metasm</a></div></td><td style="vertical-align:middle">Assembler, disassembler, compiler and debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metasploit" style="font-weight:600;text-decoration:none">Metasploit</a></div></td><td style="vertical-align:middle">The worldâs most used penetration testing framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metasploit" style="font-weight:600;text-decoration:none">Metasploit</a></div></td><td style="vertical-align:middle">Tool and framework for pentesting system, web and many more, contains a lot a ready to use exploit, 4 versions: Pro (paid), Express (paid), Community (free with GUI but on request), Framework (free, open source, CLI)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metasploitable" style="font-weight:600;text-decoration:none">Metasploitable</a></div></td><td style="vertical-align:middle">VM that is built from the ground up with a large amount of security vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/microburst" style="font-weight:600;text-decoration:none">MicroBurst</a></div></td><td style="vertical-align:middle">A collection of scripts for assessing Microsoft Azure security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/microsploit" style="font-weight:600;text-decoration:none">Microsploit</a></div></td><td style="vertical-align:middle">Quickly and easily create backdoor Office exploitation using module Metasploit packet.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mimicry" style="font-weight:600;text-decoration:none">Mimicry</a></div></td><td style="vertical-align:middle">A dynamic deception tool that actively deceives an attacker.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mobsf" style="font-weight:600;text-decoration:none">MobSF</a></div></td><td style="vertical-align:middle">Android APK vulnerability analyzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mobsf" style="font-weight:600;text-decoration:none">MobSF</a></div></td><td style="vertical-align:middle">All-in-one mobile application pentesting, malware analysis and security assessment framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mockbin" style="font-weight:600;text-decoration:none">Mockbin</a></div></td><td style="vertical-align:middle">HTTP request collector and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
49Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/modlishka" style="font-weight:600;text-decoration:none">Modlishka</a></div></td><td style="vertical-align:middle">HTTP reverse proxy designed for phishing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/modlishka" style="font-weight:600;text-decoration:none">Modlishka</a></div></td><td style="vertical-align:middle">A powerful and flexible HTTP reverse proxy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/modmobjam" style="font-weight:600;text-decoration:none">Modmobjam</a></div></td><td style="vertical-align:middle">Cellular networks jamming PoC for mobile equipments</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/modmobmap" style="font-weight:600;text-decoration:none">Modmobmap</a></div></td><td style="vertical-align:middle">Tool to retrieve information of cellular networks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mona" style="font-weight:600;text-decoration:none">Mona</a></div></td><td style="vertical-align:middle">Set of commands for Immunity Debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/moriarty" style="font-weight:600;text-decoration:none">Moriarty</a></div></td><td style="vertical-align:middle">Designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mosca" style="font-weight:600;text-decoration:none">Mosca</a></div></td><td style="vertical-align:middle">Manual search tool to find bugs like a grep unix command.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mosint" style="font-weight:600;text-decoration:none">Mosint</a></div></td><td style="vertical-align:middle">An automated e-mail OSINT tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mr.sip" style="font-weight:600;text-decoration:none">Mr.SIP</a></div></td><td style="vertical-align:middle">SIP-based audit and attack tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/multidump" style="font-weight:600;text-decoration:none">MultiDump</a></div></td><td style="vertical-align:middle">Post-exploitation tool for dumping and extracting LSASS memory discreetly.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/munin" style="font-weight:600;text-decoration:none">Munin</a></div></td><td style="vertical-align:middle">Online hash checker for Virustotal and other services</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/myjwt" style="font-weight:600;text-decoration:none">
49MyJWT</a></div></td><td style="vertical-align:middle">A toolkit for signing, forging and cracking JWT tokens</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mythic" style="font-weight:600;text-decoration:none">Mythic</a></div></td><td style="vertical-align:middle">A collaborative, multi-platform, red teaming framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mythic" style="font-weight:600;text-decoration:none">Mythic</a></div></td><td style="vertical-align:middle">Collaborative red teaming framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mstica" style="font-weight:600;text-decoration:none">MÃstica</a></div></td><td style="vertical-align:middle">Allows to embed data into application layer protocol fields, with the goal of establishing a bi-directional channel for arbitrary communications; supports encapsulation into HTTP, HTTPS, DNS and ICMP protocols</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nexfil" style="font-weight:600;text-decoration:none">NExfil</a></div></td><td style="vertical-align:middle">Finding profiles by username over 350 websites</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nmapgui" style="font-weight:600;text-decoration:none">NMapGUI</a></div></td><td style="vertical-align:middle">Advanced GUI for Nmap</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nmapify" style="font-weight:600;text-decoration:none">NMapify</a></div></td><td style="vertical-align:middle">Quickly and accurately create a visual representation of their Nmap output.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nsbrute" style="font-weight:600;text-decoration:none">NSBrute</a></div></td><td style="vertical-align:middle">Python utility to takeover domains vulnerable to AWS NS Takeover.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nsdetect" style="font-weight:600;text-decoration:none">
49NSDetect</a></div></td><td style="vertical-align:middle">Utility to detect AWS NS Takeover.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ntlm-to-password" style="font-weight:600;text-decoration:none">NTLM to password</a></div></td><td style="vertical-align:middle">NTLM hash lookup table, billions of passwords indexed</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ntlmrecon" style="font-weight:600;text-decoration:none">NTLMRecon</a></div></td><td style="vertical-align:middle">Enumerate information from NTLM authentication enabled web endpoints.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ntu-crysis" style="font-weight:600;text-decoration:none">NTU Crysis</a></div></td><td style="vertical-align:middle">Crisis management web application / project for software systems analysis and design</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/crisis-management">Crisis Management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/naabu" style="font-weight:600;text-decoration:none">Naabu</a></div></td><td style="vertical-align:middle">A fast port scanner written in go with a focus on reliability and simplicity.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nagios" style="font-weight:600;text-decoration:none">Nagios</a></div></td><td style="vertical-align:middle">The industry standard in IT infrastructure monitoring.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nahamsec" style="font-weight:600;text-decoration:none">NahamSec</a></div></td><td style="vertical-align:middle">NahamSec Twitch channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/namescan-email-compromised-check" style="font-weight:600;text-decoration:none">NameScan Email Compromised Check</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, display the breaches not the password</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/namechk" style="font-weight:600;text-decoration:none">Namechk</a></div></td><td style="vertical-align:middle">
49Check usernames on more than 100 websites, forums and social networks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nanodump" style="font-weight:600;text-decoration:none">NanoDump</a></div></td><td style="vertical-align:middle">A flexible tool that creates a minidump of the LSASS process.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nanodump" style="font-weight:600;text-decoration:none">NanoDump</a></div></td><td style="vertical-align:middle">Minimal LSASS dumper</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/narthex" style="font-weight:600;text-decoration:none">Narthex</a></div></td><td style="vertical-align:middle">Modular personalized dictionary generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ncrack" style="font-weight:600;text-decoration:none">Ncrack</a></div></td><td style="vertical-align:middle">Reliable and adaptative network login cracker supporting a large number of protocols</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/needle" style="font-weight:600;text-decoration:none">Needle</a></div></td><td style="vertical-align:middle">Chrome extension for instant access to bug bounty submission dashboard of various platforms and publicly disclosed reports</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nessus" style="font-weight:600;text-decoration:none">Nessus</a></div></td><td style="vertical-align:middle">The global gold standard in vulnerability assessment built for the modern attack surface.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nessus-database-export" style="font-weight:600;text-decoration:none">Nessus database export</a></div></td><td style="vertical-align:middle">Export Nessus results to a relational database for use in reports, analysis, or whatever else.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netexec" style="font-weight:600;text-decoration:none">NetExec</a></div></td><td style="vertical-align:middle">Windows / Active Directory environments pentest; fork of CrackMapExec</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netexec" style="font-weight:600;text-decoration:none">NetExec</a></div></td><td style="vertical-align:middle">Network service exploitation tool that helps automate assessing the security of large networks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netprobe" style="font-weight:600;text-decoration:none">NetProbe</a></div></td><td style="vertical-align:middle">A tool you can use to scan for devices on your network.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netwitness" style="font-weight:600;text-decoration:none">NetWitness</a></div></td><td style="vertical-align:middle">Rapidly detect and respond to any threat, anywhere. See Everything. Fear Nothing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netflip" style="font-weight:600;text-decoration:none">Netflip</a></div></td><td style="vertical-align:middle">Scrape sensitive information from paste sites</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netfort-free-cloud-based-pcap-analysis" style="font-weight:600;text-decoration:none">Netfort Free Cloud Based PCAP Analysis</a></div></td><td style="vertical-align:middle">PCAP analyzer; needs registration</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netglub" style="font-weight:600;text-decoration:none">Netglub</a></div></td><td style="vertical-align:middle">Maltego alternative</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netlas.io" style="font-weight:600;text-decoration:none">Netlas.io</a></div></td><td style="vertical-align:middle">Netlas.io is the network atlas of Internet. IP, DNS, Web, IoT devices, and etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netsparker" style="font-weight:600;text-decoration:none">Netsparker</a></div></td><td style="vertical-align:middle">Web application security scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
49Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/networkchuck" style="font-weight:600;text-decoration:none">NetworkChuck</a></div></td><td style="vertical-align:middle">Network Chuck YouTube channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/networkminer" style="font-weight:600;text-decoration:none">NetworkMiner</a></div></td><td style="vertical-align:middle">Network sniffer/packet capturing tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/networkminer" style="font-weight:600;text-decoration:none">NetworkMiner</a></div></td><td style="vertical-align:middle">Network forensic analysis tool for Windows.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/networktotal" style="font-weight:600;text-decoration:none">NetworkTotal</a></div></td><td style="vertical-align:middle">PCAP analyzer; using Suricata</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nexpose" style="font-weight:600;text-decoration:none">Nexpose</a></div></td><td style="vertical-align:middle">Vulnerability scanner which aims to support the entire vulnerability management lifecycle.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nginxpwner" style="font-weight:600;text-decoration:none">Nginxpwner</a></div></td><td style="vertical-align:middle">Simple tool to look for common Nginx misconfigurations and vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nightwriter" style="font-weight:600;text-decoration:none">NightWriter</a></div></td><td style="vertical-align:middle">Modern real-time collaborative editing tool secured by end-to-end encryption</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nighthawk" style="font-weight:600;text-decoration:none">Nighthawk</a></div></td><td style="vertical-align:middle">Command & Control framework; multi-operator, API driven, malleable native implant</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nikto" style="font-weight:600;text-decoration:none">Nikto</a></div></td><td style="vertical-align:middle">Nikto web server scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nimplant" style="font-weight:600;text-decoration:none">NimPlant</a></div></td><td style="vertical-align:middle">Light-weight first-stage Command & Control implant</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nimplant" style="font-weight:600;text-decoration:none">NimPlant</a></div></td><td style="vertical-align:middle">A light-weight first-stage C2 implant written in Nim.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nimbo-c2" style="font-weight:600;text-decoration:none">Nimbo-C2</a></div></td><td style="vertical-align:middle">Simple and lightweight Command & Control framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nimbo-c2" style="font-weight:600;text-decoration:none">Nimbo-C2</a></div></td><td style="vertical-align:middle">Yet another (simple and lightweight) C2 framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nimbostratus" style="font-weight:600;text-decoration:none">Nimbostratus</a></div></td><td style="vertical-align:middle">
49Tool for fingerprinting and exploiting Amazon cloud infrastructures.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nipe" style="font-weight:600;text-decoration:none">Nipe</a></div></td><td style="vertical-align:middle">Script to make TOR as default gateway</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nipejs" style="font-weight:600;text-decoration:none">NipeJS</a></div></td><td style="vertical-align:middle">Simplify your life with leak detection in JavaScript, NipeJS streamlines the use of regex, making it.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nipper-studio" style="font-weight:600;text-decoration:none">Nipper Studio</a></div></td><td style="vertical-align:middle">Tool that parse router, switch, firewall configuration to discover vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nipper-ng" style="font-weight:600;text-decoration:none">Nipper-ng</a></div></td><td style="vertical-align:middle">Tool that parse router, switch, firewall configuration to discover vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nishang" style="font-weight:600;text-decoration:none">Nishang</a></div></td><td style="vertical-align:middle">Framework, collection of scripts and payloads in PowerShell for offensive security, penetration testing and red teaming</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nishang" style="font-weight:600;text-decoration:none">Nishang</a></div></td><td style="vertical-align:middle">Offensive PowerShell for red team, penetration testing and offensive security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nmap" style="font-weight:600;text-decoration:none">Nmap</a></div></td><td style="vertical-align:middle">Tool for network discovery and security auditing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nmap" style="font-weight:600;text-decoration:none">Nmap</a></div></td><td style="vertical-align:middle">The network mapper.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nmap-api" style="font-weight:600;text-decoration:none">Nmap-API</a></div></td><td style="vertical-align:middle">Create a Nmap API that can do scans with a good speed online and is easy to deploy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nmmapper" style="font-weight:600;text-decoration:none">Nmmapper</a></div></td><td style="vertical-align:middle">Cybersecurity tools offered as SaaS: nmap, subdomain finder (Sublist3r, DNScan, Anubis, Amass, Lepus, Findomain, Censys), theHarvester, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nosql-injector" style="font-weight:600;text-decoration:none">NoSQL Injector</a></div></td><td style="vertical-align:middle">NoSql Injection CLI tool for finding vulnerable websites using MongoDB.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nosqlmap" style="font-weight:600;text-decoration:none">NoSQLMap</a></div></td><td style="vertical-align:middle">Automated NoSQL database enumeration and web application exploitation tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nosqlmap" style="font-weight:600;text-decoration:none">NoSQLMap</a></div></td><td style="vertical-align:middle">Automated NoSQL database enumeration and web application exploitation tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
49Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nodegoat" style="font-weight:600;text-decoration:none">NodeGoat</a></div></td><td style="vertical-align:middle">Learn how OWASP Top 10 security risks apply to web applications developed using Node.js.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nodejsscan" style="font-weight:600;text-decoration:none">NodeJsScan</a></div></td><td style="vertical-align:middle">Static security code scanner for Node.js applications</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nosey-parker" style="font-weight:600;text-decoration:none">Nosey Parker</a></div></td><td style="vertical-align:middle">Command-line tool that finds secrets and sensitive information in textual data and Git history.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nosql-exploitation-framework" style="font-weight:600;text-decoration:none">Nosql-Exploitation-Framework</a></div></td><td style="vertical-align:middle">NoSQL scanning and exploitation framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nosql-exploitation-framework" style="font-weight:600;text-decoration:none">Nosql-Exploitation-Framework</a></div></td><td style="vertical-align:middle">A Python Framework For NoSQL Scanning and Exploitation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nozaki" style="font-weight:600;text-decoration:none">Nozaki</a></div></td><td style="vertical-align:middle">HTTP fuzzer engine security oriented.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nozzlr" style="font-weight:600;text-decoration:none">Nozzlr</a></div></td><td style="vertical-align:middle">Multithreaded and modular bruteforce framework with network templates</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nthim" style="font-weight:600;text-decoration:none">NtHiM</a></div></td><td style="vertical-align:middle">Now, the Host is Mine!; sub-domain takeover detection</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
49Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nuclei" style="font-weight:600;text-decoration:none">Nuclei</a></div></td><td style="vertical-align:middle">Web application security scanner based on templates</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nuclei" style="font-weight:600;text-decoration:none">Nuclei</a></div></td><td style="vertical-align:middle">Fast and customizable vulnerability scanner based on simple YAML based DSL.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nuclei-templates" style="font-weight:600;text-decoration:none">Nuclei templates</a></div></td><td style="vertical-align:middle">Community curated list of templates for the Nuclei engine to find security vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oasis-emf" style="font-weight:600;text-decoration:none">OASIS EMF</a></div></td><td style="vertical-align:middle">A reference implementation and toolkit for enabling standardized emergency information exchange using the OASIS Emergency Data Exchange Language (EDXL)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/crisis-management">Crisis Management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oauthscan" style="font-weight:600;text-decoration:none">OAUTHScan</a></div></td><td style="vertical-align:middle">Burp Suite Extension useful to verify OAUTHv2 and OpenID security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oda" style="font-weight:600;text-decoration:none">ODA</a></div></td><td style="vertical-align:middle">Advanced multi-architecture online disassembler supporting a lot of architectures and object file formats</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/odin" style="font-weight:600;text-decoration:none">ODIN</a></div></td><td style="vertical-align:middle">Observe, Detect, and Investigate Networks, Automated reconnaissance tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/offat" style="font-weight:600;text-decoration:none">OFFAT</a></div></td><td style="vertical-align:middle">Autonomously assesses your API for prevalent vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oob-server" style="font-weight:600;text-decoration:none">OOB-Server</a></div></td><td style="vertical-align:middle">Bind9 DNS server for pentesters to use for Out-of-Band vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oscp-exam-report-template-in-markdown" style="font-weight:600;text-decoration:none">OSCP Exam Report Template in Markdown</a></div></td><td style="vertical-align:middle">Markdown templates for OSCP exam report</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osint-framework" style="font-weight:600;text-decoration:none">OSINT Framework</a></div></td><td style="vertical-align:middle">A web-based collection of tools and resources for OSINT</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osint-framework" style="font-weight:600;text-decoration:none">OSINT-Framework</a></div></td><td style="vertical-align:middle">OSINT Framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osint-spy" style="font-weight:600;text-decoration:none">OSINT-SPY</a></div></td><td style="vertical-align:middle">Perform OSINT scan on email/domain/ip address/organization.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osintui" style="font-weight:600;text-decoration:none">OSINTui</a></div></td><td style="vertical-align:middle">OSINT from your favorite services in a friendly terminal user interface.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oss-fuzz" style="font-weight:600;text-decoration:none">OSS-Fuzz</a></div></td><td style="vertical-align:middle">Continuous Fuzzing for Open Source Software.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osv" style="font-weight:600;text-decoration:none">OSV</a></div></td><td style="vertical-align:middle">A distributed vulnerability database for Open Source.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
49<a href="/tool/osx-password-dumper" style="font-weight:600;text-decoration:none">OSX Password Dumper</a></div></td><td style="vertical-align:middle">Dump users's .plist on a Mac OS system and to convert them into a crackable hash.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osxauditor" style="font-weight:600;text-decoration:none">OSXAuditor</a></div></td><td style="vertical-align:middle">Free Mac OS X computer forensics tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp" style="font-weight:600;text-decoration:none">OWASP</a></div></td><td style="vertical-align:middle">A nonprofit foundation that works to improve the security of software.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp-joomscan" style="font-weight:600;text-decoration:none">OWASP JoomScan</a></div></td><td style="vertical-align:middle">Joomla vulnerability scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp-juice-shop" style="font-weight:600;text-decoration:none">OWASP Juice Shop</a></div></td><td style="vertical-align:middle">Insecure web application with >85 challenges; supports CTFs, custom themes, tutorial mode etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp-juice-shop" style="font-weight:600;text-decoration:none">OWASP Juice Shop</a></div></td><td style="vertical-align:middle">Probably the most modern and sophisticated insecure web application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp-mutillidae-ii" style="font-weight:600;text-decoration:none">OWASP Mutillidae II</a></div></td><td style="vertical-align:middle">Intentionally vulnerable web-application containing some OWASP Top Ten vulnerabilities, with hints and switch for secure version of the code</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp-pentext" style="font-weight:600;text-decoration:none">OWASP PenText</a></div></td><td style="vertical-align:middle">Collection of XML templates, XML schemas and XSLT code, to generate IT security documents including test reports, offers and invoices</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp-webgoat" style="font-weight:600;text-decoration:none">OWASP WebGoat</a></div></td><td style="vertical-align:middle">Deliberately insecure web application to teach web application security lessons</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp-zap" style="font-weight:600;text-decoration:none">OWASP ZAP</a></div></td><td style="vertical-align:middle">OWASP Zed Attack Proxy, intercepting proxy to replay, inject, scan and fuzz HTTP requests</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
49Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owtf" style="font-weight:600;text-decoration:none">OWTF</a></div></td><td style="vertical-align:middle">A framework which tries to unite great tools and make pentesting more efficient.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oasis" style="font-weight:600;text-decoration:none">Oasis</a></div></td><td style="vertical-align:middle">Framework allowing to write, build and patch instrumentation modules for Bluetooth Low Energy (BLE) controllers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oblivion" style="font-weight:600;text-decoration:none">Oblivion</a></div></td><td style="vertical-align:middle">Data leak checker and monitoring</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/octopus" style="font-weight:600;text-decoration:none">Octopus</a></div></td><td style="vertical-align:middle">Pre-operation C2 server</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oculus" style="font-weight:600;text-decoration:none">Oculus</a></div></td><td style="vertical-align:middle">OSINT tool used to discover environments, directories, and subdomains of a particular domain.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/offensive-security" style="font-weight:600;text-decoration:none">Offensive Security</a></div></td><td style="vertical-align:middle">Offensive Security Youtube channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/offensive-azure" style="font-weight:600;text-decoration:none">Offensive-Azure</a></div></td><td style="vertical-align:middle">Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oh365userfinder" style="font-weight:600;text-decoration:none">Oh365UserFinder</a></div></td><td style="vertical-align:middle">O365 user enumeration and password spraying tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ollydbg" style="font-weight:600;text-decoration:none">OllyDbg</a></div></td><td style="vertical-align:middle">Windows debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ominis-osint" style="font-weight:600;text-decoration:none">Ominis OSINT</a></div></td><td style="vertical-align:middle">Perform information gathering from Google for search results related to a user query.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/omnibus" style="font-weight:600;text-decoration:none">Omnibus</a></div></td><td style="vertical-align:middle">OSINT framework; collection of tools</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oneforall" style="font-weight:600;text-decoration:none">OneForAll</a></div></td><td style="vertical-align:middle">A powerful subdomain integration tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oneforall" style="font-weight:600;text-decoration:none">OneForAll</a></div></td><td style="vertical-align:middle">Subdomain enumeration tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/onefuzz" style="font-weight:600;text-decoration:none">OneFuzz</a></div></td><td style="vertical-align:middle">A self-hosted fuzzing-as-a-service platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/onex" style="font-weight:600;text-decoration:none">Onex</a></div></td><td style="vertical-align:middle">Hacking tools installer and package manager for hackers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/onionsearch" style="font-weight:600;text-decoration:none">OnionSearch</a></div></td><td style="vertical-align:middle">Script that scrapes urls on different .onion search engines</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/openapi" style="font-weight:600;text-decoration:none">OpenAPI</a></div></td><td style="vertical-align:middle">Parse OpenAPI specifications into the BurpSuite for automating RESTful API testing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/openbuckets.io" style="font-weight:600;text-decoration:none">OpenBuckets</a></div></td><td style="vertical-align:middle">Online platform for finding open buckets in cloud storage systems effortlessly.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/opencti" style="font-weight:600;text-decoration:none">OpenCTI</a></div></td><td style="vertical-align:middle">Platform designed for managing and analyzing cyber threat intelligence knowledge, centralizing data using the STIX2 standard and offering visualization and integration capabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/opencti" style="font-weight:600;text-decoration:none">OpenCTI</a></div></td><td style="vertical-align:middle">Open Cyber Threat Intelligence Platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/opencanary" style="font-weight:600;text-decoration:none">OpenCanary</a></div></td><td style="vertical-align:middle">Modular and decentralised honeypot.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/openex" style="font-weight:600;text-decoration:none">OpenEx</a></div></td><td style="vertical-align:middle">Platform allowing organizations to plan, schedule and conduct crisis exercises</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/crisis-management">Crisis Management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/openredirex" style="font-weight:600;text-decoration:none">OpenRedireX</a></div></td><td style="vertical-align:middle">A Fuzzer for OpenRedirect issues.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/openvas" style="font-weight:600;text-decoration:none">OpenVAS</a></div></td><td style="vertical-align:middle">Open Vulnerability Assessment Scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/openvas" style="font-weight:600;text-decoration:none">OpenVAS</a></div></td><td style="vertical-align:middle">This repository contains the scanner component for Greenbone Community Edition.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ophcrack" style="font-weight:600;text-decoration:none">Ophcrack</a></div></td><td style="vertical-align:middle">Windows password cracker based on rainbow tables.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ophcrack" style="font-weight:600;text-decoration:none">Ophcrack</a></div></td><td style="vertical-align:middle">Windows hash cracker based on rainbow tables</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oralyzer" style="font-weight:600;text-decoration:none">Oralyzer</a></div></td><td style="vertical-align:middle">Open Redirection Analyzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/orbitaldump" style="font-weight:60
490;text-decoration:none">OrbitalDump</a></div></td><td style="vertical-align:middle">A simple multi-threaded distributed SSH brute-forcing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osintgram" style="font-weight:600;text-decoration:none">Osintgram</a></div></td><td style="vertical-align:middle">Interactive shell to perform analysis on Instagram account of any users by their nickname</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osintgram" style="font-weight:600;text-decoration:none">Osintgram</a></div></td><td style="vertical-align:middle">An interactive shell to perform analysis on Instagram account of any users by its nickname.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osmedeus" style="font-weight:600;text-decoration:none">Osmedeus</a></div></td><td style="vertical-align:middle">Automated framework for reconnaissance and vulnerability scanning</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osmedeus" style="font-weight:600;text-decoration:none">Osmedeus</a></div></td><td style="vertical-align:middle">A Workflow Engine for Offensive Security</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osquery" style="font-weight:600;text-decoration:none">Osquery</a></div></td><td style="vertical-align:middle">Uses SQL queries to monitor and analyze operating systems, providing endpoint visibility for security</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/outguess" style="font-weight:600;text-decoration:none">Outguess</a></div></td><td style="vertical-align:middle">Tool to hide messages in files (website down since 2004)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/overlord" style="font-weight:600;text-decoration:none">Overlord</a></div></td><td style="vertical-align:middle">
49CLI used to build Red Teaming infrastructure in an automated way, supports AWS and Digital Ocean</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/p4wnp1-aloa" style="font-weight:600;text-decoration:none">P4wnP1 A.L.O.A.</a></div></td><td style="vertical-align:middle">Turn a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming or PE.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pack" style="font-weight:600;text-decoration:none">PACK</a></div></td><td style="vertical-align:middle">A collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other password characteristics</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/panda" style="font-weight:600;text-decoration:none">PANDA</a></div></td><td style="vertical-align:middle">Platform for architecture-neutral dynamic analysis</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pastis" style="font-weight:600;text-decoration:none">PASTIS</a></div></td><td style="vertical-align:middle">Fuzzing framework aiming at combining various software testing techniques within the same workflow to perform collaborative fuzzing also called ensemble fuzzing; supported engines are Honggfuzz, AFL++, TritonDSE</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pcapdroid" style="font-weight:600;text-decoration:none">PCAPdroid</a></div></td><td style="vertical-align:middle">No-root network monitor, firewall and PCAP dumper for Android.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pcredz" style="font-weight:600;text-decoration:none">PCredz</a></div></td><td style="vertical-align:middle">This tool extracts secrets from a pcap file or from a live interface.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pe-explorer-disassembler" style="font-weight:600;text-decoration:none">PE Explorer Disassembler</a></div></td><td style="vertical-align:middle">Windows disassembler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pe-insider" style="font-weight:600;text-decoration:none">PE Insider</a></div></td><td style="vertical-align:middle">PE viewer, closed source and windows only</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/peass" style="font-weight:600;text-decoration:none">PEASS</a></div></td><td style="vertical-align:middle">Privilege Escalation Awesome Scripts SUITE; winPEAS and linPEAS are local privilege escalation scripts for Windows and Linux</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/peass-ng" style="font-weight:600;text-decoration:none">PEASS-ng</a></div></td><td style="vertical-align:middle">Privilege Escalation Awesome Scripts SUITE.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/peda" style="font-weight:600;text-decoration:none">PEDA</a></div></td><td style="vertical-align:middle">Python Exploit Development Assistance, (only python2.7)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pezor" style="font-weight:600;text-decoration:none">PEzor</a></div></td><td style="vertical-align:middle">Shellcode & PE Packer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phpggc" style="font-weight:600;text-decoration:none">PHPGGC</a></div></td><td style="vertical-align:middle">PHP unserialize() payloads along with a tool to generate them.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phpggc" style="font-weight:600;text-decoration:none">PHPGGC</a></div></td><td style="vertical-align:middle">PHP Generic Gadget Chains, library of unserialize() payloads along with a tool to generate them, supporting various PHP frameworks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
49Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pince" style="font-weight:600;text-decoration:none">PINCE</a></div></td><td style="vertical-align:middle">Reverse engineering tool for linux games.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pitt" style="font-weight:600;text-decoration:none">PITT</a></div></td><td style="vertical-align:middle">Web browser loaded with links and extensions for doing OSINT</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pkinit-tools" style="font-weight:600;text-decoration:none">PKINIT tools</a></div></td><td style="vertical-align:middle">Kerberos PKINIT and relaying to AD CS</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pngtools" style="font-weight:600;text-decoration:none">PNGtools</a></div></td><td style="vertical-align:middle">Suite of tools to work with PNG images</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ps2" style="font-weight:600;text-decoration:none">PS2</a></div></td><td style="vertical-align:middle">A port scanner written purely in PowerShell.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/psbypassclm" style="font-weight:600;text-decoration:none">PSByPassCLM</a></div></td><td style="vertical-align:middle">Bypass for PowerShell Constrained Language Mode.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pspkiaudit" style="font-weight:600;text-decoration:none">PSPKIAudit</a></div></td><td style="vertical-align:middle">AD CS auditing based on the PSPKI toolkit</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ptart" style="font-weight:600;text-decoration:none">PTART</a></div></td><td style="vertical-align:middle">PenTests, Audits, and Reporting Tool;
49 Collaborative penetration test, vulnerability database and reporting platform; fork of Sh00t</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwdquery" style="font-weight:600;text-decoration:none">PWDQUERY</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, doesn't display breaches, partially display password</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/packetfu" style="font-weight:600;text-decoration:none">PacketFu</a></div></td><td style="vertical-align:middle">Packet manipulation library; forge, send, decode, capture packets of a wide number of protocols</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/packettotal" style="font-weight:600;text-decoration:none">PacketTotal</a></div></td><td style="vertical-align:middle">PCAP analyzer; using Bro, Suricata and Elasticsearch</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/packetwhisper" style="font-weight:600;text-decoration:none">PacketWhisper</a></div></td><td style="vertical-align:middle">Stealthy Data exfiltration via DNS, without the need for attacker-controlled Name Servers or domain</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pacu" style="font-weight:600;text-decoration:none">Pacu</a></div></td><td style="vertical-align:middle">The exploitation framework designed for testing the security of AWS environments.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pacu" style="font-weight:600;text-decoration:none">Pacu</a></div></td><td style="vertical-align:middle">AWS exploitation framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pandora" style="font-weight:600;text-decoration:none">Pandora</a></div></td><td style="vertical-align:middle">Analysis framework that discovers if a file is suspicious and conveniently show the results</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pandora-box" style="font-weight:600;text-decoration:none">Pandora-box</a></div></td><td style="vertical-align:middle">
49Detect and remove malware from USB disks (based on Pandora)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/panoptic" style="font-weight:600;text-decoration:none">Panoptic</a></div></td><td style="vertical-align:middle">Automatic LFI and Path Traversal exploitation tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pappy-proxy" style="font-weight:600;text-decoration:none">Pappy Proxy</a></div></td><td style="vertical-align:middle">Proxy Attack Proxy ProxY, HTTP intercepting proxy</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/parampampam" style="font-weight:600;text-decoration:none">ParamPamPam</a></div></td><td style="vertical-align:middle">This tool for brute discover GET and POST parameters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/paramspider" style="font-weight:600;text-decoration:none">ParamSpider</a></div></td><td style="vertical-align:middle">Mining parameters from dark corners of Web Archives.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/paramspider" style="font-weight:600;text-decoration:none">ParamSpider</a></div></td><td style="vertical-align:middle">Finds parameters from web archives of the entered domain</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/paros" style="font-weight:600;text-decoration:none">Paros</a></div></td><td style="vertical-align:middle">Intercepting proxy to replay, inject, scan and fuzz HTTP requests</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/paros-proxy" style="font-weight:600;text-decoration:none">Paros Proxy</a></div></td><td style="vertical-align:middle">HTTP(S) proxy for assessing web application vulnerability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/parrotsec" style="font-weight:600;text-decoration:none">ParrotSec</a></div></td><td style="vertical-align:middle">The ultimate framework for your cyber security operations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/parsero" style="font-weight:600;text-decoration:none">Parsero</a></div></td><td style="vertical-align:middle">Robots.txt audit tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pass-station" style="font-weight:600;text-decoration:none">Pass Station</a></div></td><td style="vertical-align:middle">CLI & library to search for default credentials among thousands of Products / Vendors</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/patator" style="font-weight:600;text-decoration:none">Patator</a></div></td><td style="vertical-align:middle">Multi-protocol bruteforce tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/patator" style="font-weight:600;text-decoration:none">Patator</a></div></td><td style="vertical-align:middle">Multi-purpose brute-forcer, with a modular design and a flexible usage.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/patrowl" style="font-weight:600;text-decoration:none">
49PatrOwl</a></div></td><td style="vertical-align:middle">Security operations orchestration and continuous threat management platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/patrowlhears" style="font-weight:600;text-decoration:none">PatrowlHears</a></div></td><td style="vertical-align:middle">Provides a unified source of vulnerability, exploit and threat Intelligence feeds; comprehensive and continuously updated vulnerability database scored and enriched with exploit and threat news information</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/paygen" style="font-weight:600;text-decoration:none">PayGen</a></div></td><td style="vertical-align:middle">Tool to generate stable undetected payload.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/payloads-all-the-things" style="font-weight:600;text-decoration:none">Payloads All The Things</a></div></td><td style="vertical-align:middle">A list of useful payloads and bypass for Web Application Security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pcapxray" style="font-weight:600;text-decoration:none">PcapXray</a></div></td><td style="vertical-align:middle">Visualize a packet capture offline as a network diagram including device identification.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pe-bear" style="font-weight:600;text-decoration:none">Pe-bear</a></div></td><td style="vertical-align:middle">PE reverse tool: recognizes packers, fast disassembler, visualization of sections layout, selective comparing of two chosen PE files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pecoret" style="font-weight:600;text-decoration:none">PeCoReT</a></div></td><td style="vertical-align:middle">Pentest Collaboration and Reporting Tool! PeCoReT is designed to be a fully open-source collaboration platform tailored for pentest projects.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/petereport" style="font-weight:600;text-decoration:none">PeTeReport</a></div></td><td style="vertical-align:middle">Collaborative penetration test, vulnerability database and reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/peepingtom" style="font-weight:600;text-decoration:none">PeepingTom</a></div></td><td style="vertical-align:middle">Take screenshots of websites</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
49Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pentestws" style="font-weight:600;text-decoration:none">PenTest.WS</a></div></td><td style="vertical-align:middle">Collaborative penetration test, vulnerability database and reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pentest collaboration framework" style="font-weight:600;text-decoration:none">Pentest Collaboration Framework</a></div></td><td style="vertical-align:middle">Pentest Collaboration Framework - an opensource, cross-platform and portable toolkit for automating routine processes 50when carrying out various works for testing!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pentest-mapper" style="font-weight:600;text-decoration:none">Pentest Mapper</a></div></td><td style="vertical-align:middle">Burp Suite extension for application pentest to write test cases and map flows and vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pentestbox" style="font-weight:600;text-decoration:none">PentestBox</a></div></td><td style="vertical-align:middle">Pre-configured portable penetration testing environment for Windows, all-in-one box</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pentestpad" style="font-weight:600;text-decoration:none">PentestPad</a></div></td><td style="vertical-align:middle">Collaborative penetration test between team members and end-clients, vulnerability database and reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pentestagent" style="font-weight:600;text-decoration:none">Pentestagent</a></div></td><td style="vertical-align:middle">PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai">Artificial Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pentesterlab" style="font-weight:600;text-decoration:none">PentesterLab</a></div></td><td style="vertical-align:middle">Learn Web Penetration Testing: The Right Way.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pentesterland" style="font-weight:600;text-decoration:none">PentesterLand</a></div></td><td style="vertical-align:middle">Sharing knowledge that makes your life as bug hunters and pentesters easier.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/persistencesniper" style="font-weight:600;text-decoration:none">PersistenceSniper</a></div></td><td style="vertical-align:middle">Hunt persistences implanted in Windows machines.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phishery" style="font-weight:600;text-decoration:none">Phishery</a></div></td><td style="vertical-align:middle">An SSL enabled basic auth credential harvester with a Word document template URL injector.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phishing-catcher" style="font-weight:600;text-decoration:none">
50Phishing Catcher</a></div></td><td style="vertical-align:middle">Phishing catcher using Certstream.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phoneinfoga" style="font-weight:600;text-decoration:none">PhoneInfoga</a></div></td><td style="vertical-align:middle">Information gathering framework for phone numbers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phonesploit-pro" style="font-weight:600;text-decoration:none">PhoneSploit Pro</a></div></td><td style="vertical-align:middle">Remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/mobile">Mobile</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phonesploit-pro" style="font-weight:600;text-decoration:none">PhoneSploit-Pro</a></div></td><td style="vertical-align:middle">Remotely exploit Android devices using ADB and Metasploit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/photon" style="font-weight:600;text-decoration:none">Photon</a></div></td><td style="vertical-align:middle">Incredibly fast crawler designed for OSINT.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/photon" style="font-weight:600;text-decoration:none">Photon</a></div></td><td style="vertical-align:middle">Fast crawler designed for OSINT</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phunter" style="font-weight:600;text-decoration:none">Phunter</a></div></td><td style="vertical-align:middle">OSINT tool allowing you to find various information via a phone number.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pingcastle" style="font-weight:600;text-decoration:none">PingCastle</a></div></td><td style="vertical-align:middle">Assess the Active Directory security level with a methodology based on risk assessment</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pinkerton" style="font-weight:600;text-decoration:none">Pinkerton</a></div></td><td style="vertical-align:middle">Crawl JavaScript file to find secret</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
50Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pipal" style="font-weight:600;text-decoration:none">Pipal</a></div></td><td style="vertical-align:middle">Analyze password dump and return statistics about passwords' strength</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pipeviewer" style="font-weight:600;text-decoration:none">PipeViewer</a></div></td><td style="vertical-align:middle">Shows detailed information about named pipes in Windows and searching for insecure permissions</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pipeviewer" style="font-weight:600;text-decoration:none">PipeViewer</a></div></td><td style="vertical-align:middle">A tool that shows detailed information about named pipes in Windows.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pkcrack" style="font-weight:600;text-decoration:none">PkCrack</a></div></td><td style="vertical-align:middle">Tool for breaking PkZip encryption</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/plasma" style="font-weight:600;text-decoration:none">Plasma</a></div></td><td style="vertical-align:middle">x86/ARM/MIPS interactive disassembler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/plextrac" style="font-weight:600;text-decoration:none">PlexTrac</a></div></td><td style="vertical-align:middle">Collaborative penetration test reporting and vulnerability database platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/plumhound" style="font-weight:600;text-decoration:none">PlumHound</a></div></td><td style="vertical-align:middle">Creates reports for blue and purple teams by extracting data from BloodHound</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/poastal" style="font-weight:600;text-decoration:none">Poastal</a></div></td><td style="vertical-align:middle">The Email OSINT tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pollenisator" style="font-weight:600;text-decoration:none">Pollenisator</a></div></td><td style="vertical-align:middle">Collaborative penetration test and reporting platform (DB + clients, no WebUI)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/polymorph" style="font-weight:600;text-decoration:none">Polymorph</a></div></td><td style="vertical-align:middle">Real-time network packet manipulation framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pop" style="font-weight:600;text-decoration:none">Pop</a></div></td><td style="vertical-align:middle">Send emails from your terminal.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/porch-pirate" style="font-weight:600;text-decoration:none">Porch-Pirate</a></div></td><td style="vertical-align:middle">The most comprehensive Postman recon / OSINT client and framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/portbender" style="font-weight:600;text-decoration:none">PortBender</a></div></td><td style="vertical-align:middle">
50A TCP port redirection utility that allows inbound traffic redirection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/portswigger-cross-site-scripting-cheatsheet-data" style="font-weight:600;text-decoration:none">PortSwigger Cross-Site Scripting cheatsheet data</a></div></td><td style="vertical-align:middle">All the XSS cheatsheet data to allow contributions from the community.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/portswigger-websecurity-academy" style="font-weight:600;text-decoration:none">PortSwigger WebSecurity Academy</a></div></td><td style="vertical-align:middle">Free, online web security training from the creators of Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/portswigger-labs-inspector" style="font-weight:600;text-decoration:none">Portswigger Labs Inspector</a></div></td><td style="vertical-align:middle">Javascript expression evaluator and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/poshc2" style="font-weight:600;text-decoration:none">PoshC2</a></div></td><td style="vertical-align:middle">Proxy aware Command & Control framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/poshc2" style="font-weight:600;text-decoration:none">PoshC2</a></div></td><td style="vertical-align:middle">A proxy aware C2 framework used to aid with post-exploitation and lateral movement.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/postmessage_fuzz_tool" style="font-weight:600;text-decoration:none">PostMessage_Fuzz_Tool</a></div></td><td style="vertical-align:middle">A PostMessage fuzzing extension for Chrome.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powerhuntshares" style="font-weight:600;text-decoration:none">PowerHuntShares</a></div></td><td style="vertical-align:middle">Audit script to inventory, analyze, and report excessive privileges assigned to SMB shares on Active Directory domain joined computers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powermayhem" style="font-weight:600;text-decoration:none">PowerMayhem</a></div></td><td style="vertical-align:middle">Powershell payload generator In Bash !</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powermeup" style="font-weight:600;text-decoration:none">PowerMeUp</a></div></td><td style="vertical-align:middle">A small library of powershell scripts for post exploitation that you may
50need or use!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powermeta" style="font-weight:600;text-decoration:none">PowerMeta</a></div></td><td style="vertical-align:middle">Searches for publicly available files hosted on various websites for a particular domain.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powershdll" style="font-weight:600;text-decoration:none">PowerShdll</a></div></td><td style="vertical-align:middle">Run PowerShell with dlls only to bypass software restrictions; it can be run with rundll32.exe, installutil.exe, regsvcs.exe, regasm.exe, regsvr32.exe or as a standalone executable</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powershdll" style="font-weight:600;text-decoration:none">PowerShdll</a></div></td><td style="vertical-align:middle">Run PowerShell with rundll32 in order to bypass software restrictions.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powersniper" style="font-weight:600;text-decoration:none">PowerSniper</a></div></td><td style="vertical-align:middle">Password spraying script and helper for creating password lists</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powersploit" style="font-weight:600;text-decoration:none">PowerSploit</a></div></td><td style="vertical-align:middle">A PowerShell Post-Exploitation Framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powersploit" style="font-weight:600;text-decoration:none">PowerSploit</a></div></td><td style="vertical-align:middle">Powershell exploitation framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powerupsql" style="font-weight:600;text-decoration:none">PowerUpSQL</a></div></td><td style="vertical-align:middle">Toolkit for attacking MS SQL Server, discovery, configuration auditing, privilege escalation, post exploitation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
50Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powerupsql" style="font-weight:600;text-decoration:none">PowerUpSQL</a></div></td><td style="vertical-align:middle">A PowerShell toolkit for attacking SQL Server.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powerless" style="font-weight:600;text-decoration:none">Powerless</a></div></td><td style="vertical-align:middle">A Windows privilege escalation enumeration BAT script designed for legacy Windows machines without Powershell</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/powermad" style="font-weight:600;text-decoration:none">Powermad</a></div></td><td style="vertical-align:middle">PowerShell MachineAccountQuota and DNS exploit tools.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/prenum" style="font-weight:600;text-decoration:none">Prenum</a></div></td><td style="vertical-align:middle">The perils of the pre-Windows 2000 compatible access group in a Windows domain.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/print-my-shell" style="font-weight:600;text-decoration:none">Print-My-Shell</a></div></td><td style="vertical-align:middle">Automate the process of generating various reverse shells.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/prithvi" style="font-weight:600;text-decoration:none">Prithvi</a></div></td><td style="vertical-align:middle">Report generation tool for pentester with provided OWASP data</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/privacynet" style="font-weight:600;text-decoration:none">PrivacyNet</a></div></td><td style="vertical-align:middle">Allow users to route Internet traffic through Tor and hide their real IP address.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/projectdiscovery" style="font-weight:600;text-decoration:none">ProjectDiscovery</a></div></td><td style="vertical-align:middle">Monitor, collect and continuously query the assets data via a simple webUI</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/protectmytooling" style="font-weight:600;text-decoration:none">ProtectMyTooling</a></div></td><td style="vertical-align:middle">Multi-Packer wrapper allowing daisy-chaining various packers and obfuscators; featured with artifacts watermarking, IOCs collection &
50 PE backdooring</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/prowler" style="font-weight:600;text-decoration:none">Prowler</a></div></td><td style="vertical-align:middle">Open Source Security tool to perform Cloud Security best practices</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/psmapexec" style="font-weight:600;text-decoration:none">PsMapExec</a></div></td><td style="vertical-align:middle">A PowerShell tool heavily inspired by the popular tool CrackMapExec/NetExec.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pspy" style="font-weight:600;text-decoration:none">Pspy</a></div></td><td style="vertical-align:middle">Unprivileged Linux process snooping.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pulsedive" style="font-weight:600;text-decoration:none">Pulsedive</a></div></td><td style="vertical-align:middle">CTI platform to search, scan, and enrich IPs, URLs, domains and other IOCs from OSINT feeds or submit your own</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/puncia" style="font-weight:600;text-decoration:none">Puncia</a></div></td><td style="vertical-align:middle">Official CLI utility for Subdomain Center & Exploit Observer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pupy" style="font-weight:600;text-decoration:none">Pupy</a></div></td><td style="vertical-align:middle">Cross-platform, multi function Command & Control and post-exploitation framework; fileless/all-in-memory execution, low footprint, multi-transport</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/purpleops" style="font-weight:600;text-decoration:none">PurpleOps</a></div></td><td style="vertical-align:middle">An open-source self-hosted purple team management web application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwndoc" style="font-weight:600;text-decoration:none">PwnDoc</a></div></td><td style="vertical-align:middle">Collaborative penetration test reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwndoc" style="font-weight:600;text-decoration:none">PwnDoc</a></div></td><td style="vertical-align:middle">Pentest report generator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwndoc-ng" style="font-weight:600;text-decoration:none">PwnDoc-ng</a></div></td><td style="vertical-align:middle">Collaborative penetration test reporting platform; fork and improvement of PwnDoc</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwnfox" style="font-weight:600;text-decoration:none">PwnFox</a></div></td><td style="vertical-align:middle">A Firefox/Burp Suite extension that provide usefull tools for your security audit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwnfox" style="font-weight:600;text-decoration:none">PwnFox</a></div></td><td style="vertical-align:middle">Allow to have multiple identities in the same browser using firefox containers and hightlight the profile used with different c
50olors</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwnshell" style="font-weight:600;text-decoration:none">PwnShell</a></div></td><td style="vertical-align:middle">Command execution exploiter with an auto connection handling.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwndbg" style="font-weight:600;text-decoration:none">Pwndbg</a></div></td><td style="vertical-align:middle">Enhance GDB, for exploit development and reverse engineering</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pycript" style="font-weight:600;text-decoration:none">PyCript</a></div></td><td style="vertical-align:middle">Bypass client-side encryption using custom logic for testing with Python and NodeJS.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pyexfil" style="font-weight:600;text-decoration:none">PyExfil</a></div></td><td style="vertical-align:middle">Set as many exfiltration, techniques that CAN be used to bypass various.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pyshell" style="font-weight:600;text-decoration:none">PyShell</a></div></td><td style="vertical-align:middle">Multiplatform Python webshell.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pywsus" style="font-weight:600;text-decoration:none">PyWSUS</a></div></td><td style="vertical-align:middle">WSUS server designed to send malicious responses to clients</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pywhisker" style="font-weight:600;text-decoration:none">PyWhisker</a></div></td><td style="vertical-align:middle">Persistent and stealthy backdooring of user and computer Active Directory objects</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pymeta" style="font-weight:600;text-decoration:none">Pymeta</a></div></td><td style="vertical-align:middle">Search the web for files on a domain to download and extract metadata.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pyrit" style="font-weight:600;text-decoration:none">Pyrit</a></div></td><td style="vertical-align:middle">The famous WPA precomputed cracker.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pyscan" style="font-weight:600;text-decoration:none">Pyscan</a></div></td><td style="vertical-align:middle">A dependency vulnerability scanner for your python projects, straight from the terminal.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/python-code-audit" style="font-weight:600;text-decoration:none">Python Code Audit</a></div></td><td style="vertical-align:middle">Python Code Audit - A modern Python source code analyzer based on distrust. 51 52Python Code Audit is a tool to find security weaknesses in Python code. This static application security testing (SAST) tool has great features to simplify the necessary security tasks and make it fun and easy. 53 54This tool is designed for anyone who uses or creates Python programs and wants to understand and mitigate potential security risks. 55 56This tool is created for: 57 58 Python Users who want to assess the security risks in the Python code they use. 59 Python Developers: Anyone, from professionals to hobbyists, who wants to deliver secure Python code. 60 Security-Conscious Users: People seeking a simple, fast way to gain insight into potential security vulnerabilities within Python packages or files. 61 62Creating secure software can be challenging. This tool, with its comprehensive documentation, acts as your helpful security colleague, making it easier to identify and address vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qark" style="font-weight:600;text-decoration:none">QARK</a></div></td><td style="vertical-align:middle">Android APK vulnerability analyzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qbindiff" style="font-weight:600;text-decoration:none">QBinDiff</a></div></td><td style="vertical-align:middle">Experimental binary diffing tool addressing the diffing as a aetwork alignement quadratic problem.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qcsuper" style="font-weight:600;text-decoration:none">QCSuper</a></div></td><td style="vertical-align:middle">Communicate with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qira" style="font-weight:600;text-decoration:none">Qira</a></div></td><td style="vertical-align:middle">Timeless debugger (QIRA = QEMU Interactive Runtime Analyser)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/quadrainspect" style="font-weight:600;text-decoration:none">QuadraInspect</a></div></td><td style="vertical-align:middle">A comprehensive approach to the vulnerability analysis of Android application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qualys-cloud-platform" style="font-weight:600;text-decoration:none">Qualys Cloud Platform</a></div></td><td style="vertical-align:middle">The revolutionary architecture that powers Qualys' IT, security, and compliance cloud apps.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/quasar" style="font-weight:600;text-decoration:none">Quasar</a></div></td><td style="vertical-align:middle">Remote Administration Tool (RAT) for Windows</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/quasar" style="font-weight:600;text-decoration:none">Quasar</a></div></td><td style="vertical-align:middle">Remote administration tool for Windows.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/quickjack" style="font-weight:600;text-decoration:none">Quickjack</a></div></td><td style="vertical-align:middle">Point-and-click tool for producing advanced clickjacking and frame-slicing attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/quiet-riot" style="font-weight:600;text-decoration:none">Quiet Riot</a></div></td><td style="vertical-align:middle">Unauthenticated enumeration of cloud principals</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/r3c0nizer" style="font-weight:600;text-decoration:none">R3C0Nizer</a></div></td><td style="vertical-align:middle">The first ever CLI based menu-driven web application B-Tier recon framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rabcdasm" style="font-weight:600;text-decoration:none">RABCDAsm</a></div></td><td style="vertical-align:middle">ActionScript disassembler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/radar" style="font-weight:600;text-decoration:none">RADAR</a></div></td><td style="vertical-align:middle">Identify technologies and services used by domains through their DNS footprints.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rdp-scraper" style="font-weight:600;text-decoration:none">RDP Scraper</a></div></td><td style="vertical-align:middle">Enumerates users based off RDP Screenshots.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/red-hawk" style="font-weight:600;text-decoration:none">RED HAWK</a></div></td><td style="vertical-align:middle">All in one tool for information gathering, vulnerability scanning and crawling.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-su
62ccess is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/restler" style="font-weight:600;text-decoration:none">RESTler</a></div></td><td style="vertical-align:middle">A stateful fuzzing tool for automatically testing cloud services through their REST APIs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rmiscout" style="font-weight:600;text-decoration:none">RMIScout</a></div></td><td style="vertical-align:middle">Enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities through wordlist and bruteforce strategies</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ropgadget" style="font-weight:600;text-decoration:none">ROPgadget</a></div></td><td style="vertical-align:middle">Framework for ROP exploitation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/binary-exploitation">Binary Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rsatool" style="font-weight:600;text-decoration:none">RSATool</a></div></td><td style="vertical-align:middle">Tool to calculate RSA parameters</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rshack" style="font-weight:600;text-decoration:none">RSHack</a></div></td><td style="vertical-align:middle">RSA attack and key manipulation tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rabid" style="font-weight:600;text-decoration:none">Rabid</a></div></td><td style="vertical-align:middle">CLI tool and library allowing to simply decode all kind of BigIP cookies</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/raccoon" style="font-weight:600;text-decoration:none">Raccoon</a></div></td><td style="vertical-align:middle">A high performance offensive security tool for reconnaissance and vulnerability scanning.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/race-the-web" style="font-weight:600;text-decoration:none">Race The Web</a></div></td><td style="vertical-align:middle">Tests for race conditions in web applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/racepwn" style="font-weight:600;text-decoration:none">RacePWN</a></div></td><td style="vertical-align:middle">Race Condition framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/radareeye" style="font-weight:600;text-decoration:none">RadareEye</a></div></td><td style="vertical-align:middle">Scan nearby devices and execute command when the target device comes in between range.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rainbowcrack" style="font-weight:600;text-decoration:none">RainbowCrack</a></div></td><td style="vertical-align:middle">It crack hashes with rainbow tables.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rapidscan" style="font-weight:600;text-decoration:none">Rapidscan</a></div></td><td style="vertical-align:middle">The multi tool web vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reflutter" style="font-weight:600;text-decoration:none">ReFlutter</a></div></td><td style="vertical-align:middle">Flutter reverse engineering framework: allow traffic monitoring and interception, print classes and functions, display absolute code offset for functions, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reaver" style="font-weight:600;text-decoration:none">Reaver</a></div></td><td style="vertical-align:middle">Implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rebind" style="font-weight:600;text-decoration:none">Rebind</a></div></td><td style="vertical-align:middle">Implement the multiple A record DNS rebinding attack.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rebind" style="font-weight:600;text-decoration:none">Rebind</a></div></td><td style="vertical-align:middle">Implements multiple A record DNS rebinding attack</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/recaf" style="font-weight:600;text-decoration:none">Recaf</a></div></td><td style="vertical-align:middle">Edit Java bytecode, insert single line Java statements into the bytecode, recompile decompiled code</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/recon-ng" style="font-weight:600;text-decoration:none">Recon-ng</a></div></td><td style="vertical-align:middle">Web-based reconnaissance tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/recon-ng" style="font-weight:600;text-decoration:none">Recon-ng</a></div></td><td style="vertical-align:middle">OSINT tool aimed at reducing the time spent harvesting information from open sources.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/recondog" style="font-weight:600;text-decoration:none">ReconDog</a></div></td><td style="vertical-align:middle">Multi-purpose reconnaissance tool, CMS detection, reverse IP lookup, port scan, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reconness" style="font-weight:600;text-decoration:none">ReconNess</a></div></td><td style="vertical-align:middle">
62Continuous recon and pipeline tools setup.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reconscan" style="font-weight:600;text-decoration:none">ReconScan</a></div></td><td style="vertical-align:middle">Network reconnaissance and vulnerability assessment tools</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class="has-background-warning-light table-row-featured"><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reconmap" style="font-weight:600;text-decoration:none">Reconmap</a><span class="tag is-warning ml-2">Featured</span></div></td><td style="vertical-align:middle">Reconmap is an open-source penetration testing and report generation tool for Infosec teams that uses templating, automation and machine learning to streamline the delivery of security projects. </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reconnoitre" style="font-weight:600;text-decoration:none">Reconnoitre</a></div></td><td style="vertical-align:middle">Tool made to automate information gathering and service enumeration while storing results</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/recsech" style="font-weight:600;text-decoration:none">Recsech</a></div></td><td style="vertical-align:middle">Web reconnaissance and vulnerability scanner tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/recursebuster" style="font-weight:600;text-decoration:none">RecurseBuster</a></div></td><td style="vertical-align:middle">Rapid content discovery tool for recursively querying webservers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/red-team-arsenal" style="font-weight:600;text-decoration:none">Red Team Arsenal</a></div></td><td style="vertical-align:middle">Automated reconnaissance scanner and security checks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redelk" style="font-weight:600;text-decoration:none">RedELK</a></div></td><td style="vertical-align:middle">Red Team's SIEM; used by Red Teams for tracking and alarming about Blue Team activities as well as better usability in long term operations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redelk" style="font-weight:600;text-decoration:none">RedELK</a></div></td><td style="vertical-align:middle">Tool for Red Teams used for tracking and alarming about Blue Team activities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redeye" style="font-weight:600;text-decoration:none">RedEye</a></div></td><td style="vertical-align:middle">Red team C2 log visualization</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redeye" style="font-weight:600;text-decoration:none">RedEye</a></div></td><td style="vertical-align:middle">RedEye is a visual analytic tool supporting Red & Blue Team operations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redhunt-os" style="font-weight:600;text-decoration:none">RedHunt-OS</a></div></td><td style="vertical-align:middle">Virtual machine for adversary emulation and threat hunting.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redsnarf" style="font-weight:600;text-decoration:none">RedSnarf</a></div></td><td style="vertical-align:middle">Retrieves hashes and credentials from Windows workstations, servers and domain controllers using OpSec Safe Techniques</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redteam_toolkit" style="font-weight:600;text-decoration:none">RedTeam_toolkit</a></div></td><td style="vertical-align:middle">Open source Django offensive webapp which is keeping the best tools used in the redteaming.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redacted-request" style="font-weight:600;text-decoration:none">Redacted Request</a></div></td><td style="vertical-align:middle">Enhance the security and confidentiality of HTTP request handling within the Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redcloud" style="font-weight:600;text-decoration:none">Redcloud</a></div></td><td style="vertical-align:middle">
62Automated Red Team Infrastructure deployment using Docker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redirect-tracker" style="font-weight:600;text-decoration:none">Redirect Tracker</a></div></td><td style="vertical-align:middle">Track the HTTP redirect chains; 301 and 302, JavaScript and Meta fresh redirects</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/redscan" style="font-weight:600;text-decoration:none">Redscan</a></div></td><td style="vertical-align:middle">Mix of a security operations orchestration, vulnerability management and reconnaissance platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reelphish" style="font-weight:600;text-decoration:none">ReelPhish</a></div></td><td style="vertical-align:middle">Real time phishing tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/regstrike" style="font-weight:600;text-decoration:none">RegStrike</a></div></td><td style="vertical-align:middle">RegStrike is a .reg payload generator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rekono" style="font-weight:600;text-decoration:none">Rekono</a></div></td><td style="vertical-align:middle">Execute full pentesting processes combining multiple hacking tools automatically.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/relyze" style="font-weight:600;text-decoration:none">Relyze</a></div></td><td style="vertical-align:middle">x86 and ARM graphical interactive disassembler with Ruby plugin framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rengine" style="font-weight:600;text-decoration:none">Rengine</a></div></td><td style="vertical-align:middle">Automated reconnaissance framework for webapps, highly configurable streamlined recon process.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/replicator" style="font-weight:600;text-decoration:none">Replicator</a></div></td><td style="vertical-align:middle">Burp Suite extension to help developers replicate findings from pentests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reporter" style="font-weight:600;text-decoration:none">Reporter</a></div></td><td style="vertical-align:middle">Collaborative penetration test reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/request-highlighter" style="font-weight:600;text-decoration:none">Request Highlighter</a></div></td><td style="vertical-align:middle">Burp Suite extension that automatically highlights different HTTP requests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/request-inspector" style="font-weight:600;text-decoration:none">Request Inspector</a></div></td><td style="vertical-align:middle">HTTP request collector and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
62Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/requestbin" style="font-weight:600;text-decoration:none">RequestBin</a></div></td><td style="vertical-align:middle">HTTP request collector and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/requestcatcher" style="font-weight:600;text-decoration:none">RequestCatcher</a></div></td><td style="vertical-align:middle">HTTP request collector and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/requests-racer" style="font-weight:600;text-decoration:none">Requests-Racer</a></div></td><td style="vertical-align:middle">Exploit race conditions in web apps with Requests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/resourcesextract" style="font-weight:600;text-decoration:none">ResourcesExtract</a></div></td><td style="vertical-align:middle">Scans dll/ocx/exe files and extract all resources found, Windows only</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/responder" style="font-weight:600;text-decoration:none">Responder</a></div></td><td style="vertical-align:middle">Responder is a LLMNR, NBT-NS and MDNS poisoner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/responder" style="font-weight:600;text-decoration:none">Responder</a></div></td><td style="vertical-align:middle">LLMNR, NBT-NS and MDNS poisoner to intercept authentication requests/answers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/retdec" style="font-weight:600;text-decoration:none">RetDec</a></div></td><td style="vertical-align:middle">Multi file formats and architectures machine-code decompiler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/retire.js" style="font-weight:600;text-decoration:none">Retire.js</a></div></td><td style="vertical-align:middle">Detects the use of JavaScript libraries with known vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/retirejs" style="font-weight:600;text-decoration:none">Retire.js</a></div></td><td style="vertical-align:middle">Scanner detecting the use of JavaScript libraries with known vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
62Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/revshells" style="font-weight:600;text-decoration:none">RevShells</a></div></td><td style="vertical-align:middle">Hosted Reverse Shell generator with a ton of functionality.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reverse-shell-generator" style="font-weight:600;text-decoration:none">Reverse Shell Generator</a></div></td><td style="vertical-align:middle">Web-based reverse shell generator, includes features such as listener generation, raw mode, bind shell generation, msfvenom generation, payload encoding, many different languages, tools and shells supported</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rsg" style="font-weight:600;text-decoration:none">Reverse Shell Generator</a></div></td><td style="vertical-align:middle">A tool to generate various ways to do a reverse shell.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reversekit" style="font-weight:600;text-decoration:none">ReverseKit</a></div></td><td style="vertical-align:middle">A dynamic reverse engineering toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ridrelay" style="font-weight:600;text-decoration:none">RidRelay</a></div></td><td style="vertical-align:middle">Enumerate usernames on a domain where you have no creds by using SMB relay.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rock-on" style="font-weight:600;text-decoration:none">Rock-ON</a></div></td><td style="vertical-align:middle">All in one recon tool that just get a single domain name and do all of the work alone.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rogue-jndi" style="font-weight:600;text-decoration:none">Rogue JNDI</a></div></td><td style="vertical-align:middle">A malicious LDAP server for JNDI injection attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
62Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ronin" style="font-weight:600;text-decoration:none">Ronin</a></div></td><td style="vertical-align:middle">A free and open source Ruby toolkit for security research and development.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ronin" style="font-weight:600;text-decoration:none">Ronin</a></div></td><td style="vertical-align:middle">Toolkit for security research and development allowing for the rapid development and distribution of code, exploits, payloads, etc, via 3rd party git repositories</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rootkit-hunter" style="font-weight:600;text-decoration:none">Rootkit Hunter</a></div></td><td style="vertical-align:middle">Scans for rootkits, backdoors and possible local exploits.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/routersploit" style="font-weight:600;text-decoration:none">RouterSploit</a></div></td><td style="vertical-align:middle">Exploitation framework for embedded devices.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/routersploit" style="font-weight:600;text-decoration:none">RouterSploit</a></div></td><td style="vertical-align:middle">Exploitation framework for embedded devices: exploits, default credentials, scanners, payloads</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rsactftool" style="font-weight:600;text-decoration:none">RsaCtfTool</a></div></td><td style="vertical-align:middle">Tool to conduct manual or automated attack on RSA</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rsactftool" style="font-weight:600;text-decoration:none">RsaCtfTool</a></div></td><td style="vertical-align:middle">RSA multi-attacks tool: uncypher data from a weak public key and try to recover a private key.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rubeus" style="font-weight:600;text-decoration:none">Rubeus</a></div></td><td style="vertical-align:middle">Kerberos interaction and abuses</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rubeus" style="font-weight:600;text-decoration:none">Rubeus</a></div></td><td style="vertical-align:middle">Rubeus is a toolkit for Kerberos interaction and abuses.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rubyhashcat" style="font-weight:600;text-decoration:none">RubyHashcat</a></div></td><td style="vertical-align:middle">Command line wrapper, library, and REST API for oclHashcat</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ruler" style="font-weight:600;text-decoration:none">Ruler</a></div></td><td style="vertical-align:middle">Interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP to abuse the client-side Outlook features and gain a shell</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/runtime-mobile-security" style="font-weight:600;text-decoration:none">Runtime Mobile Security</a></div></td><td style="vertical-align:middle">A powerful web interface that helps you to manipulate Android and iOS Apps at Runtime.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rusthound" style="font-weight:600;text-decoration:none">RustHound</a></div></td><td style="vertical-align:middle">Active Directory data collector for BloodHound written in Rust.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rusthound" style="font-weight:600;text-decoration:none">RustHound</a></div></td><td style="vertical-align:middle">Active Directory data collector for BloodHound</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rustscan" style="font-weight:600;text-decoration:none">RustScan</a></div></td><td style="vertical-align:middle">The Modern Port Scanner. Fast, smart, effective.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rustcat" style="font-weight:600;text-decoration:none">Rustcat</a></div></td><td style="vertical-align:middle">Port and reverse shell listener; less features than ncat, pwncat, pwncat-caleb but has command history</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rusty-hog" style="font-weight:600;text-decoration:none">Rusty Hog</a></div></td><td style="vertical-align:middle">A suite of secret scanners built in Rust for performance.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3-objects-check" style="font-weight:600;text-decoration:none">S3 Objects Check</a></div></td><td style="vertical-align:middle">Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3bucketlist" style="font-weight:600;text-decoration:none">S3BucketList</a></div></td><td style="vertical-align:middle">Firefox plugin that lists Amazon S3 Buckets found in requests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3cruze" style="font-weight:600;text-decoration:none">S3Cruze</a></div></td><td style="vertical-align:middle">All-in-one AWS S3 bucket tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3scanner" style="font-weight:600;text-decoration:none">S3Scanner</a></div></td><td style="vertical-align:middle">Scan for open S3 buckets and dump the contents.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3viewer" style="font-weight:600;text-decoration:none">S3Viewer</a></div></td><td style="vertical-align:middle">Publicly open storage viewer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sbomb" style="font-weight:600;text-decoration:none">SBOMb</a></div></td><td style="vertical-align:middle">
62SBOM parser that performs cursory vulnerability assessment.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sccmhunter" style="font-weight:600;text-decoration:none">SCCMHunter</a></div></td><td style="vertical-align:middle">Streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scot" style="font-weight:600;text-decoration:none">SCOT</a></div></td><td style="vertical-align:middle">Sandia Cyber Omni Tracker; cyber security incident response management system and knowledge base</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scshell" style="font-weight:600;text-decoration:none">SCShell</a></div></td><td style="vertical-align:middle">Fileless lateral movement that relies on ChangeServiceConfigA to run commands</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sdbf" style="font-weight:600;text-decoration:none">SDBF</a></div></td><td style="vertical-align:middle">Smart DNS Brute Forcer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/secmon" style="font-weight:600;text-decoration:none">SECMON</a></div></td><td style="vertical-align:middle">Web-based platform for the automation of infosec watching and vulnerability management</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shad0w" style="font-weight:600;text-decoration:none">SHAD0W</a></div></td><td style="vertical-align:middle">Modular C2 framework designed to successfully operate covertly on heavily monitored environments</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shit" style="font-weight:600;text-decoration:none">SHIT</a></div></td><td style="vertical-align:middle">Stego Helper Identification Tool, multi-purpose image steganography tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/silenttrinity" style="font-weight:600;text-decoration:none">SILENTTRINITY</a></div></td><td style="vertical-align:middle">Asynchronous, multiplayer and multiserver Command & Control framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smbat" style="font-weight:600;text-decoration:none">SMBAT</a></div></td><td style="vertical-align:middle">Find secrets in file and secret files among the SMB target shares.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smbeagle" style="font-weight:600;text-decoration:none">SMBeagle</a></div></td><td style="vertical-align:middle">Fileshare auditing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smbetray" style="font-weight:600;text-decoration:none">SMBetray</a></div></td><td style="vertical-align:middle">Attack clients through file content swapping and compromise any data passed in cleartext.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smbploit" style="font-weight:600;text-decoration:none">SMBploit</a></div></td><td style="vertical-align:middle">Offensive tool to scan & exploit vulnerabilities in Windows over SMB using Metasploit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/snmp-brute" style="font-weight:600;text-decoration:none">SNMP Brute</a></div></td><td style="vertical-align:middle">SNMP brute force, enumeration, CISCO config downloader and password cracking script</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/soaphound" style="font-weight:600;text-decoration:none">SOAPHound</a></div></td><td style="vertical-align:middle">Enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlmutant" style="font-weight:600;text-decoration:none">SQLMutant</a></div></td><td style="vertical-align:middle">Searches for automated subdomain enumeration and runs SQLi tests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlrecon" style="font-weight:600;text-decoration:none">SQLRecon</a></div></td><td style="vertical-align:middle">A C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqltruncsanner" style="font-weight:600;text-decoration:none">SQLTruncSanner</a></div></td><td style="vertical-align:middle">Messy BurpSuite plugin for SQL Truncation vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqli-hunter" style="font-weight:600;text-decoration:none">SQLi-Hunter</a></div></td><td style="vertical-align:middle">Simple HTTP(S) proxy server and a SQLMAP API wrapper that makes digging SQLi easy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlidetector" style="font-weight:600;text-decoration:none">SQLiDetector</a></div></td><td style="vertical-align:middle">
62Helps you to detect SQL injection "Error based" by sending multiple requests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqliscanner" style="font-weight:600;text-decoration:none">SQLiScanner</a></div></td><td style="vertical-align:middle">Automatic SQL injection with Charles and sqlmap API.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqliv" style="font-weight:600;text-decoration:none">SQLiv</a></div></td><td style="vertical-align:middle">SQL injection scanner, find vulnerable entry points</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqliv" style="font-weight:600;text-decoration:none">SQLiv</a></div></td><td style="vertical-align:middle">Massive SQL injection vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlninja" style="font-weight:600;text-decoration:none">SQLninja</a></div></td><td style="vertical-align:middle">Exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssh-putty-login-bruteforcer" style="font-weight:600;text-decoration:none">
62SSH PuTTY login bruteforcer</a></div></td><td style="vertical-align:middle">A wrapper script which uses PuTTY to perform SSH login bruteforce attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sslyze" style="font-weight:600;text-decoration:none">SSLyze</a></div></td><td style="vertical-align:middle">Fast and powerful SSL/TLS scanning library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sslyze" style="font-weight:600;text-decoration:none">SSLyze</a></div></td><td style="vertical-align:middle">SSL analysis library and a CLI tools</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssrf-detector" style="font-weight:600;text-decoration:none">SSRF Detector</a></div></td><td style="vertical-align:middle">Server-side request forgery detector.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssrf-proxy" style="font-weight:600;text-decoration:none">SSRF Proxy</a></div></td><td style="vertical-align:middle">Facilitates tunneling HTTP communications through servers vulnerable to SSRF</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssrf-sheriff" style="font-weight:600;text-decoration:none">SSRF Sheriff</a></div></td><td style="vertical-align:middle">Genereate custom endpoint to test SSRF; support any HTTP method, content-specific responses, configurable secret token</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssrf-sheriff" style="font-weight:600;text-decoration:none">SSRF Sheriff</a></div></td><td style="vertical-align:middle">A simple SSRF-testing sheriff written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssrfpwned" style="font-weight:600;text-decoration:none">SSRFPwned</a></div></td><td style="vertical-align:middle">Checks for SSRF using custom payloads after fetching URLs from sources & applying complex patterns.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssrftest" style="font-weight:600;text-decoration:none">SSRFTest</a></div></td><td style="vertical-align:middle">SSRF testing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssrfire" style="font-weight:600;text-decoration:none">SSRFire</a></div></td><td style="vertical-align:middle">
62An automated SSRF finder. Just give the domain name and your server and chill!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssrfmap" style="font-weight:600;text-decoration:none">SSRFmap</a></div></td><td style="vertical-align:middle">Automatic SSRF fuzzer and exploitation tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssrfmap" style="font-weight:600;text-decoration:none">SSRFmap</a></div></td><td style="vertical-align:middle">Automatic SSRF fuzzer and exploitation tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sstimap" style="font-weight:600;text-decoration:none">SSTImap</a></div></td><td style="vertical-align:middle">Automatic SSTI detection tool with interactive interface.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stews" style="font-weight:600;text-decoration:none">STEWS</a></div></td><td style="vertical-align:middle">Security Testing and Enumeration of WebSockets; tool suite for security testing WebSockets: discover endpoints, fingerprint server, detect vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sudo_killer" style="font-weight:600;text-decoration:none">SUDO_KILLER</a></div></td><td style="vertical-align:middle">A tool to identify and exploit sudo rules misconfigurations and vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/suid3num" style="font-weight:600;text-decoration:none">SUID3NUM</a></div></td><td style="vertical-align:middle">Standalone script to enumerate SUID binaries, separate default binaries from customs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/super" style="font-weight:600;text-decoration:none">SUPER</a></div></td><td style="vertical-align:middle">Android APK vulnerability analyzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/saas-sentinel" style="font-weight:600;text-decoration:none">SaaS Sentinel</a></div></td><td style="vertical-align:middle">Be notified when your favorite tool may be at risk.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/safeline" style="font-weight:600;text-decoration:none">SafeLine</a></div></td><td style="vertical-align:middle">A self-hosted WAF to protect web applications from cyber attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/samurai-wtf" style="font-weight:600;text-decoration:none">Samurai WTF</a></div></td><td style="vertical-align:middle">The best security training environment for developers and AppSec professionals.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sandcastle" style="font-weight:600;text-decoration:none">Sandcastle</a></div></td><td style="vertical-align:middle">A Python script for AWS S3 bucket enumeration.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/santa" style="font-weight:600;text-decoration:none">Santa</a></div></td><td style="vertical-align:middle">Binary authorization system for macOS</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/saycheese" style="font-weight:600;text-decoration:none">SayCheese</a></div></td><td style="vertical-align:middle">Grab target's webcam shots by link.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sayhello" style="font-weight:600;text-decoration:none">SayHello</a></div></td><td style="vertical-align:middle">Improved version of SayCheese, designed to capture images via social engineering.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scancannon" style="font-weight:600;text-decoration:none">ScanCannon</a></div></td><td style="vertical-align:middle">Combines the speed of masscan with the reliability and detailed enumeration of nmap.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scapy" style="font-weight:600;text-decoration:none">Scapy</a></div></td><td style="vertical-align:middle">Packet manipulation library; forge, send, decode, capture packets of a wide number of protocols</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scapy" style="font-weight:600;text-decoration:none">Scapy</a></div></td><td style="vertical-align:middle">Powerful and interactive packet manipulation program and library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scarecrow" style="font-weight:600;text-decoration:none">ScareCrow</a></div></td><td style="vertical-align:middle">Payload creation framework designed around EDR bypass</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scarecrow" style="font-weight:600;text-decoration:none">ScareCrow</a></div></td><td style="vertical-align:middle">Payload creation framework designed around EDR bypass.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scavenger" style="font-weight:600;text-decoration:none">Scavenger</a></div></td><td style="vertical-align:middle">Create target specific and tailored wordlist from burp history</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scavenger" style="font-weight:600;text-decoration:none">Scavenger</a></div></td><td style="vertical-align:middle">Burp Suite extension to create target specific and tailored wordlist from burp history.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scilla" style="font-weight:600;text-decoration:none">Scilla</a></div></td><td style="vertical-align:middle">Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scopehunter" style="font-weight:600;text-decoration:none">ScopeHunter</a></div></td><td style="vertical-align:middle">Command-line tool for finding in-scope targets for bug bounty programs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scopein" style="font-weight:600;text-decoration:none">Scopein</a></div></td><td style="vertical-align:middle">A Go tool for scope management.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scopify" style="font-weight:600;text-decoration:none">Scopify</a></div></td><td style="vertical-align:middle">Netify.ai reconnaissance tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scout" style="font-weight:600;text-decoration:none">Scout</a></div></td><td style="vertical-align:middle">Discover a web server's undisclosed files, directories and VHOSTs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scout" style="font-weight:600;text-decoration:none">Scout</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
62Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scoutsuite" style="font-weight:600;text-decoration:none">ScoutSuite</a></div></td><td style="vertical-align:middle">Multi-cloud security auditing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scrapein" style="font-weight:600;text-decoration:none">ScrapeIn</a></div></td><td style="vertical-align:middle">Harvest employee email addresses from a specific company through LinkedIn.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scrapedin" style="font-weight:600;text-decoration:none">ScrapedIn</a></div></td><td style="vertical-align:middle">Scrape LinkedIn without API restrictions for data reconnaissance.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/screenshooter" style="font-weight:600;text-decoration:none">ScreenShooter</a></div></td><td style="vertical-align:middle">Convert your masscan/subdomain-scan results into screenshots for better analysis.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/screenshoteer" style="font-weight:600;text-decoration:none">Screenshoteer</a></div></td><td style="vertical-align:middle">Makes web screenshots and mobile emulations from the command line.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scriptsentry" style="font-weight:600;text-decoration:none">ScriptSentry</a></div></td><td style="vertical-align:middle">ScriptSentry finds misconfigured and dangerous logon scripts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scrounger" style="font-weight:600;text-decoration:none">Scrounger</a></div></td><td style="vertical-align:middle">Mobile application testing toolkit, the mobile metasploit-like framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/mobile">Mobile</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scrying" style="font-weight:600;text-decoration:none">Scrying</a></div></td><td style="vertical-align:middle">Collects RDP, web and VNC screenshots all in one place.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scumblr" style="font-weight:600;text-decoration:none">Scumblr</a></div></td><td style="vertical-align:middle">Perform periodic syncs of data sources and performing analysis on the identified results.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/searchdns" style="font-weight:600;text-decoration:none">SearchDNS</a></div></td><td style="vertical-align:middle">Netcraft tool; Search and find information for domains and subdomains</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/searchsploit" style="font-weight:600;text-decoration:none">SearchSploit</a></div></td><td style="vertical-align:middle">Cli tool for Exploit-DB that also allows you to take a copy of Exploit Database with you.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/searchsploit" style="font-weight:600;text-decoration:none">SearchSploit</a></div></td><td style="vertical-align:middle">CLI tool to search among Exploit-DB exploits</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/seatbelt" style="font-weight:600;text-decoration:none">Seatbelt</a></div></td><td style="vertical-align:middle">Performs security oriented safety checks relevant from offensive/defensive security perspectives.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/secgen" style="font-weight:600;text-decoration:none">SecGen</a></div></td><td style="vertical-align:middle">Create randomly insecure VMs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/seclists" style="font-weight:600;text-decoration:none">SecLists</a></div></td><td style="vertical-align:middle">Collection of multiple types of lists used during security assessments, collected in one place.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/seccubus" style="font-weight:600;text-decoration:none">Seccubus</a></div></td><td style="vertical-align:middle">Vulnerability scanning, reporting and analysis</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/second-order" style="font-weight:600;text-decoration:none">Second Order</a></div></td><td style="vertical-align:middle">Second-order subdomain takeover scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/secretfinder" style="font-weight:600;text-decoration:none">SecretFinder</a></div></td><td style="vertical-align:middle">SecretFinder is a script based on LinkFinder, written to find sensitive data in JavaScript files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/secretmagpie" style="font-weight:600;text-decoration:none">SecretMagpie</a></div></td><td style="vertical-align:middle">Secret Detection Tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/secretscanner" style="font-weight:600;text-decoration:none">SecretScanner</a></div></td><td style="vertical-align:middle">Find secrets and passwords in container images and file systems.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/security_monkey" style="font-weight:600;text-decoration:none">Security Monkey</a></div></td><td style="vertical-align:middle">Monitor AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/securityheaderscom" style="font-weight:600;text-decoration:none">SecurityHeaders.com</a></div></td><td style="vertical-align:middle">Security Headers is a part of Snyk, a leading cybersecurity company, and was originally created by Scott Helme! It is a free and easy to use tool designed to help you better deploy and understand modern security features that are available for your website. 63 64Snyk is a comprehensive developer security platform that enables developers to secure their code, open source dependencies, container images, cloud infrastru
64ctures, as well as web apps and APIs, all from a single unified platform. 65 66There are services out there that will analyse the HTTP response headers of other sites, but we also have a grading system for results. The HTTP response headers that we analyse provide huge levels of protection, and it's important that sites deploy them. Hopefully, by providing an easy mechanism to assess them, and further information on how to deploy missing headers, we can drive up the usage of security based headers across the Web.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/securityskills" style="font-weight:600;text-decoration:none">SecuritySkills</a></div></td><td style="vertical-align:middle">Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai-skills">AI Skills</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/securitytrails" style="font-weight:600;text-decoration:none">SecurityTrails</a></div></td><td style="vertical-align:middle">Data for Security companies, researchers and teams.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/see-surf" style="font-weight:600;text-decoration:none">See-SURF</a></div></td><td style="vertical-align:middle">Detect Vulnerable SSRF parameters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/see-surf" style="font-weight:600;text-decoration:none">See-SURF</a></div></td><td style="vertical-align:middle">SSRF scanner to find entry points</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/seela" style="font-weight:600;text-decoration:none">Seela</a></div></td><td style="vertical-align:middle">Boost the cybersecurity skills of your teams with the cyber knowledge library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/semgrep" style="font-weight:600;text-decoration:none">Semgrep</a></div></td><td style="vertical-align:middle">Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/serpico" style="font-weight:600;text-decoration:none">Serpico</a></div></td><td style="vertical-align:middle">
66SimplE RePort wrIting and CollaboratiOn tool, penetration testing report generation and collaboration tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/serpico-ng" style="font-weight:600;text-decoration:none">Serpico-NG</a></div></td><td style="vertical-align:middle">SimplE RePort wrIting and CollaboratiOn tool NEXT-GENERATION, penetration testing report generation and collaboration tool, fork of Serpico</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/session-hijacking-visual-exploitation" style="font-weight:600;text-decoration:none">Session Hijacking Visual Exploitation</a></div></td><td style="vertical-align:middle">Hijack user sessions by injecting malicious JavaScript code</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sessionprobe" style="font-weight:600;text-decoration:none">SessionProbe</a></div></td><td style="vertical-align:middle">Evaluate user privileges in web applications across a list of URLs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/seth" style="font-weight:600;text-decoration:none">Seth</a></div></td><td style="vertical-align:middle">RDP MitM tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sguil" style="font-weight:600;text-decoration:none">Sguil</a></div></td><td style="vertical-align:middle">The analyst console for network security monitoring.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sh00t" style="font-weight:600;text-decoration:none">Sh00t</a></div></td><td style="vertical-align:middle">Pentesting platform with dynamic task manager, checklists, bug template & bug report</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shadow-workers" style="font-weight:600;text-decoration:none">Shadow Workers</a></div></td><td style="vertical-align:middle">C2 and proxy designed to help in the exploitation of XSS and malicious Service Workers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shadowspray" style="font-weight:600;text-decoration:none">ShadowSpray</a></div></td><td style="vertical-align:middle">Spray shadow credentials across an entire domain.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shapeshifter" style="font-weight:600;text-decoration:none">ShapeShifter</a></div></td><td style="vertical-align:middle">GraphQL schema extraction to JSON file with introspection</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
66Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shapeshifter" style="font-weight:600;text-decoration:none">ShapeShifter</a></div></td><td style="vertical-align:middle">GraphQL security testing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sharpersist" style="font-weight:600;text-decoration:none">SharPersist</a></div></td><td style="vertical-align:middle">Windows persistence toolkit written in C#.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sharpc2" style="font-weight:600;text-decoration:none">SharpC2</a></div></td><td style="vertical-align:middle">Command & Control framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sharpc2" style="font-weight:600;text-decoration:none">SharpC2</a></div></td><td style="vertical-align:middle">Command and Control Framework written in C#.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sharpcookiemonster" style="font-weight:600;text-decoration:none">SharpCookieMonster</a></div></td><td style="vertical-align:middle">Extracts cookies from Chrome.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sharpedrchecker" style="font-weight:600;text-decoration:none">SharpEDRChecker</a></div></td><td style="vertical-align:middle">Detect and identify the presence of known defensive products such as AV's, EDR's and logging tools</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sharphose" style="font-weight:600;text-decoration:none">SharpHose</a></div></td><td style="vertical-align:middle">Asynchronous password spraying tool for Windows environments.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sharpimpersonation" style="font-weight:600;text-decoration:none">SharpImpersonation</a></div></td><td style="vertical-align:middle">A User Impersonation tool - via Token or Shellcode injection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sharpsccm" style="font-weight:600;text-decoration:none">SharpSCCM</a></div></td><td style="vertical-align:middle">A post-exploitation tool designed to leverage Microsoft Endpoint Configuration Manager.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sharpshooter" style="font-weight:600;text-decoration:none">SharpShooter</a></div></td><td style="vertical-align:middle">Payload Generation Framework for C# source code</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shazzer" style="font-weight:600;text-decoration:none">Shazzer</a></div></td><td style="vertical-align:middle">Automatically create cheat sheets from all relevant vectors on the system.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shellpop" style="font-weight:600;text-decoration:none">ShellPop</a></div></td><td style="vertical-align:middle">Tool to craft bind and reverse shells in several languages</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shellpop" style="font-weight:600;text-decoration:none">ShellPop</a></div></td><td style="vertical-align:middle">Pop shells like a master.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shellcrypt" style="font-weight:600;text-decoration:none">Shellcrypt</a></div></td><td style="vertical-align:middle">A QoL tool to obfuscate shellcode.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shellcrypt" style="font-weight:600;text-decoration:none">Shellcrypt</a></div></td><td style="vertical-align:middle">Obfuscate shellcode using encoding, encryption, compression</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shelling" style="font-weight:600;text-decoration:none">Shelling</a></div></td><td style="vertical-align:middle">A comprehensive OS command injection payload generator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shells" style="font-weight:600;text-decoration:none">Shells</a></div></td><td style="vertical-align:middle">A script for generating common revshells fast and easily.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shelltropy" style="font-weight:600;text-decoration:none">Shelltropy</a></div></td><td style="vertical-align:middle">A technique to hide malicious shellcode based on low-entropy via Shannon encoding</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sherlock" style="font-weight:600;text-decoration:none">Sherlock</a></div></td><td style="vertical-align:middle">Hunt down social media accounts by username across social networks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sherlock" style="font-weight:600;text-decoration:none">Sherlock</a></div></td><td style="vertical-align:middle">Hunt down social media accounts by username across social networks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
66<a href="/tool/shodan" style="font-weight:600;text-decoration:none">Shodan</a></div></td><td style="vertical-align:middle">Search engine for Internet-connected devices.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shodan" style="font-weight:600;text-decoration:none">Shodan</a></div></td><td style="vertical-align:middle">Search devices connected to the internet; helps find information about desktops, servers, IoT devices; including metadata such as the software running</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shotlooter" style="font-weight:600;text-decoration:none">Shotlooter</a></div></td><td style="vertical-align:middle">Find sensitive data inside the screenshots uploaded to prnt.sc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shucknt" style="font-weight:600;text-decoration:none">ShuckNT</a></div></td><td style="vertical-align:middle">Dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sicat" style="font-weight:600;text-decoration:none">SiCat</a></div></td><td style="vertical-align:middle">Advanced exploit search tool designed to identify and gather information about exploits.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/silk" style="font-weight:600;text-decoration:none">SiLK</a></div></td><td style="vertical-align:middle">System for Internet-Level Knowledge; collection of traffic analysis tools developed to facilitate security analysis of large networks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sigma" style="font-weight:600;text-decoration:none">Sigma</a></div></td><td style="vertical-align:middle">Generic signature format for SIEM systems</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/silenthound" style="font-weight:600;text-decoration:none">SilentHound</a></div></td><td style="vertical-align:middle">Quietly enumerates an Active Directory Domain via LDAP parsing users, admins, groups</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/simple-basic-malware-scanner" style="font-weight:600;text-decoration:none">Simple Basic Malware Scanner</a></div></td><td style="vertical-align:middle">Simple Malware Scanner based on file hash scan.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/simple-local-file-inclusion-exploiter" style="font-weight:600;text-decoration:none">Simple Local File Inclusion Exploiter</a></div></td><td style="vertical-align:middle">LFI exploit tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
66Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/simplyemail" style="font-weight:600;text-decoration:none">SimplyEmail</a></div></td><td style="vertical-align:middle">Email recon made fast and easy, with a framework to build on.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/singularity" style="font-weight:600;text-decoration:none">Singularity</a></div></td><td style="vertical-align:middle">DNS rebinding attack framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sirius" style="font-weight:600;text-decoration:none">Sirius</a></div></td><td style="vertical-align:middle">Truly open-source general purpose vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sitadel" style="font-weight:600;text-decoration:none">Sitadel</a></div></td><td style="vertical-align:middle">Web application security scanner, rewrite and newer version of WAScan</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sitebroker" style="font-weight:600;text-decoration:none">SiteBroker</a></div></td><td style="vertical-align:middle">Tool for information gathering and penetration test automation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sitebroker" style="font-weight:600;text-decoration:none">SiteBroker</a></div></td><td style="vertical-align:middle">Utility for information gathering and penetration testing automation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/skanuvaty" style="font-weight:600;text-decoration:none">Skanuvaty</a></div></td><td style="vertical-align:middle">Dangerously fast DNS/network/port scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/skill-scanner" style="font-weight:600;text-decoration:none">Skill Scanner</a></div></td><td style="vertical-align:middle">A security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines pattern-based detection (YAML + YARA), LLM-as-a-judge, and behavioral dataflow analysis for c
66omprehensive threat detection. 67 68Supports OpenAI Codex Skills and Cursor Agent Skills formats following the Agent Skills specification.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai-skills">AI Skills</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/skillspector" style="font-weight:600;text-decoration:none">SkillSpector</a></div></td><td style="vertical-align:middle">Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai-skills">AI Skills</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/skills" style="font-weight:600;text-decoration:none">Skills</a></div></td><td style="vertical-align:middle">Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/ai-skills">AI Skills</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/slack-watchman" style="font-weight:600;text-decoration:none">Slack Watchman</a></div></td><td style="vertical-align:middle">Monitoring your Slack workspaces for sensitive informations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sleepy-puppy" style="font-weight:600;text-decoration:none">Sleepy Puppy</a></div></td><td style="vertical-align:middle">Sleepy Puppy XSS Payload Management Framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sleuthql" style="font-weight:600;text-decoration:none">SleuthQL</a></div></td><td style="vertical-align:middle">Tool that parses Burp history to discover potential SQL injection points and prepare SQLmap request files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sleuthql" style="font-weight:600;text-decoration:none">SleuthQL</a></div></td><td style="vertical-align:middle">Burp History parsing tool to discover potential SQL injection points.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sliver" style="font-weight:600;text-decoration:none">Sliver</a></div></td><td style="vertical-align:middle">Cross-platform adversary emulation/red team framework used by organizations of all sizes to perform security testing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sliver" style="font-weight:600;text-decoration:none">Sliver</a></div></td><td style="vertical-align:middle">Cross-platform implant framework that supports C2 over Mutual-TLS, HTTP(S), and DNS; remote access tool (RAT)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/slurp" style="font-weight:600;text-decoration:none">Slurp</a></div></td><td style="vertical-align:middle">A blazing fast & feature rich Amazon S3 bucket enumerator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smartdeblur" style="font-weight:600;text-decoration:none">SmartDeblur</a></div></td><td style="vertical-align:middle">To to restore defocused and blurred images (update binary only for Windows, Mac OS binary out of date)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smersh" style="font-weight:600;text-decoration:none">Smersh</a></div></td><td style="vertical-align:middle">Pentest oriented collaborative tool used to track the progress of your company's engagements and generate reports</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smmbackdoorng" style="font-weight:600;text-decoration:none">SmmBackdoorNg</a></div></td><td style="vertical-align:middle">
68System Management Mode (SMM) backdoor for UEFI based platforms</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/hardware">Hardware</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smogcloud" style="font-weight:600;text-decoration:none">Smogcloud</a></div></td><td style="vertical-align:middle">Find cloud assets that no one wants exposed.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smogcloud" style="font-weight:600;text-decoration:none">Smogcloud</a></div></td><td style="vertical-align:middle">Identify AWS cloud assets</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smugglefuzz" style="font-weight:600;text-decoration:none">SmuggleFuzz</a></div></td><td style="vertical-align:middle">A rapid HTTP downgrade smuggling scanner written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smuggler" style="font-weight:600;text-decoration:none">Smuggler</a></div></td><td style="vertical-align:middle">An HTTP Request Smuggling / Desync testing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smuggler" style="font-weight:600;text-decoration:none">Smuggler</a></div></td><td style="vertical-align:middle">HTTP request smuggling, desync testing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sn1per" style="font-weight:600;text-decoration:none">Sn1per</a></div></td><td style="vertical-align:middle">Automated reconnaissance scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sn1per" style="font-weight:600;text-decoration:none">Sn1per</a></div></td><td style="vertical-align:middle">Attack Surface Management Platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/snaffler" style="font-weight:600;text-decoration:none">Snaffler</a></div></td><td style="vertical-align:middle">A tool to help at finding delicious candy needles in a bunch of horrible boring haystacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/snaffler" style="font-weight:600;text-decoration:none">Snaffler</a></div></td><td style="vertical-align:middle">Find credentials and valuable information from windows active directory environments (shares, files)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sniff-paste" style="font-weight:600;text-decoration:none">Sniff-Paste</a></div></td><td style="vertical-align:middle">Pastebin OSINT harvester.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sniffair" style="font-weight:600;text-decoration:none">SniffAir</a></div></td><td style="vertical-align:middle">A framework for wireless pentesting.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/snort" style="font-weight:600;text-decoration:none">Snort</a></div></td><td style="vertical-align:middle">Intrusion detection system that monitors network traffic for suspicious activities and threats</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/snowman" style="font-weight:600;text-decoration:none">Snowman</a></div></td><td style="vertical-align:middle">Native code to C/C++ decompiler, supporting x86, AMD64, and ARM architectures, exists as standalone app or as a plug-in</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/social-mapper" style="font-weight:600;text-decoration:none">Social Mapper</a></div></td><td style="vertical-align:middle">A social media enumeration & correlation tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/socialfish" style="font-weight:600;text-decoration:none">SocialFish</a></div></td><td style="vertical-align:middle">Phishing targeting social media logins; supports Ngrok tunneling and a mobile controller</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/socialpwned" style="font-weight:600;text-decoration:none">SocialPwned</a></div></td><td style="vertical-align:middle">Allows to get the emails from a target published in social networks to find possible credentials.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sonarqube" style="font-weight:600;text-decoration:none">SonarQube</a></div></td><td style="vertical-align:middle">Automatic code review tool to detect bugs, vulnerabilities; continuous code inspection automated with static code analysis rules</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sonarsearch" style="font-weight:600;text-decoration:none">SonarSearch</a></div></td><td style="vertical-align:middle">A rapid API for the project Sonar dataset.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sonic-visualiser" style="font-weight:600;text-decoration:none">Sonic Visualiser</a></div></td><td style="vertical-align:middle">Tool to edit and analyze audio tracks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sort" style="font-weight:600;text-decoration:none">Sort++</a></div></td><td style="vertical-align:middle">The next generation Snort Intrusion Prevention System.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sourcegraph" style="font-weight:600;text-decoration:none">Sourcegraph</a></div></td><td style="vertical-align:middle">Search millions of open source repositories.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spiderfoot" style="font-weight:600;text-decoration:none">SpiderFoot</a></div></td><td style="vertical-align:middle">Automates OSINT for threat intelligence and mapping your attack surface.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spidersuite" style="font-weight:600;text-decoration:none">SpiderSuite</a></div></td><td style="vertical-align:middle">Advanced web spider/crawler for cyber security professionals.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sploitego" style="font-weight:600;text-decoration:none">Sploitego</a></div></td><td style="vertical-align:middle">Maltego penetration testing Transforms</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sploitus" style="font-weight:600;text-decoration:none">Sploitus</a></div></td><td style="vertical-align:middle">Exploits & tools search engine.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/splunk" style="font-weight:600;text-decoration:none">Splunk</a></div></td><td style="vertical-align:middle">The unified security and observability platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spoofy" style="font-weight:600;text-decoration:none">Spoofy</a></div></td><td style="vertical-align:middle">Checks if a list of domains can be spoofed based on SPF and DMARC records.<
68/td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spoolsploit" style="font-weight:600;text-decoration:none">SpoolSploit</a></div></td><td style="vertical-align:middle">Collection of Windows print spooler exploits and other utilities for practical exploitation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spraycannon" style="font-weight:600;text-decoration:none">SprayCannon</a></div></td><td style="vertical-align:middle">Fast multithreaded password spraying tool with backend database.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sprayhound" style="font-weight:600;text-decoration:none">SprayHound</a></div></td><td style="vertical-align:middle">Password spraying in Active Directory checking the default domain password policy and the badpwdcount LDAP attribute to avoid account locking, set pwned users as owned in Bloodhound and detect path to Domain Admins</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spraygen" style="font-weight:600;text-decoration:none">Spraygen</a></div></td><td style="vertical-align:middle">Permutation-based password list generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sprayingtoolkit" style="font-weight:600;text-decoration:none">SprayingToolkit</a></div></td><td style="vertical-align:middle">Password spraying scripts for Lync/S4B and OWA</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spy-extension" style="font-weight:600;text-decoration:none">Spy Extension</a></div></td><td style="vertical-align:middle">This Chrome extension will read literally everything it can.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlisniper" style="font-weight:600;text-decoration:none">SqliSniper</a></div></td><td style="vertical-align:middle">Time-based blind SQL injection fuzzer for HTTP headers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
68Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlmapdnscollaborator" style="font-weight:600;text-decoration:none">SqlmapDnsCollaborator</a></div></td><td style="vertical-align:middle">Lets you use Burp Collaborator as a DNS server for exfiltrating data via Sqlmap.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sshimpanzee" style="font-weight:600;text-decoration:none">Sshimpanzee</a></div></td><td style="vertical-align:middle">Builds a static reverse SSH server for pivoting; supports HTTP and SOCKS5 proxies, DNS and ICMP tunnelling, HTTP encapsulation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sshimpanzee" style="font-weight:600;text-decoration:none">Sshimpanzee</a></div></td><td style="vertical-align:middle">Reverse shell based on sshd supporting DNS and ICMP tunnelling as well as HTTP and Socks proxies.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stacoan" style="font-weight:600;text-decoration:none">StaCoAn</a></div></td><td style="vertical-align:middle">Crossplatform tool which help to perform static code analysis on mobile applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stacoan" style="font-weight:600;text-decoration:none">StaCoAn</a></div></td><td style="vertical-align:middle">Mobile applications static code analysis tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stalker" style="font-weight:600;text-decoration:none">Stalker</a></div></td><td style="vertical-align:middle">Automated scanning of social networks and other websites, using a single nickname</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/starkiller" style="font-weight:600;text-decoration:none">Starkiller</a></div></td><td style="vertical-align:middle">WebUI for Empire</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/starkiller" style="font-weight:600;text-decoration:none">Starkiller</a></div></td><td style="vertical-align:middle">Starkiller is a frontend for Empire.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stegonline" style="font-weight:600;text-decoration:none">StegOnline</a></div></td><td style="vertical-align:middle">Stego image toolsuite in the browser</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stegsolve" style="font-weight:600;text-decoration:none">StegSolve</a></div></td><td style="vertical-align:middle">Desktop application used to analyze images in different planes by taking off bits of the image.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/steganabara" style="font-weight:600;text-decoration:none">Steganabara</a></div></td><td style="vertical-align:middle">Steganography analysis tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/steghide" style="font-weight:600;text-decoration:none">Steghide</a></div></td><td style="vertical-align:middle">Tool to hide messages in images</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stegoveritas" style="font-weight:600;text-decoration:none">StegoVeritas</a></div></td><td style="vertical-align:middle">Automatic tool to bruteforce LSB, transform image, extract metadata or trailing data</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stepper" style="font-weight:600;text-decoration:none">Stepper</a></div></td><td style="vertical-align:middle">Evolution of Burp Suite's Repeater tool, providing the ability to create sequences of steps and define regular expressions to extract values from responses</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stepper" style="font-weight:600;text-decoration:none">Stepper</a></div></td><td style="vertical-align:middle">A natural evolution of Burp Suite's Repeater tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/storm-breaker" style="font-weight:600;text-decoration:none">Storm breaker</a></div></td><td style="vertical-align:middle">Social engineering tool, access eebcam & microphone & location finder.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stratus-red-team" style="font-weight:600;text-decoration:none">Stratus Red Team</a></div></td><td style="vertical-align:middle">Granular, actionable adversary emulation for the cloud.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/stratus-red-team" style="font-weight:600;text-decoration:none">Stratus Red Team</a></div></td><td style="vertical-align:middle">Stratus Red Team is 'Atomic Red Team' for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/striker" style="font-weight:600;text-decoration:none">
68Striker</a></div></td><td style="vertical-align:middle">Offensive information and vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sub-drill" style="font-weight:600;text-decoration:none">Sub-Drill</a></div></td><td style="vertical-align:middle">A very (very) FAST and simple subdomain finder based on online & free services.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sub3-suite" style="font-weight:600;text-decoration:none">Sub3 Suite</a></div></td><td style="vertical-align:middle">A free, open source, cross platform Intelligence gathering tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subbrute" style="font-weight:600;text-decoration:none">SubBrute</a></div></td><td style="vertical-align:middle">A DNS meta-query spider that enumerates DNS records, and subdomains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subdomainizer" style="font-weight:600;text-decoration:none">SubDomainizer</a></div></td><td style="vertical-align:middle">Find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subdomainizer" style="font-weight:600;text-decoration:none">SubDomainizer</a></div></td><td style="vertical-align:middle">A tool to find subdomains and interesting things hidden inside.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subgpt" style="font-weight:600;text-decoration:none">SubGPT</a></div></td><td style="vertical-align:middle">Find subdomains with GPT, for free.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subover" style="font-weight:600;text-decoration:none">SubOver</a></div></td><td style="vertical-align:middle">A Powerful Subdomain Takeover Tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subscraper" style="font-weight:600;text-decoration:none">SubScraper</a></div></td><td style="vertical-align:middle">Perform subdomain enumeration through various techniques and retrieve detailed output.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subdomainfinder" style="font-weight:600;text-decoration:none">SubdomainFinder</a></div></td><td style="vertical-align:middle">
68Find subdomains by searching public certificate records.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subfinder" style="font-weight:600;text-decoration:none">Subfinder</a></div></td><td style="vertical-align:middle">Discovery tool that discovers valid subdomains for websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subjack" style="font-weight:600;text-decoration:none">Subjack</a></div></td><td style="vertical-align:middle">Subdomain Takeover tool written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sublert" style="font-weight:600;text-decoration:none">Sublert</a></div></td><td style="vertical-align:middle">Monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sublist3r" style="font-weight:600;text-decoration:none">Sublist3r</a></div></td><td style="vertical-align:middle">Fast subdomains enumeration tool for penetration testers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sublist3r" style="font-weight:600;text-decoration:none">Sublist3r</a></div></td><td style="vertical-align:middle">Subdomains enumeration tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subra" style="font-weight:600;text-decoration:none">Subra</a></div></td><td style="vertical-align:middle">A Web-UI for subdomain enumeration.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/substr3am" style="font-weight:600;text-decoration:none">Substr3am</a></div></td><td style="vertical-align:middle">Passive reconnaissance/enumeration of interesting targets by watching for SSL certificates.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sudomy" style="font-weight:600;text-decoration:none">Sudomy</a></div></td><td style="vertical-align:middle">Collects subdomains and analyzes domains performing automated reconnaissance.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sudomy" style="font-weight:600;text-decoration:none">Sudomy</a></div></td><td style="vertical-align:middle">Subdomain enumeration tool </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/supernova" style="font-weight:600;text-decoration:none">Supernova</a></div></td><td style="vertical-align:middle">Real fucking shellcode encryptor & obfuscator tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/surf" style="font-weight:600;text-decoration:none">Surf</a></div></td><td style="vertical-align:middle">Escalate SSRF vulnerabilities on modern cloud environments, enumerate reachable hosts</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
68Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/suricata-language-server" style="font-weight:600;text-decoration:none">Suricata Language Server</a></div></td><td style="vertical-align:middle">Implementation of the Language Server Protocol for Suricata signatures; real-time rule syntax checking and auto-completion</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/swagger-jacker" style="font-weight:600;text-decoration:none">Swagger Jacker</a></div></td><td style="vertical-align:middle">Designed to assist with auditing of exposed Swagger/OpenAPI) definition files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sweetpotato" style="font-weight:600;text-decoration:none">SweetPotato</a></div></td><td style="vertical-align:middle">A collection of various Windows privilege escalation techniques from service accounts to SYSTEM.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/swftools" style="font-weight:600;text-decoration:none">Swftools</a></div></td><td style="vertical-align:middle">Collection of utilities to work with SWF files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/swiftnessx" style="font-weight:600;text-decoration:none">SwiftnessX</a></div></td><td style="vertical-align:middle">Cross-platform note-taking and target-tracking app for penetration testers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/synapsint" style="font-weight:600;text-decoration:none">SynapsInt</a></div></td><td style="vertical-align:middle">Consulting different intelligence services, search engines and datasets for OSINT.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/synergy-httpx" style="font-weight:600;text-decoration:none">Synergy Httpx</a></div></td><td style="vertical-align:middle">HTTP(S) server designed to assist in red teaming activities such as receiving intercepted data via POST requests and serving content dynamically</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/synergy-httpx" style="font-weight:600;text-decoration:none">Synergy-httpx</a></div></td><td style="vertical-align:middle">Http(s) server designed to host resources dynamically or act as a receiver for POST data intercepts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sysreptor" style="font-weight:600;text-decoration:none">
68SysReptor</a></div></td><td style="vertical-align:middle">Collaborative penetration test, vulnerability database and reporting platform; supports findings in markdown, customized reports in HTML and VueJS, rendering to PDF, MFA, note-taking, data encryption, SSO</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/syswhisper3" style="font-weight:600;text-decoration:none">SysWhisper3</a></div></td><td style="vertical-align:middle">SysWhispers on Steroid, AV/EDR evasion via direct system calls</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/syswhispers" style="font-weight:600;text-decoration:none">SysWhispers</a></div></td><td style="vertical-align:middle">AV/EDR evasion via direct system calls.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/t-pot" style="font-weight:600;text-decoration:none">T-Pot</a></div></td><td style="vertical-align:middle">The all in one multi honeypot platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tex" style="font-weight:600;text-decoration:none">TEx</a></div></td><td style="vertical-align:middle">Telegram Explorer created to help researchers, investigators and law enforcement agent.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tidos" style="font-weight:600;text-decoration:none">TIDoS</a></div></td><td style="vertical-align:middle">The offensive manual web application penetration testing framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tidos-framework" style="font-weight:600;text-decoration:none">TIDoS Framework</a></div></td><td style="vertical-align:middle">Comprehensive web-app audit framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tinja-the-template-injection-analyzer" style="font-weight:600;text-decoration:none">TInjA â the Template INJection Analyzer</a></div></td><td style="vertical-align:middle">TInjA is a CLI tool for testing web pages for template injection vulnerabilities. 69 70It supports 44 of the most relevant template engines (as of September 2023) for eight different programming languages. 71 72TInjA was developed by Hackmanit and Maximilian Hildebrand.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
72Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tld-scanner" style="font-weight:600;text-decoration:none">TLD Scanner</a></div></td><td style="vertical-align:middle">Scan all possible TLD's for a given domain name.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/domains,tld,recon" style="font-weight:600;text-decoration:none">TLDHunt</a></div></td><td style="vertical-align:middle">Domain availability checker.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tls-map" style="font-weight:600;text-decoration:none">TLS map</a></div></td><td style="vertical-align:middle">CLI & library for mapping TLS cipher algorithm names: IANA, OpenSSL, GnUTLS, NSS</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tls-attacker" style="font-weight:600;text-decoration:none">TLS-Attacker</a></div></td><td style="vertical-align:middle">TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is able to send arbitrary protocol messages in an arbitrary order to the TLS peer, and define their modifications using a provided interface. This gives the developer an opportunity to easily define a custom TLS protocol flow and test it against his TLS library. 73 74Please note: TLS-Attacker is a research tool intended for TLS developers and pentesters. There is no GUI and no green/red lights.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tls-scanner" style="font-weight:600;text-decoration:none">TLS-Scanner</a></div></td><td style="vertical-align:middle">TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tpmee" style="font-weight:600;text-decoration:none">TPMEE</a></div></td><td style="vertical-align:middle">Help to exploit weak implementation of library or program that used TPM</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ttd-bindings" style="font-weight:600;text-decoration:none">TTD-Bindings</a></div></td><td style="vertical-align:middle">Bindings for Microsoft WinDBG Time Travel Debugging (TTD)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ttpassgen" style="font-weight:600;text-decoration:none">TTPassGen</a></div></td><td style="vertical-align:middle">Flexible and scriptable password dictionary/wordlist generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/twint" style="font-weight:600;text-decoration:none">TWINT</a></div></td><td style="vertical-align:middle">Twitter Intelligence Tool; Twitter scraping & OSINT tool that doesn't use Twitter's API, allowing one to scrape a user's followers, following, Tweets and more while evading most API limitations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tamper-data" style="font-weight:600;text-decoration:none">Tamper Data</a></div></td><td style="vertical-align:middle">View and modify HTTP requests before they are sent.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tamper-dev" style="font-weight:600;text-decoration:none">Tamper Dev</a></div></td><td style="vertical-align:middle">Allows you to intercept and edit HTTP/HTTPS requests and responses.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/teamsimplant" style="font-weight:600;text-decoration:none">TeamsImplant</a></div></td><td style="vertical-align:middle">MS Teams implant persistent backdoor</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
74<a href="/tool/teh-s3-bucketeers" style="font-weight:600;text-decoration:none">Teh S3 Bucketeers</a></div></td><td style="vertical-align:middle">Security tool to discover S3 buckets on Amazon's AWS platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tempest" style="font-weight:600;text-decoration:none">Tempest</a></div></td><td style="vertical-align:middle">Leverage paste sites as a medium for discovery of objectionable/infringing materials</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tinja" style="font-weight:600;text-decoration:none">Template INJection Analyzer</a></div></td><td style="vertical-align:middle">CLI tool for testing web pages for template injection vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/template-injection-playground" style="font-weight:600;text-decoration:none">Template Injection Playground</a></div></td><td style="vertical-align:middle">With the Template Injection Playground a large number of the most relevant template engines (as of September 2023) can be tested for template injection possibilities. For this purpose, simple web pages are provided, each of which uses one of the template engines. Furthermore, various optional security measures such as sandboxes, encodings, and denylists can be activated. 75 76The Template Injection Playground was developed by Hackmanit and Maximilian Hildebrand.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/template-injection-table" style="font-weight:600;text-decoration:none">Template Injection Table</a></div></td><td style="vertical-align:middle">The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities. It was developed by Hackmanit and Maximilian Hildebrand. 77 78The table consists of so-called "polyglots" that can be used to detect template injection possibilities and identify which template engine is used by an application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/terminatorz" style="font-weight:600;text-decoration:none">TerminatorZ</a></div></td><td style="vertical-align:middle">Scan for top potential vulnerabilities with known CVEs in your web applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tfsec" style="font-weight:600;text-decoration:none">Tfsec</a></div></td><td style="vertical-align:middle">Misconfiguration scanner for terraform code</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/th3inspector" style="font-weight:600;text-decoration:none">Th3inspector</a></div></td><td style="vertical-align:middle">Multi-purpose information gathering tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/th3inspector" style="font-weight:600;text-decoration:none">Th3inspector</a></div></td><td style="vertical-align:middle">All in one tool for Information Gathering.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
78<a href="/tool/the-exploit-database" style="font-weight:600;text-decoration:none">The Exploit Database</a></div></td><td style="vertical-align:middle">Archive of public exploits and corresponding vulnerable software.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/the-http-garden" style="font-weight:600;text-decoration:none">The HTTP Garden</a></div></td><td style="vertical-align:middle">Differential testing and fuzzing of HTTP servers and proxies.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ptf" style="font-weight:600;text-decoration:none">The PenTesters Framework</a></div></td><td style="vertical-align:middle">The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/the-social-engineer-toolkit" style="font-weight:600;text-decoration:none">The Social-Engineer Toolkit</a></div></td><td style="vertical-align:middle">Open-source penetration testing framework designed for social engineering.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/the-time-machine" style="font-weight:600;text-decoration:none">The Time Machine</a></div></td><td style="vertical-align:middle">Weaponizing WaybackUrls for recon, bug bounties, OSINT, sensitive endpoints and what not.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/the-wordlists" style="font-weight:600;text-decoration:none">The Wordlists</a></div></td><td style="vertical-align:middle">A collection of wordlists for many different usages.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/the-xss-rat" style="font-weight:600;text-decoration:none">The XSS rat</a></div></td><td style="vertical-align:middle">The XSS rat YouTube channel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/the-art-of-command-line" style="font-weight:600;text-decoration:none">The art of command line</a></div></td><td style="vertical-align:middle">Master the command line, in one page.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/theftfuzzer" style="font-weight:600;text-decoration:none">TheftFuzzer</a></div></td><td style="vertical-align:middle">
78Fuzz Cross-Origin Resource Sharing implementations for common misconfigurations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/thievingfox" style="font-weight:600;text-decoration:none">ThievingFox</a></div></td><td style="vertical-align:middle">Post-exploitation tools to gather credentials from various password managers and Windows utilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/threathound" style="font-weight:600;text-decoration:none">ThreatHound</a></div></td><td style="vertical-align:middle">Windows event log file viewer and analyser</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/threatingestor" style="font-weight:600;text-decoration:none">ThreatIngestor</a></div></td><td style="vertical-align:middle">Extract and aggregate threat intelligence (IOCs from threat feeds)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/threatkb" style="font-weight:600;text-decoration:none">ThreatKB</a></div></td><td style="vertical-align:middle">Knowledge base workflow management for YARA rules and C2 artifacts</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/threatmapper" style="font-weight:600;text-decoration:none">ThreatMapper</a></div></td><td style="vertical-align:middle">Identify vulnerabilities in running containers, images, hosts and repositories</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/threatmapper" style="font-weight:600;text-decoration:none">ThreatMapper</a></div></td><td style="vertical-align:middle">Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tokentactics" style="font-weight:600;text-decoration:none">TokenTactics</a></div></td><td style="vertical-align:middle">Azure JWT token manipulation toolset.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tool-wpxstrike" style="font-weight:600;text-decoration:none">Tool WPXStrike</a></div></td><td style="vertical-align:middle">Escalate a Cross-Site Scripting vulnerability to Remote Code Execution in WordPress.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tool-x" style="font-weight:600;text-decoration:none">Tool-X</a></div></td><td style="vertical-align:middle">Kali linux hacking tool installer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/totem" style="font-weight:600;text-decoration:none">Totem</a></div></td><td style="vertical-align:middle">Retrieve information about ads of a facebook page, retrieve the number of people targeted, how much the ad cost and a lot of other information</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tracy" style="font-weight:600;text-decoration:none">Tracy</a></div></td><td style="vertical-align:middle">Assists with finding all sinks and sources of a webapp and display the results in a nice way.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tracy" style="font-weight:600;text-decoration:none">Tracy</a></div></td><td style="vertical-align:middle">Tool that help to manually find XSS</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
78Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trafficwatch" style="font-weight:600;text-decoration:none">TrafficWatch</a></div></td><td style="vertical-align:middle">A packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/transformations" style="font-weight:600;text-decoration:none">Transformations</a></div></td><td style="vertical-align:middle">Understand how input is transformed on a system, which can help to craft payloads.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trashcompactor" style="font-weight:600;text-decoration:none">TrashCompactor</a></div></td><td style="vertical-align:middle">Remove URLs with duplicate funcionality based on script resources included</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trevorc2" style="font-weight:600;text-decoration:none">TrevorC2</a></div></td><td style="vertical-align:middle">Command and control framework masking the activity by emulating legitimate website</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trevorc2" style="font-weight:600;text-decoration:none">TrevorC2</a></div></td><td style="vertical-align:middle">A legitimate website that tunnels client/server communications for covert command execution.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trishul" style="font-weight:600;text-decoration:none">Trishul</a></div></td><td style="vertical-align:middle">Burp Suite Extension to hunt for common vulnerabilities found in websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/triton" style="font-weight:600;text-decoration:none">Triton</a></div></td><td style="vertical-align:middle">A dynamic binary analysis library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/triton" style="font-weight:600;text-decoration:none">Triton</a></div></td><td style="vertical-align:middle">Dynamic binary analysis framework, automate reverse engineering</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tritondse" style="font-weight:600;text-decoration:none">TritonDSE</a></div></td><td style="vertical-align:middle">Triton-based DSE library with loading and exploration capabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trivy" style="font-weight:600;text-decoration:none">Trivy</a></div></td><td style="vertical-align:middle">Vulnerability and misconfiguration scanner for containers (OS and language-specific packages)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trufflehog" style="font-weight:600;text-decoration:none">TruffleHog</a></div></td><td style="vertical-align:middle">Find secret information in git repositories</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tryhackme" style="font-weight:600;text-decoration:none">TryHackMe</a></div></td><td style="vertical-align:middle">Hands-on cyber security training through real-world scenarios.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tsunami" style="font-weight:600;text-decoration:none">Tsunami</a></div></td><td style="vertical-align:middle">Network security scanner with an extensible plugin system</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tugarecon" style="font-weight:600;text-decoration:none">TugaRecon</a></div></td><td style="vertical-align:middle">
78Subdomains enumeration tool for penetration testers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/turbo-intruder" style="font-weight:600;text-decoration:none">Turbo Intruder</a></div></td><td style="vertical-align:middle">Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/turbolist3r" style="font-weight:600;text-decoration:none">Turbolist3r</a></div></td><td style="vertical-align:middle">Subdomain enumeration tool with analysis features for discovered domains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/turner" style="font-weight:600;text-decoration:none">Turner</a></div></td><td style="vertical-align:middle">Tunnels HTTP over a permissive/open TURN server; supports HTTP and SOCKS5 proxy</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tweezer" style="font-weight:600;text-decoration:none">Tweezer</a></div></td><td style="vertical-align:middle">Identifying function names in stripped binaries and un-named functions</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/typo3scan" style="font-weight:600;text-decoration:none">Typo3Scan</a></div></td><td style="vertical-align:middle">Enumerate Typo3 version and extensions</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uboat" style="font-weight:600;text-decoration:none">UBoat</a></div></td><td style="vertical-align:middle">HTTP botnet PoC</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/udpx" style="font-weight:600;text-decoration:none">UDPX</a></div></td><td style="vertical-align:middle">Fast and lightweight UDP scanner that supports the discovery of many services.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uglifyjs" style="font-weight:600;text-decoration:none">UglifyJS</a></div></td><td style="vertical-align:middle">A JavaScript parser, minifier, compressor and beautifier toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uglifyjs2" style="font-weight:600;text-decoration:none">UglifyJS2</a></div></td><td style="vertical-align:middle">JavaScript obfuscator or beautifier toolkit</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/unforce" style="font-weight:600;text-decoration:none">Unforce</a></div></td><td style="vertical-align:middle">Salesforce lightning recon and exploitation tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/unicornscan" style="font-weight:600;text-decoration:none">Unicornscan</a></div></td><td style="vertical-align:middle">An asynchronous TCP and UDP port scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uniscan" style="font-weight:600;text-decoration:none">Uniscan</a></div></td><td style="vertical-align:middle">RFI, LFi and RCE scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
78Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/unredacter" style="font-weight:600;text-decoration:none">Unredacter</a></div></td><td style="vertical-align:middle">Never ever ever use pixelation as a redaction technique.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/unshackle" style="font-weight:600;text-decoration:none">Unshackle</a></div></td><td style="vertical-align:middle">Bypass Windows and Linux user passwords from a bootable USB based on Linux.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/up-http-server" style="font-weight:600;text-decoration:none">Up HTTP Server</a></div></td><td style="vertical-align:middle">Simple HTTP listener for security testing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uploadscanner" style="font-weight:600;text-decoration:none">UploadScanner</a></div></td><td style="vertical-align:middle">HTTP file upload scanner for Burp Proxy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/userenum" style="font-weight:600;text-decoration:none">UserEnum</a></div></td><td style="vertical-align:middle">Domain user enumeration tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/v3n0m" style="font-weight:600;text-decoration:none">V3n0M</a></div></td><td style="vertical-align:middle">Web dork and vulnerability scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vampi" style="font-weight:600;text-decoration:none">VAmPI</a></div></td><td style="vertical-align:middle">Vulnerable REST API with OWASP top 10 vulnerabilities for security testing </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vbsmin" style="font-weight:600;text-decoration:none">VBSmin</a></div></td><td style="vertical-align:middle">VBScript minifier</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vbad" style="font-weight:600;text-decoration:none">VBad</a></div></td><td style="vertical-align:middle">VBA obfuscation tools combined with an MS Office document generator .</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vhostscan" style="font-weight:600;text-decoration:none">
78VHostScan</a></div></td><td style="vertical-align:middle">Virtual host scanner that performs reverse lookups.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vooki" style="font-weight:600;text-decoration:none">VOOKI</a></div></td><td style="vertical-align:middle">Windows only web application and REST API vulnerability scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vrt-ruby-wrapper" style="font-weight:600;text-decoration:none">VRT Ruby Wrapper</a></div></td><td style="vertical-align:middle">Wrapper for the Vulnerability Rating Taxonomy</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vais" style="font-weight:600;text-decoration:none">Vais</a></div></td><td style="vertical-align:middle">SWF vulnerability and information scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vajra" style="font-weight:600;text-decoration:none">Vajra</a></div></td><td style="vertical-align:middle">UI-based tool with multiple techniques for attacking and enumerating Azure and AWS environment.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/valid8proxy" style="font-weight:600;text-decoration:none">Valid8Proxy</a></div></td><td style="vertical-align:middle">Tool designed for fetching, validating, and storing working proxies.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vampi" style="font-weight:600;text-decoration:none">Vampi</a></div></td><td style="vertical-align:middle">Vulnerable REST API with OWASP top 10 vulnerabilities for security testing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vega" style="font-weight:600;text-decoration:none">Vega</a></div></td><td style="vertical-align:middle">Multi-platform web scanner and intercepting proxy</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
78Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vegile" style="font-weight:600;text-decoration:none">Vegile</a></div></td><td style="vertical-align:middle">Post exploitation tool to maintain some level of acces.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/velociraptor" style="font-weight:600;text-decoration:none">Velociraptor</a></div></td><td style="vertical-align:middle">Endpoint visibility and collection tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/velociraptor" style="font-weight:600;text-decoration:none">Velociraptor</a></div></td><td style="vertical-align:middle">Endpoint visibility and collection tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/venom" style="font-weight:600;text-decoration:none">Venom</a></div></td><td style="vertical-align:middle">Popular Pentesting scanner for SQLi/XSS/LFI/RFI and other Vulns.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vicarius" style="font-weight:600;text-decoration:none">Vicarius</a></div></td><td style="vertical-align:middle">vRx by Vicarius offers real-time and automated patching, patchless protection, and script-based remediation across apps, OS, and third-party software.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vigolium-high-fidelity-vulnerability-scanner-fusing-agentic-ai-with-native-speed-modularity-and-precision" style="font-weight:600;text-decoration:none">Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision</a></div></td><td style="vertical-align:middle">Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision 79 80Native Scan (vigolium scan): Fast, powerful, and flexible. Deterministic, multi-phase scanning with 251 modules across content discovery, browser/SPA spidering, and active/passive audit, covering injection, access control, file/p
80ath, API/protocol, framework-specific, cloud/infra, and out-of-band (OAST) vulnerability classes. 81 82Agentic Scan (vigolium agent): Thoroughly audits your codebase. AI-driven scanning that autonomously plans attacks, selects modules, generates custom extensions, and triages results, combining deep source-code audit with autonomous and targeted vulnerability scanning.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/villain" style="font-weight:600;text-decoration:none">Villain</a></div></td><td style="vertical-align:middle">Distributed command and control framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/villain" style="font-weight:600;text-decoration:none">Villain</a></div></td><td style="vertical-align:middle">Backdoor generator and multi-session handler for sessions sharing among connected sibling servers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/virtual-host-scanner" style="font-weight:600;text-decoration:none">Virtual host scanner</a></div></td><td style="vertical-align:middle">A script to enumerate virtual hosts on a server.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vulmap" style="font-weight:600;text-decoration:none">Vulmap</a></div></td><td style="vertical-align:middle">Online local vulnerability scanners project.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vulnhub" style="font-weight:600;text-decoration:none">VulnHub</a></div></td><td style="vertical-align:middle">Provide materials that allows anyone to gain practical 'hands-on' experience in security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vulnmachines" style="font-weight:600;text-decoration:none">Vulnmachines</a></div></td><td style="vertical-align:middle">A place to learn and improve penetration testing/ethical hacking skills for FREE.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vulnogram" style="font-weight:600;text-decoration:none">Vulnogram</a></div></td><td style="vertical-align:middle">Create and edit CVE information in CVE JSON format</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vulnreport" style="font-weight:600;text-decoration:none">Vulnreport</a></div></td><td style="vertical-align:middle">Pentesting management and automation platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vuls" style="font-weight:600;text-decoration:none">Vuls</a></div></td><td style="vertical-align:middle">Agent-less vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vuls" style="font-weight:600;text-decoration:none">Vuls</a></div></td><td style="vertical-align:middle">Agentless system vulnerability scanner for Linux/FreeBSD with a dashboard (VulsRepo) for analyzing the scan results</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wadcoms" style="font-weight:600;text-decoration:none">WADComs</a></div></td><td style="vertical-align:middle">Interactive cheat sheet with a curated list of offensive security tools and their commands.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wafninja" style="font-weight:600;text-decoration:none">WAFNinja</a></div></td><td style="vertical-align:middle">WAF bypassing tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
82Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wascan" style="font-weight:600;text-decoration:none">WAScan</a></div></td><td style="vertical-align:middle">Web application security scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wes-ng" style="font-weight:600;text-decoration:none">WES-NG</a></div></td><td style="vertical-align:middle">Windows Exploit Suggester - Next Generation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wes-ng" style="font-weight:600;text-decoration:none">WES-NG</a></div></td><td style="vertical-align:middle">Windows Exploit Suggester - Next Generation; analyses Windows targets patch levels to find exploits and Metasploit modules; works well with newer system (eg Windows 10) thanks to MSRC support</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whids" style="font-weight:600;text-decoration:none">WHIDS</a></div></td><td style="vertical-align:middle">EDR for Windows</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/winspect" style="font-weight:600;text-decoration:none">WINspect</a></div></td><td style="vertical-align:middle">Powershell-based Windows security auditing toolbox.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wmeye" style="font-weight:600;text-decoration:none">WMEye</a></div></td><td style="vertical-align:middle">Post exploitation tool that uses WMI event filter and MSBuild execution for lateral movement.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wog" style="font-weight:600;text-decoration:none">WOG</a></div></td><td style="vertical-align:middle">Weakpass rule-based online generator; generates a wordlist based on a set of words entered by the user</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wprecon" style="font-weight:600;text-decoration:none">WPRecon</a></div></td><td style="vertical-align:middle">Tool for the recognition of vulnerabilities and blackbox information for Wordpress.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wpscan" style="font-weight:600;text-decoration:none">WPScan</a></div></td><td style="vertical-align:middle">WordPress CMS vulnerability scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
82Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wpscan" style="font-weight:600;text-decoration:none">WPScan</a></div></td><td style="vertical-align:middle">WPScan WordPress Security Scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wpspider" style="font-weight:600;text-decoration:none">WPSpider</a></div></td><td style="vertical-align:middle">A centralized dashboard for running and scheduling WordPress scans powered by WPScan utility.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ws-attacker" style="font-weight:600;text-decoration:none">WS-Attacker</a></div></td><td style="vertical-align:middle">WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum (https://nds.rub.de/) and the Hackmanit GmbH (https://hackmanit.de/). 83 84The basic idea behind WS-Attacker is to provide a functionality to load WSDL files and send SOAP messages to the Web Service endpoints (which is executed using the underlying SoapUI framework). This functionality can be extended using various plugins and libraries to build specific Web Services attacks. You can find more information on the WS-Attacker architecture and its extensibility in our paper: Penetration Testing Tool for Web Services Security (https://www.nds.rub.de/research/publications/ws-attacker-paper/)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ws-attacker" style="font-weight:600;text-decoration:none">WS-Attacker</a></div></td><td style="vertical-align:middle">WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum (https://nds.rub.de/) and the Hackmanit GmbH (https://hackmanit.de/). 85 86The basic idea behind WS-Attacker is to provide a functionality to load WSDL files and send SOAP messages to the Web Service endpoints (which is executed using the underlying SoapUI framework). This functionality can be extended using various plugins and libraries to build specific Web Services attacks. You can find more information on the WS-Attacker architecture and its extensibility in our paper: Penetration Testing Tool for Web Services Security (https://www.nds.rub.de/research/publications/ws-attacker-paper/)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ws-attacker" style="font-weight:600;text-decoration:none">WS-Attacker</a></div></td><td style="vertical-align:middle">Modular framework for SOAP web services penetration testing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
86Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wsdl-wizard" style="font-weight:600;text-decoration:none">WSDL Wizard</a></div></td><td style="vertical-align:middle">Burp Suite plugin to detect current and discover new WSDL files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wsfuzzer" style="font-weight:600;text-decoration:none">WSFuzzer</a></div></td><td style="vertical-align:middle">Fuzzing penetration testing tool for testing HTTP SOAP based web services</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wssat" style="font-weight:600;text-decoration:none">WSSAT</a></div></td><td style="vertical-align:middle">Web Service Security Assessment Tool; WS, REST API, SOAP API dynamic scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wapiti" style="font-weight:600;text-decoration:none">Wapiti</a></div></td><td style="vertical-align:middle">The web-application vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wappago" style="font-weight:600;text-decoration:none">WappaGo</a></div></td><td style="vertical-align:middle">Web technologies detection; assemble different features from HTTPX, Naabu, GoWitness and Wappalyzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wappalyzer" style="font-weight:600;text-decoration:none">Wappalyzer</a></div></td><td style="vertical-align:middle">Identify technologies on websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/warhorse" style="font-weight:600;text-decoration:none">Warhorse</a></div></td><td style="vertical-align:middle">Ansible playbook to deploy infrastructure in the cloud for conducting Red Team assessments</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/watcher" style="font-weight:600;text-decoration:none">Watcher</a></div></td><td style="vertical-align:middle">Automated platform for discovering new potentially cybersecurity threats targeting your assets (detects typosquatting domain names, monitor malicious domain names, detects data leaks...)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/watson" style="font-weight:600;text-decoration:none">Watson</a></div></td><td style="vertical-align:middle">Enumerate missing KBs and suggest exploits for useful privilege escalation vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wavecrack" style="font-weight:600;text-decoration:none">Wavecrack</a></div></td><td style="vertical-align:middle">Hashcat WebUI; asynchronous task, chain tasks, statistics, export, segregation, local and LDAP authentication</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wayback-machine" style="font-weight:600;text-decoration:none">Wayback Machine</a></div></td><td style="vertical-align:middle">Explore more than 778 billion web pages saved over time.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/waymore" style="font-weight:600;text-decoration:none">Waymore</a></div></td><td style="vertical-align:middle">Find way more from the Wayback Machine!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wazuh" style="font-weight:600;text-decoration:none">Wazuh</a></div></td><td style="vertical-align:middle">Security monitoring solution for threat detection, integrity monitoring, incident response and compliance; unified XDR and SIEM protection for endpoints and cloud workloads</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/weakestlink" style="font-weight:600;text-decoration:none">WeakestLink</a></div></td><td style="vertical-align:middle">Browser extension that extracts users from LinkedIn company pages.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/weaponised-xss-payloads" style="font-weight:600;text-decoration:none">Weaponised XSS Payloads</a></div></td><td style="vertical-align:middle">XSS payloads designed to turn alert(1) into P1.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
86<a href="/tool/web-cache-vulnerability-scanner-wcvs" style="font-weight:600;text-decoration:none">Web Cache Vulnerability Scanner (WCVS)</a></div></td><td style="vertical-align:middle">Web Cache Vulnerability Scanner (WCVS) is a fast and versatile CLI scanner for web cache poisoning and web cache deception developed by Hackmanit and Maximilian Hildebrand. 87 88The scanner supports many different web cache poisoning and web cache deception techniques, includes a crawler to identify further URLs to test, and can adapt to a specific web cache for more efficient testing. It is highly customizable and can be easily integrated into existing CI/CD pipelines.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/web-check" style="font-weight:600;text-decoration:none">Web Check</a></div></td><td style="vertical-align:middle">All-in-one OSINT tool for analysing any website.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/web-crawler-security-tool" style="font-weight:600;text-decoration:none">Web Crawler Security Tool</a></div></td><td style="vertical-align:middle">A web crawler oriented to infosec.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webcopilot" style="font-weight:600;text-decoration:none">WebCopilot</a></div></td><td style="vertical-align:middle">Automation tool designed to enumerate subdomains and detect bugs using different open-source tools.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webgoat" style="font-weight:600;text-decoration:none">WebGoat</a></div></td><td style="vertical-align:middle">Deliberately insecure application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webhashcat" style="font-weight:600;text-decoration:none">WebHashcat</a></div></td><td style="vertical-align:middle">Hashcat WebUI with distributed cracking sessions and analytics</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webinspect" style="font-weight:600;text-decoration:none">WebInspect</a></div></td><td style="vertical-align:middle">An automated dynamic testing solution that provides comprehensive vulnerability detection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webmap-v1" style="font-weight:600;text-decoration:none">WebMap v1</a></div></td><td style="vertical-align:middle">A web dashboard for nmap XML report</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webmap-v2" style="font-weight:600;text-decoration:none">WebMap v2</a></div></td><td style="vertical-align:middle">A web dashboard for nmap XML report</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webscarab" style="font-weight:600;text-decoration:none">WebScarab</a></div></td><td style="vertical-align:middle">Framework for analysing applications that communicate using the HTTP and HTTPS protocols.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webscrape" style="font-weight:600;text-decoration:none">
88WebScrape</a></div></td><td style="vertical-align:middle">A web scraper to scrape email's and phone numbers from websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webhook-tester" style="font-weight:600;text-decoration:none">Webhook Tester</a></div></td><td style="vertical-align:middle">HTTP request collector and inspector</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/weevely" style="font-weight:600;text-decoration:none">Weevely</a></div></td><td style="vertical-align:middle">Web shell for post-exploitation working with a PHP agent</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/weirdaal" style="font-weight:600;text-decoration:none">WeirdAAL</a></div></td><td style="vertical-align:middle">AWS Attack Library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wfuzz" style="font-weight:600;text-decoration:none">Wfuzz</a></div></td><td style="vertical-align:middle">Web application fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wfuzz" style="font-weight:600;text-decoration:none">Wfuzz</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce); but also a web fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/what-cms" style="font-weight:600;text-decoration:none">What CMS</a></div></td><td style="vertical-align:middle">Service able to detect more than 430 CMS, find version used for some CMS, has an API for batch detection</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/what-cms" style="font-weight:600;text-decoration:none">What CMS</a></div></td><td style="vertical-align:middle">Detect which CMS a site is using.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whatbreach" style="font-weight:600;text-decoration:none">WhatBreach</a></div></td><td style="vertical-align:middle">OSINT tool to find breached emails, databases, pastes, and relevant information.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whatruns" style="font-weight:600;text-decoration:none">WhatRuns</a></div></td><td style="vertical-align:middle">Discover what runs a website.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whatwaf" style="font-weight:600;text-decoration:none">WhatWaf</a></div></td><td style="vertical-align:middle">Detect and bypass web application firewalls and protection systems.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whatweb" style="font-weight:600;text-decoration:none">WhatWeb</a></div></td><td style="vertical-align:middle">Next generation web scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whatweb" style="font-weight:600;text-decoration:none">WhatWeb</a></div></td><td style="vertical-align:middle">Web scanner, recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices, also identifies version numbers, email addresses, account IDs, web framework modules, SQL errors, and more; more than 1800 plugins</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whatsmyname" style="font-weight:600;text-decoration:none">WhatsMyName</a></div></td><td style="vertical-align:middle">Enumerate usernames across many websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whisker" style="font-weight:600;text-decoration:none">Whisker</a></div></td><td style="vertical-align:middle">Take over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding Shadow Credentials to the target account</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whispers" style="font-weight:600;text-decoration:none">Whispers</a></div></td><td style="vertical-align:middle">Identify hardcoded secrets in static structured text.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whoisxmlapi" style="font-weight:600;text-decoration:none">WhoisXMLAPI</a></div></td><td style="vertical-align:middle">Domain & IP data intelligence for greater enterprise security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whonow" style="font-weight:600;text-decoration:none">Whonow</a></div></td><td style="vertical-align:middle">DNS Server for executing DNS Rebinding attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifi-exploitation-framework" style="font-weight:600;text-decoration:none">WiFi Exploitation Framework</a></div></td><td style="vertical-align:middle">WiFi exploitation framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifi-pumpkin" style="font-weight:600;text-decoration:none">WiFi-Pumpkin</a></div></td><td style="vertical-align:middle">Framework for rogue Wi-Fi access point attack.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifi-biter" style="font-weight:600;text-decoration:none">Wifi-Biter</a></div></td><td style="vertical-align:middle">Dictionary generator used to generate dictionaries/wordlist for Wireless Router Passwords</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifipass" style="font-weight:600;text-decoration:none">WifiPass</a></div></td><td style="vertical-align:middle">A simple wireless networks penetration testing toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/windbg" style="font-weight:600;text-decoration:none">WinDbg</a></div></td><td style="vertical-align:middle">Windows debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/winfihack" style="font-weight:600;text-decoration:none">WinFiHack</a></div></td><td style="vertical-align:middle">Windows WiFi brute forcing utility without the requirement of external dependencies.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/winpmem" style="font-weight:600;text-decoration:none">WinPmem</a></div></td><td style="vertical-align:middle">The Windows memory acquisition tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/winpwn" style="font-weight:600;text-decoration:none">WinPwn</a></div></td><td style="vertical-align:middle">Automation for internal Windows pentest / AD-Security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/winpwnage" style="font-weight:600;text-decoration:none">WinPwnage</a></div></td><td style="vertical-align:middle">UAC bypass, Elevate, Persistence methods.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/windows-exploit-suggester" style="font-weight:600;text-decoration:none">Windows Exploit Suggester</a></div></td><td style="vertical-align:middle">Compares target patch levels against the Microsoft vulnerability DB to detect missing patches.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/windows-exploit-suggester" style="font-weight:600;text-decoration:none">Windows-Exploit-Suggester</a></div></td><td style="vertical-align:middle">Analyses Windows targets patch levels to find exploits and Metasploit modules, works only for older systems (eg Windows XP, Vista, etc.) because it relies on MS Security KBs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wiresocks" style="font-weight:600;text-decoration:none">WireSocks</a></div></td><td style="vertical-align:middle">WireGuard socks proxy for pentest pivoting</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wireshark" style="font-weight:600;text-decoration:none">Wireshark</a></div></td><td style="vertical-align:middle">Network protocol analyzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wireshark" style="font-weight:600;text-decoration:none">Wireshark</a></div></td><td style="vertical-align:middle">Network sniffer that captures and analyzes packets off the wire.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/witnessme" style="font-weight:600;text-decoration:none">WitnessMe</a></div></td><td style="vertical-align:middle">Web Inventory tool, takes screenshots and provides some extra bells&whistles to make life easier.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/witnessme" style="font-weight:600;text-decoration:none">WitnessMe</a></div></td><td style="vertical-align:middle">Take screenshots of websites, provide some server header info, and identify default credentials if possible</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/words-scraper" style="font-weight:600;text-decoration:none">Words Scraper</a></div></td><td style="vertical-align:middle">Selenium based web scraper to generate passwords list.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wordsmith" style="font-weight:600;text-decoration:none">Wordsmith</a></div></td><td style="vertical-align:middle">Assist with creating tailored wordlists, mostly based on geolocation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/writehat" style="font-weight:600;text-decoration:none">WriteHat</a></div></td><td style="vertical-align:middle">Collaborative penetration test reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/x8" style="font-weight:600;text-decoration:none">X8</a></div></td><td style="vertical-align:middle">Hidden parameters discovery suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xcat" style="font-weight:600;text-decoration:none">XCat</a></div></td><td style="vertical-align:middle">Automate XPath injection/XXE attacks to retrieve documents</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xffenum" style="font-weight:600;text-decoration:none">XFFenum</a></div></td><td style="vertical-align:middle">X-Forwarded-For [403 forbidden] enumeration.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xfltreat" style="font-weight:600;text-decoration:none">XFLTReaT</a></div></td><td style="vertical-align:middle">Tunnelling framework; supports TCP, UDP, ICMP, SOCKS, HTTP, SCTP, WebSocket, RDP</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xortool" style="font-weight:600;text-decoration:none">XORTool</a></div></td><td style="vertical-align:middle">Tool to analyze multi-byte xor cipher</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsrfprobe" style="font-weight:600;text-decoration:none">XSRFProbe</a></div></td><td style="vertical-align:middle">The Prime Cross Site Request Forgery Audit and Exploitation Toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsrfprobe" style="font-weight:600;text-decoration:none">XSRFProbe</a></div></td><td style="vertical-align:middle">Advanced Cross Site Request Forgery (CSRF/XSRF) audit and exploitation toolkit</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsshunter" style="font-weight:600;text-decoration:none">XSS Hunter</a></div></td><td style="vertical-align:middle">The fastest way to set up XSS Hunter to test and find blind cross-site scripting vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xss-hunter-express" style="font-weight:600;text-decoration:none">XSS Hunter Express</a></div></td><td style="vertical-align:middle">XSS probes host for finding blind XSS</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xss-hunter-express" style="font-weight:600;text-decoration:none">XSS Hunter Express</a></div></td><td style="vertical-align:middle">The fastest way to set up XSS Hunter to test and find blind XSS vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xss-radar" style="font-weight:600;text-decoration:none">XSS Radar</a></div></td><td style="vertical-align:middle">A Chrome extension for fast and easy XSS fuzzing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xss-hunter" style="font-weight:600;text-decoration:none">XSS hunter</a></div></td><td style="vertical-align:middle">XSS probes host for finding blind XSS</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xss-or" style="font-weight:600;text-decoration:none">XSS'OR</a></div></td><td style="vertical-align:middle">Hack with JavaScript.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xssor" style="font-weight:600;text-decoration:none">XSS'OR</a></div></td><td style="vertical-align:middle">Multi-purpose tool for XSS or JavaScript analysis</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xssor-2" style="font-weight:600;text-decoration:none">XSS'OR 2</a></div></td><td style="vertical-align:middle">Multi-purpose tool for XSS or JavaScript analysis</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsscon" style="font-weight:600;text-decoration:none">XSSCon</a></div></td><td style="vertical-align:middle">XSS automatic scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsscon" style="font-weight:600;text-decoration:none">XSSCon</a></div></td><td style="vertical-align:middle">Simple XSS Scanner tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xssmap" style="font-weight:600;text-decoration:none">XSSMap</a></div></td><td style="vertical-align:middle">Detect XSS vulnerability in Web Applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xssrocket" style="font-weight:600;text-decoration:none">XSSRocket</a></div></td><td style="vertical-align:middle">Written by Black Hat Ethical Hacking and #ChatGPT for offensive security and XSS attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsser" style="font-weight:600;text-decoration:none">XSSer</a></div></td><td style="vertical-align:middle">Automatic framework to detect, exploit and report XSS vulnerabilities in web-based applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsser" style="font-weight:600;text-decoration:none">XSSer</a></div></td><td style="vertical-align:middle">XSS automatic scanner and exploiter</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xssor" style="font-weight:600;text-decoration:none">XSSor</a></div></td><td style="vertical-align:middle">semi-automatic reflected and persistent XSS scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsstrike" style="font-weight:600;text-decoration:none">XSStrike</a></div></td><td style="vertical-align:middle">Most advanced XSS scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsstrike" style="font-weight:600;text-decoration:none">XSStrike</a></div></td><td style="vertical-align:middle">XSS detection tool, parser, payload generator, fuzzing engine, crawler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsswagger" style="font-weight:600;text-decoration:none">XSSwagger</a></div></td><td style="vertical-align:middle">A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsinator" style="font-weight:600;text-decoration:none">XSinator</a></div></td><td style="vertical-align:middle">XS-Leak browser test suite</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xspear" style="font-weight:600;text-decoration:none">XSpear</a></div></td><td style="vertical-align:middle">Powerfull XSS Scanning and Parameter analysis tool&gem.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xspear" style="font-weight:600;text-decoration:none">XSpear</a></div></td><td style="vertical-align:middle">XSS Scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xvna" style="font-weight:600;text-decoration:none">XVNA</a></div></td><td style="vertical-align:middle">Extreme Vulnerable Node Application, insecure webapp for security trainings</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xvwa" style="font-weight:600;text-decoration:none">XVWA</a></div></td><td style="vertical-align:middle">A badly coded web application that helps security enthusiasts to learn application security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxe-ftp" style="font-weight:600;text-decoration:none">XXE-FTP</a></div></td><td style="vertical-align:middle">A mini webserver with FTP support for XXE payloads.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxeinjector" style="font-weight:600;text-decoration:none">XXEinjector</a></div></td><td style="vertical-align:middle">Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxeinjector" style="font-weight:600;text-decoration:none">XXEinjector</a></div></td><td style="vertical-align:middle">Exploitation of XXE vulnerability using direct and different out of band methods.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxelixir" style="font-weight:600;text-decoration:none">XXElixir</a></div></td><td style="vertical-align:middle">This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxexploiter" style="font-weight:600;text-decoration:none">XXExploiter</a></div></td><td style="vertical-align:middle">Generates XML payloads, and automatically starts a server to serve the needed DTD's or to do data exfiltration for XXE attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxexploiter" style="font-weight:600;text-decoration:none">XXExploiter</a></div></td><td style="vertical-align:middle">Tool to help exploit XXE vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xenoscan" style="font-weight:600;text-decoration:none">XenoScan</a></div></td><td style="vertical-align:middle">Processes memory scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xenotix" style="font-weight:600;text-decoration:none">Xenotix</a></div></td><td style="vertical-align:middle">XSS detection and exploit framework (Windows only)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xenotix" style="font-weight:600;text-decoration:none">Xenotix</a></div></td><td style="vertical-align:middle">An advanced Cross Site Scripting vulnerability detection and exploitation framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xnlreveal" style="font-weight:600;text-decoration:none">XnlReveal</a></div></td><td style="vertical-align:middle">A Chrome browser extension to show alerts for several hidden elements.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xori" style="font-weight:600;text-decoration:none">Xori</a></div></td><td style="vertical-align:middle">Disassembly and static analysis library that provides triage analysis data</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xprobe2" style="font-weight:600;text-decoration:none">Xprobe2</a></div></td><td style="vertical-align:middle">Remote active operating system fingerprinting</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xray" style="font-weight:600;text-decoration:none">Xray</a></div></td><td style="vertical-align:middle">Web security scanner (XSS, SQLi, SSRF, XXE, etc.)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xss-sql-fuzz" style="font-weight:600;text-decoration:none">Xss-Sql-Fuzz</a></div></td><td style="vertical-align:middle">Burp Suite plugin for XSS and SQLi which add our payload to all parameters with one click.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yara" style="font-weight:600;text-decoration:none">YARA</a></div></td><td style="vertical-align:middle">Pattern matching helping malware researchers to identify and classify malware samples</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yasat" style="font-weight:600;text-decoration:none">YASAT</a></div></td><td style="vertical-align:middle">TYet Another Stupid Audit Tool; check general Linux system and common softwares configuration</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yasuo" style="font-weight:600;text-decoration:none">YASUO</a></div></td><td style="vertical-align:middle">Scans for vulnerable & exploitable 3rd-party web applications</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yaya" style="font-weight:600;text-decoration:none">YAYA</a></div></td><td style="vertical-align:middle">Yet Another Yara Automaton; automatically curate open source yara rules and run scans</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yara" style="font-weight:600;text-decoration:none">Yara</a></div></td><td style="vertical-align:middle">The pattern matching swiss knife for malware researchers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yara-toolkit" style="font-weight:600;text-decoration:none">Yara Toolkit</a></div></td><td style="vertical-align:middle">Yara rules editor, generator, scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yesweburp" style="font-weight:600;text-decoration:none">YesWeBurp</a></div></td><td style="vertical-align:middle">Access to all bug bounty programs directly inside Burp</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yet-another-robber" style="font-weight:600;text-decoration:none">Yet Another Robber</a></div></td><td style="vertical-align:middle">Yar is a tool for plunderin' organizations, users and/or repositories...</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yet-another-sniffer" style="font-weight:600;text-decoration:none">Yet Another Sniffer</a></div></td><td style="vertical-align:middle">A network analyzer that make easy to extract informations about network traffic.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yeti" style="font-weight:600;text-decoration:none">Yeti</a></div></td><td style="vertical-align:middle">Organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yoga" style="font-weight:600;text-decoration:none">Yoga</a></div></td><td style="vertical-align:middle">Your OSINT Graphical Analyzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yoga" style="font-weight:600;text-decoration:none">Yoga</a></div></td><td style="vertical-align:middle">Your OSINT Graphical Analyzer;
88 project to help people understand different courses of action to take based upon the data</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zed-attack-proxy" style="font-weight:600;text-decoration:none">Zed Attack Proxy</a></div></td><td style="vertical-align:middle">The world's most widely used web app scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zenmap" style="font-weight:600;text-decoration:none">Zenmap</a></div></td><td style="vertical-align:middle">GUI for Nmap</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zinnox-reporting-tool" style="font-weight:600;text-decoration:none">ZinnoX Reporting Tool</a></div></td><td style="vertical-align:middle">ZRT; project management, vulnerability management and pentest report creation application</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zmap" style="font-weight:600;text-decoration:none">Zmap</a></div></td><td style="vertical-align:middle">Collection of tools to scan and study massive networks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zphisher" style="font-weight:600;text-decoration:none">Zphisher</a></div></td><td style="vertical-align:middle">Automated phishing tool with multiple tunneling options; fork of Shellphish</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/a2sv" style="font-weight:600;text-decoration:none">a2sv</a></div></td><td style="vertical-align:middle">Auto Scanning to SSL Vulnerability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/abuseacl" style="font-weight:600;text-decoration:none">abuseACL</a></div></td><td style="vertical-align:middle">Automatically list vulnerable Windows ACEs/ACLs using DC'
88s LDAP to list users/groups/computers/OU/certificate templates and their nTSecurityDescriptor to check for vulnerable rights</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aclpwn" style="font-weight:600;text-decoration:none">aclpwn</a></div></td><td style="vertical-align:middle">Interacts with BloodHound to identify and exploit ACL based privilege escalation paths</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ad-ldap-enum" style="font-weight:600;text-decoration:none">ad-ldap-enum</a></div></td><td style="vertical-align:middle">LDAP based Active Directory user and group enumeration tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adpeas" style="font-weight:600;text-decoration:none">adPEAS</a></div></td><td style="vertical-align:middle">Powershell tool to automate Active Directory enumeration.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/additional-scanner-checks" style="font-weight:600;text-decoration:none">additional-scanner-checks</a></div></td><td style="vertical-align:middle">Collection of scanner checks missing in Burp.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adfsbrute" style="font-weight:600;text-decoration:none">adfsbrute</a></div></td><td style="vertical-align:middle">Test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/adidnsdump" style="font-weight:600;text-decoration:none">adidnsdump</a></div></td><td style="vertical-align:middle">Enumeration and exporting of all DNS records in ADIDNS domain or forest DNS zones</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aem-detector" style="font-weight:600;text-decoration:none">aem-detector</a></div></td><td style="vertical-align:middle">Discover Adobe Experience Manager (AEM) Content Management System (CMS) websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/afrog" style="font-weight:600;text-decoration:none">afrog</a></div></td><td style="vertical-align:middle">A vulnerability scanning tools for penetration testing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/airbash" style="font-weight:600;text-decoration:none">airbash</a></div></td><td style="vertical-align:middle">Fully automated WPA PSK PMKID and handshake capture script.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aircrack-ng" style="font-weight:600;text-decoration:none">aircrack-ng</a></div></td><td style="vertical-align:middle">Complete suite of tools to assess WiFi network security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/airgeddon" style="font-weight:600;text-decoration:none">airgeddon</a></div></td><td style="vertical-align:middle">Wireless network audit script</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/airgeddon" style="font-weight:600;text-decoration:none">airgeddon</a></div></td><td style="vertical-align:middle">This is a multi-use bash script for Linux systems to audit wireless networks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/al-khaser" style="font-weight:600;text-decoration:none">al-khaser</a></div></td><td style="vertical-align:middle">Public malware techniques used in the wild: virtual machine, emulation, debuggers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/altair" style="font-weight:600;text-decoration:none">altair</a></div></td><td style="vertical-align:middle">Modular web vulnerability scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/alterx" style="font-weight:600;text-decoration:none">alterx</a></div></td><td style="vertical-align:middle">Fast and customizable subdomain wordlist generator using DSL.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/alterx" style="font-weight:600;text-decoration:none">alterx</a></div></td><td style="vertical-align:middle">Customizable subdomain wordlist generator using DSL</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/amap" style="font-weight:600;text-decoration:none">amap</a></div></td><td style="vertical-align:middle">Identify applications even if they are running on a different port than normal.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/andor" style="font-weight:600;text-decoration:none">andor</a></div></td><td style="vertical-align:middle">Blind SQL Injection Tool with Golang.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/androguard" style="font-weight:600;text-decoration:none">androguard</a></div></td><td style="vertical-align:middle">Tool for reverse engineering and malware analysis of Android applications</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/androguard" style="font-weight:600;text-decoration:none">androguard</a></div></td><td style="vertical-align:middle">Reverse engineering and pentesting for Android applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/angr" style="font-weight:600;text-decoration:none">angr</a></div></td><td style="vertical-align:middle">A powerful and user-friendly binary analysis platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/angr" style="font-weight:600;text-decoration:none">angr</a></div></td><td style="vertical-align:middle">Platform-agnostic binary analysis framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/angularjs-csti-scanner" style="font-weight:600;text-decoration:none">angularjs-csti-scanner</a></div></td><td style="vertical-align:middle">Automated client-side template injection detection for AngularJS.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apk-mitm" style="font-weight:600;text-decoration:none">apk-mitm</a></div></td><td style="vertical-align:middle">A CLI application that automatically prepares Android APK files for HTTPS inspection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/apkurlgrep" style="font-weight:600;text-decoration:none">apkurlgrep</a></div></td><td style="vertical-align:middle">Extract endpoints from APK files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/appmon" style="font-weight:600;text-decoration:none">appmon</a></div></td><td style="vertical-align:middle">Framework for monitoring and tampering system API calls of native macOS, iOS and android apps.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/archaeologit" style="font-weight:600;text-decoration:none">archaeologit</a></div></td><td style="vertical-align:middle">Scans the history of GitHub repositories to find sensitive things.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/archerysec" style="font-weight:600;text-decoration:none">archerysec</a></div></td><td style="vertical-align:middle">Automate your application security orchestration and correlation (ASOC).</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/archtorify" style="font-weight:600;text-decoration:none">archtorify</a></div></td><td style="vertical-align:middle">Script for Arch Linux which use iptables settings to create a transparent proxy through Tor Network</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/arm_now" style="font-weight:600;text-decoration:none">arm_now</a></div></td><td style="vertical-align:middle">Tool that allows instant setup of virtual machines on various architectures for reverse, exploit, fuzzing and programming purpose</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/arp-scan" style="font-weight:600;text-decoration:none">arp-scan</a></div></td><td style="vertical-align:middle">Discover hosts on your network using ARP requests</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/assetfinder" style="font-weight:600;text-decoration:none">assetfinder</a></div></td><td style="vertical-align:middle">Find domains and subdomains related to a given domain.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/attack_range" style="font-weight:600;text-decoration:none">attack_range</a></div></td><td style="vertical-align:middle">Create vulnerable instrumented local or cloud environments to simulate attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/authz" style="font-weight:600;text-decoration:none">authz</a></div></td><td style="vertical-align:middle">Burp Suite plugin to test for authorization flaws.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autossrf" style="font-weight:600;text-decoration:none">autoSSRF</a></div></td><td style="vertical-align:middle">Smart context-based SSRF vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autosubtakeover" style="font-weight:600;text-decoration:none">autoSubTakeover</a></div></td><td style="vertical-align:middle">A tool used to check if a CNAME resolves to the scope address.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autochrome" style="font-weight:600;text-decoration:none">autochrome</a></div></td><td style="vertical-align:middle">A shiny new copy of Chromium that will bring colors in your hunt.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autopwn" style="font-weight:600;text-decoration:none">autopwn</a></div></td><td style="vertical-align:middle">Specify targets and run sets of tools against them.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/autowpscan" style="font-weight:600;text-decoration:none">autowpscan</a></div></td><td style="vertical-align:middle">An automated tool that automatically scanning a list of multiple websites with wordpress at once.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/avet" style="font-weight:600;text-decoration:none">avet</a></div></td><td style="vertical-align:middle">AntiVirus Evasion Tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/awesome-cve-poc" style="font-weight:600;text-decoration:none">awesome-cve-poc</a></div></td><td style="vertical-align:middle">A collection about Proof of Concepts of Co
88mmon Vulnerabilities and Exposures.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/aws_pwn" style="font-weight:600;text-decoration:none">aws_pwn</a></div></td><td style="vertical-align:middle">Collection of AWS penetration testing scripts</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud">Cloud</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/axiom" style="font-weight:600;text-decoration:none">axiom</a></div></td><td style="vertical-align:middle">Distribute the workload of many different scanning tools with ease.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/b374k" style="font-weight:600;text-decoration:none">b374k</a></div></td><td style="vertical-align:middle">PHP Webshell with handy features.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/b374k" style="font-weight:600;text-decoration:none">b374k</a></div></td><td style="vertical-align:middle">Webshell with many features: file manager, search, command execution, DB connection, SQL explorer, process list</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bwapp" style="font-weight:600;text-decoration:none">bWAPP</a></div></td><td style="vertical-align:middle">Buggy Web Application, insecure webapp for security trainings</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bwapp" style="font-weight:600;text-decoration:none">bWAPP</a></div></td><td style="vertical-align:middle">An extremely buggy web application!.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bxss" style="font-weight:600;text-decoration:none">bXSS</a></div></td><td style="vertical-align:middle">bXSS is a utility which can be used identify Blind Cross-Site Scripting.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/backslash-powered-scanner" style="font-weight:600;text-decoration:none">backslash-powered-scanner</a></div></td><td style="vertical-align:middle">Finds unknown classes of injection vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/badkarma" style="font-weight:600;text-decoration:none">badKarma</a></div></td><td style="vertical-align:middle">Advanced network reconnaissance tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/badsecrets" style="font-weight:600;text-decoration:none">badsecrets</a></div></td><td style="vertical-align:middle">A library for detecting known or weak cryptographic secrets across many web frameworks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/badsecrets" style="font-weight:600;text-decoration:none">badsecrets</a></div></td><td style="vertical-align:middle">A library for detecting known secrets across many web frameworks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/barq" style="font-weight:600;text-decoration:none">barq</a></div></td><td style="vertical-align:middle">The AWS Cloud Post Exploitation framework!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bbot" style="font-weight:600;text-decoration:none">bbot</a></div></td><td style="vertical-align:middle">OSINT automation for hackers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bbr" style="font-weight:600;text-decoration:none">bbr</a></div></td><td style="vertical-align:middle">Generation of bug bounty reports based on user provided templates</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bbradar.io" style="font-weight:600;text-decoration:none">bbradar.io</a></div></td><td style="vertical-align:middle">Fetches latest bug bounty programs from many platforms and consolidates them in one place.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bbrecon" style="font-weight:600;text-decoration:none">bbrecon</a></div></td><td style="vertical-align:middle">Service enumerating all targets on Internet covered by a bug bounty program</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bbrf" style="font-weight:600;text-decoration:none">bbrf</a></div></td><td style="vertical-align:middle">Help you coordinate your reconnaissance workflows across multiple devices.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bbscope" style="font-weight:600;text-decoration:none">bbscope</a></div></td><td style="vertical-align:middle">Scope gathering tool for multiple Bug Bounty platforms.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/beanshooter" style="font-weight:600;text-decoration:none">beanshooter</a></div></td><td style="vertical-align:middle">JMX enumeration and attacking; helps to identify common vulnerabilities on JMX endpoints</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bearer" style="font-weight:600;text-decoration:none">bearer</a></div></td><td style="vertical-align:middle">
88Scan your source code against top security and privacy risks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bearparser" style="font-weight:600;text-decoration:none">bearparser</a></div></td><td style="vertical-align:middle">PE parsing library (from PE-bear)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bettercap" style="font-weight:600;text-decoration:none">bettercap</a></div></td><td style="vertical-align:middle">The Swiss Army knife for WiFi, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bettercap" style="font-weight:600;text-decoration:none">bettercap</a></div></td><td style="vertical-align:middle">MITM framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bettercap-web-ui" style="font-weight:600;text-decoration:none">bettercap web UI</a></div></td><td style="vertical-align:middle">Web UI for bettercap</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/big-list-of-naughty-strings" style="font-weight:600;text-decoration:none">big-list-of-naughty-strings</a></div></td><td style="vertical-align:middle">A list of strings which have a high probability of causing issues when used as user-input data.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/binbloom" style="font-weight:600;text-decoration:none">binbloom</a></div></td><td style="vertical-align:middle"> Raw binary firmware analysis software; tries to determine the firmware loading address</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/binutils" style="font-weight:600;text-decoration:none">binutils</a></div></td><td style="vertical-align:middle">GNU collection of binary tools</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/binwalk" style="font-weight:600;text-decoration:none">binwalk</a></div></td><td style="vertical-align:middle">Fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/binwalk" style="font-weight:600;text-decoration:none">binwalk</a></div></td><td style="vertical-align:middle">Analyze, reverse engineer and extract firmware images (and other files, also usefull for Digital Forensics)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
88<a href="/tool/bkcrack" style="font-weight:600;text-decoration:none">bkcrack</a></div></td><td style="vertical-align:middle">Crack legacy zip encryption with Biham and Kocher's known plaintext attack</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bkhive" style="font-weight:600;text-decoration:none">bkhive</a></div></td><td style="vertical-align:middle">Dump the syskey bootkey from a Windows NT/2K/XP system hive, often used with samdump2, part of the ophcrack project</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bloodyad" style="font-weight:600;text-decoration:none">bloodyAD</a></div></td><td style="vertical-align:middle">Active Directory privilege escalation framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/boofuzz" style="font-weight:600;text-decoration:none">boofuzz</a></div></td><td style="vertical-align:middle">Network protocol fuzzing framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/boofuzz" style="font-weight:600;text-decoration:none">boofuzz</a></div></td><td style="vertical-align:middle">Network protocol fuzzing for humans.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/boomerang" style="font-weight:600;text-decoration:none">boomerang</a></div></td><td style="vertical-align:middle">x86 binaries to C decompiler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bore" style="font-weight:600;text-decoration:none">bore</a></div></td><td style="vertical-align:middle">Creates a TCP tunnel; exposing local ports to a remote server, bypassing standard NAT connection firewalls</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bore" style="font-weight:600;text-decoration:none">bore</a></div></td><td style="vertical-align:middle">A simple CLI tool for making tunnels to localhost.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bounty-targets" style="font-weight:600;text-decoration:none">
88bounty-targets</a></div></td><td style="vertical-align:middle">Crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into another git repo</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bounty-targets" style="font-weight:600;text-decoration:none">bounty-targets</a></div></td><td style="vertical-align:middle">Crawls bug bounty platform scopes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bounty-targets-data" style="font-weight:600;text-decoration:none">
88bounty-targets-data</a></div></td><td style="vertical-align:middle">Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bountyplz" style="font-weight:600;text-decoration:none">bountyplz</a></div></td><td style="vertical-align:middle">Automated security reporting from markdown templates.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bountyplz" style="font-weight:600;text-decoration:none">
88bountyplz</a></div></td><td style="vertical-align:middle">Automated bug bounty reporting/submission, supports HackerOne and Bugcrowd</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brakeman" style="font-weight:600;text-decoration:none">brakeman</a></div></td><td style="vertical-align:middle">Static analysis security vulnerability scanner for Ruby on Rails applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/broken-link-checker" style="font-weight:600;text-decoration:none">broken-link-checker</a></div></td><td style="vertical-align:middle">Find broken links, missing images, etc within your HTML.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/broken-link-hijacking" style="font-weight:600;text-decoration:none">broken-link-hijacking</a></div></td><td style="vertical-align:middle">Broken Link Hijacking Burp Suite extension.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/broneypote" style="font-weight:600;text-decoration:none">broneypote</a></div></td><td style="vertical-align:middle">Honeypot</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/honeypot-and-decoy">Honeypot and Decoy</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brutas" style="font-weight:600;text-decoration:none">brutas</a></div></td><td style="vertical-align:middle">Wordlists handcrafted and automated with <3</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brute-ratel" style="font-weight:600;text-decoration:none">brute ratel</a></div></td><td style="vertical-align:middle">A customized command and control center for red team and adversary simulation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brutespray" style="font-weight:600;text-decoration:none">brutespray</a></div></td><td style="vertical-align:middle">Automatically attempts default creds on found services based on Nmap output.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/brutesubs" style="font-weight:600;text-decoration:none">brutesubs</a></div></td><td style="vertical-align:middle">Automation framework for running multiple open sourced subdomain bruteforcing tools in parallel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bucket_finder" style="font-weight:600;text-decoration:none">bucket_finder</a></div></td><td style="vertical-align:middle">DigiNinja's bucket_finder utility.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bundler-audit" style="font-weight:600;text-decoration:none">bundler-audit</a></div></td><td style="vertical-align:middle">Patch-level verification for Bundler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-exporter" style="font-weight:600;text-decoration:none">burp-exporter</a></div></td><td style="vertical-align:middle">Copy a Burp Suite request to a file or the clipboard as multiple programming languages functions.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/burp-vulners-scanner" style="font-weight:600;text-decoration:none">burp-vulners-scanner</a></div></td><td style="vertical-align:middle">Vulnerability scanner based on vulners.com search API.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bxss.net" style="font-weight:600;text-decoration:none">bxss.net</a></div></td><td style="vertical-align:middle">Web service that allows for detection Blind XSS vulnerabilities within web applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/bypasswaf" style="font-weight:600;text-decoration:none">bypasswaf</a></div></td><td style="vertical-align:middle">Add headers to all Burp requests to bypass some WAF products.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/c7decrypt" style="font-weight:600;text-decoration:none">c7decrypt</a></div></td><td style="vertical-align:middle">Cisco password type-7 encryptor and decryptor</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cifrex" style="font-weight:600;text-decoration:none">cIFrex</a></div></td><td style="vertical-align:middle">Regexp static code analysis</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cadaver" style="font-weight:600;text-decoration:none">cadaver</a></div></td><td style="vertical-align:middle">Command-line WebDAV client.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/caido" style="font-weight:600;text-decoration:none">caido</a></div></td><td style="vertical-align:middle">A lightweight web security auditing toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cameradar" style="font-weight:600;text-decoration:none">cameradar</a></div></td><td style="vertical-align:middle">
88Hacks its way into RTSP videosurveillance cameras.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/capa" style="font-weight:600;text-decoration:none">capa</a></div></td><td style="vertical-align:middle">The FLARE team's open-source tool to identify capabilities in executable files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cariddi" style="font-weight:600;text-decoration:none">cariddi</a></div></td><td style="vertical-align:middle">Takes a list of domains, crawls urls and scans for endpoints, secrets, api keys, file extensions, tokens</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cariddi" style="font-weight:600;text-decoration:none">cariddi</a></div></td><td style="vertical-align:middle">Crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/catphish" style="font-weight:600;text-decoration:none">catphish</a></div></td><td style="vertical-align:middle">Generate similar-looking domains for phishing attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cc.py" style="font-weight:600;text-decoration:none">cc.py</a></div></td><td style="vertical-align:middle">Extracting URLs of a specific target based on the results of commoncrawl.org.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ccs" style="font-weight:600;text-decoration:none">ccs</a></div></td><td style="vertical-align:middle">Code Credential Scanner; scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/celerystalk" style="font-weight:600;text-decoration:none">celerystalk</a></div></td><td style="vertical-align:middle">An asynchronous enumeration & vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cerbrutus" style="font-weight:600;text-decoration:none">cerbrutus</a></div></td><td style="vertical-align:middle">Network brute force tool, faster than other existing solutions.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cero" style="font-weight:600;text-decoration:none">cero</a></div></td><td style="vertical-align:middle">Scrape domain names from SSL certificates of arbitrary hosts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certsniff" style="font-weight:600;text-decoration:none">certSniff</a></div></td><td style="vertical-align:middle">A certificate transparency log keyword sniffer written in Python.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certmitm" style="font-weight:600;text-decoration:none">certmitm</a></div></td><td style="vertical-align:middle">A tool for testing for certificate validation vulnerabilities of TLS connections.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certmon" style="font-weight:600;text-decoration:none">certmon</a></div></td><td style="vertical-align:middle">A simple certificate expiration monitor script.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certs.io" style="font-weight:600;text-decoration:none">certs.io</a></div></td><td style="vertical-align:middle">Search the entire internet by data in TLS certificates.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/certsync" style="font-weight:600;text-decoration:none">certsync</a></div></td><td style="vertical-align:middle">Dump NTDS with golden certificates and UnPAC the hash</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chainsaw" style="font-weight:600;text-decoration:none">
88chainsaw</a></div></td><td style="vertical-align:middle">Rapidly search and hunt through windows forensic artefacts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/changedetectionio" style="font-weight:600;text-decoration:none">changedetection.io</a></div></td><td style="vertical-align:middle">Self-hosted website change detection tracking, monitoring and notification service</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/changedetection.io" style="font-weight:600;text-decoration:none">changedetection.io</a></div></td><td style="vertical-align:middle">Page change monitoring with alerts a breezem, the best way to monitor website changes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/changeme" style="font-weight:600;text-decoration:none">changeme</a></div></td><td style="vertical-align:middle">A default credential scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cheat.sh" style="font-weight:600;text-decoration:none">cheat.sh</a></div></td><td style="vertical-align:middle">The only cheat sheet you need.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/checkov" style="font-weight:600;text-decoration:none">checkov</a></div></td><td style="vertical-align:middle">Prevent cloud misconfigurations and find vulnerabilities during build-time.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chipsec" style="font-weight:600;text-decoration:none">chipsec</a></div></td><td style="vertical-align:middle">Platform security assessment framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chisel" style="font-weight:600;text-decoration:none">chisel</a></div></td><td style="vertical-align:middle">Fast TCP tunneling over HTTP secured by SSH</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/chkrootkit" style="font-weight:600;text-decoration:none">chkrootkit</a></div></td><td style="vertical-align:middle">Locally checks for signs of a rootkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cilium" style="font-weight:600;text-decoration:none">cilium</a></div></td><td style="vertical-align:middle">eBPF-based networking, security, and observability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/clair" style="font-weight:600;text-decoration:none">clair</a></div></td><td style="vertical-align:middle">
88Vulnerability static analysis for containers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/clairvoyance" style="font-weight:600;text-decoration:none">clairvoyance</a></div></td><td style="vertical-align:middle">Obtain GraphQL API Schema even if the introspection is not enabled.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/clairvoyance" style="font-weight:600;text-decoration:none">clairvoyance</a></div></td><td style="vertical-align:middle">Obtain GraphQL API schema even if the introspection is disabled by abusing the "did you mean" feature</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloud_enum" style="font-weight:600;text-decoration:none">cloud_enum</a></div></td><td style="vertical-align:middle">Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudflare-origin-ip" style="font-weight:600;text-decoration:none">cloudflare-origin-ip</a></div></td><td style="vertical-align:middle">Try to find the origin IP of a webapp protected by Cloudflare.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudlist" style="font-weight:600;text-decoration:none">cloudlist</a></div></td><td style="vertical-align:middle">Cloudlist is a tool for listing Assets from multiple Cloud Providers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cloudsploit" style="font-weight:600;text-decoration:none">cloudsploit</a></div></td><td style="vertical-align:middle">Cloud Security Posture Management (CSPM).</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cnames" style="font-weight:600;text-decoration:none">cnames</a></div></td><td style="vertical-align:middle">Take a list of resolved subdomains and output any corresponding CNAMES en masse.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/co2" style="font-weight:600;text-decoration:none">co2</a></div></td><td style="vertical-align:middle">A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/codeql" style="font-weight:600;text-decoration:none">codeql</a></div></td><td style="vertical-align:middle">Power security researchers around the world as well as code scanning.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/commit-stream" style="font-weight:600;text-decoration:none">commit-stream</a></div></td><td style="vertical-align:middle">OSINT tool for finding Github repositories by extracting commit logs in real time.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/commix" style="font-weight:600;text-decoration:none">commix</a></div></td><td style="vertical-align:middle">Web-based command injection tester</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cook" style="font-weight:600;text-decoration:none">cook</a></div></td><td style="vertical-align:middle">Overpower wordlist generator, words permutation and combinations, encoding/decoding...</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cook" style="font-weight:600;text-decoration:none">cook</a></div></td><td style="vertical-align:middle">Wordlist generator: create permutations and combinations of words with predefined sets of extensions, words and patterns/function to create complex endpoints, wordlists and passwords</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cookie_crimes" style="font-weight:600;text-decoration:none">cookie_crimes</a></div></td><td style="vertical-align:middle">Read local Chrome cookies without root or decrypting.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cookie_crimes" style="font-weight:600;text-decoration:none">cookie_crimes</a></div></td><td style="vertical-align:middle">Read local Chrome cookies without root or decrypting and display then in JSON</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crackerjack" style="font-weight:600;text-decoration:none">crackerjack</a></div></td><td style="vertical-align:middle">Hashcat Web Interface.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crackpkcs12" style="font-weight:600;text-decoration:none">crackpkcs12</a></div></td><td style="vertical-align:middle">Multithreaded program to crack PKCS#12 files (p12 and pfx extensions)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crawley" style="font-weight:600;text-decoration:none">crawley</a></div></td><td style="vertical-align:middle">The unix-way web crawler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/creddump" style="font-weight:600;text-decoration:none">creddump</a></div></td><td style="vertical-align:middle">Dump windows credentials</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/creepycrawler" style="font-weight:600;text-decoration:none">creepyCrawler</a></div></td><td style="vertical-align:middle">Crawl a site and extract useful informations for recon.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crithit" style="font-weight:600;text-decoration:none">crithit</a></div></td><td style="vertical-align:middle">Takes a single wordlist item and tests it one by one over a large collection of websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crowbar" style="font-weight:600;text-decoration:none">crowbar</a></div></td><td style="vertical-align:middle">Brute forcing tool that support several uncommon protocols.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crowdsec" style="font-weight:600;text-decoration:none">crowdsec</a></div></td><td style="vertical-align:middle">Offers crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crtndtry" style="font-weight:600;text-decoration:none">crtndtry</a></div></td><td style="vertical-align:middle">Yet another subdomain finder.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crunch" style="font-weight:600;text-decoration:none">crunch</a></div></td><td style="vertical-align:middle">Wordlist generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crunch" style="font-weight:600;text-decoration:none">crunch</a></div></td><td style="vertical-align:middle">Wordlist generator where you can specify a character set or any set of characters to be used.<
88/td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/crypto-identifier" style="font-weight:600;text-decoration:none">crypto-identifier</a></div></td><td style="vertical-align:middle">Tool that try to identify what cipher is used and uncipher the data</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/csp-analyzer" style="font-weight:600;text-decoration:none">csp-analyzer</a></div></td><td style="vertical-align:middle">Analyze Content-Security-Policy header of a given URL.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/csprecon" style="font-weight:600;text-decoration:none">csprecon</a></div></td><td style="vertical-align:middle">Discover new target domains using Content Security Policy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/csrf-scanner" style="font-weight:600;text-decoration:none">csrf-scanner</a></div></td><td style="vertical-align:middle">CSRF Scanner Extension for Burp Suite Pro.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cstc" style="font-weight:600;text-decoration:none">cstc</a></div></td><td style="vertical-align:middle">Burp Suite extension that allows request/response modification using a GUI.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ctf-party" style="font-weight:600;text-decoration:none">ctf-party</a></div></td><td style="vertical-align:middle">Library to enhance and speed up script/exploit writing for CTF players</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ctf-tools" style="font-weight:600;text-decoration:none">ctf-tools</a></div></td><td style="vertical-align:middle">Some setup scripts for security research tools.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ctf_import" style="font-weight:600;text-decoration:none">ctf_import</a></div></td><td style="vertical-align:middle">Library to run basic functions from stripped binaries</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ctftool" style="font-weight:600;text-decoration:none">ctftool</a></div></td><td style="vertical-align:middle">
88Interactive CTF exploration tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/curate" style="font-weight:600;text-decoration:none">curate</a></div></td><td style="vertical-align:middle">A tool for fetching archived URLs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cve" style="font-weight:600;text-decoration:none">cve</a></div></td><td style="vertical-align:middle">Gather and update all available and newest CVEs with their PoC.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cve-collector" style="font-weight:600;text-decoration:none">cve-collector</a></div></td><td style="vertical-align:middle">Simple latest CVE collector written in Python.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cve-search" style="font-weight:600;text-decoration:none">cve-search</a></div></td><td style="vertical-align:middle">Tool to import CVE and CPE into a MongoDB to facilitate search and processing of CVEs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cve-search" style="font-weight:600;text-decoration:none">cve-search</a></div></td><td style="vertical-align:middle">A tool to perform local searches for known vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cvecrowd.com" style="font-weight:600;text-decoration:none">cvecrowd.com</a></div></td><td style="vertical-align:middle">Lists CVEs that are currently being discussed on the social network Mastodon.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cvss-suite" style="font-weight:600;text-decoration:none">cvss-suite</a></div></td><td style="vertical-align:middle">CVSS calculator library</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/cybernews-personal-data-leak-check" style="font-weight:600;text-decoration:none">cybernews personal data leak check</a></div></td><td style="vertical-align:middle">Service to check if an account has been compromised in a data breach, only tells if the account is compromised</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/capital" style="font-weight:600;text-decoration:none">c{api}tal</a></div></td><td style="vertical-align:middle">A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dbmonster" style="font-weight:600;text-decoration:none">dBmonster</a></div></td><td style="vertical-align:middle">A multitool for tracking and locating nearby devices via their RF activities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dataleaks" style="font-weight:600;text-decoration:none">dataleaks</a></div></td><td style="vertical-align:middle">Self-hosted data breach search engine</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/datasploit" style="font-weight:600;text-decoration:none">datasploit</a></div></td><td style="vertical-align:middle">OSINT framework, find, aggregate and export data</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/de4dot" style="font-weight:600;text-decoration:none">de4dot</a></div></td><td style="vertical-align:middle">.NET deobfuscator and unpacker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dead-link-checker" style="font-weight:600;text-decoration:none">dead-link-checker</a></div></td><td style="vertical-align:middle">A dead-simple way to recursively look for broken links on a web page.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/default-http-login-hunter" style="font-weight:600;text-decoration:none">default-http-login-hunter</a></div></td><td style="vertical-align:middle">Login hunter of default credentials for administrative web interfaces.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/demovfuscator" style="font-weight:600;text-decoration:none">demovfuscator</a></div></td><td style="vertical-align:middle">A work-in-progress deobfuscator for movfuscated binaries.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/deps.dev" style="font-weight:600;text-decoration:none">deps.dev</a></div></td><td style="vertical-align:middle">Better understand the structure, construction, and security of open source software packages.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/depsdev" style="font-weight:600;text-decoration:none">depsdev</a></div></td><td style="vertical-align:middle">CLI client for deps.dev API.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/deser-node" style="font-weight:600;text-decoration:none">deser-node</a></div></td><td style="vertical-align:middle">NodeJS deserialization payload generator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/detect-secrets" style="font-weight:600;text-decoration:none">detect-secrets</a></div></td><td style="vertical-align:middle">An enterprise friendly way of detecting and preventing secrets in code.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/detectify-cves" style="font-weight:600;text-decoration:none">detectify-cves</a></div></td><td style="vertical-align:middle">Find CVEs that don't have a Detectify modules.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dex2jar" style="font-weight:600;text-decoration:none">dex2jar</a></div></td><td style="vertical-align:middle">Tools to work with android .dex and java .class files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/differer" style="font-weight:600;text-decoration:none">differer</a></div></td><td style="vertical-align:middle">differer finds how URLs are parsed by different languages in order to help bug hunters break filters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/diosts" style="font-weight:600;text-decoration:none">diosts</a></div></td><td style="vertical-align:middle">The disclose.io security.txt scraper (diosts) takes a list of domains as the input, retrieves and validates the security.txt if available and outputs it in the disclose.io JSON format.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dirb" style="font-weight:600;text-decoration:none">dirb</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dirbuster" style="font-weight:600;text-decoration:none">dirbuster</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dirhunt" style="font-weight:600;text-decoration:none">dirhunt</a></div></td><td style="vertical-align:middle">Find web directories without bruteforce.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dirlstr" style="font-weight:600;text-decoration:none">dirlstr</a></div></td><td style="vertical-align:middle">Finds Directory Listings or open S3 buckets from a list of URLs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dirsearch" style="font-weight:600;text-decoration:none">dirsearch</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/discover" style="font-weight:600;text-decoration:none">discover</a></div></td><td style="vertical-align:middle">Scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/discover" style="font-weight:600;text-decoration:none">discover</a></div></td><td style="vertical-align:middle">Custom bash scripts used to automate various penetration testing tasks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/disposable-email-domains" style="font-weight:600;text-decoration:none">disposable-email-domains</a></div></td><td style="vertical-align:middle">A list of disposable and temporary email address domains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/distributed-jwt-cracker" style="font-weight:600;text-decoration:none">distributed-jwt-cracker</a></div></td><td style="vertical-align:middle">HS256 JWT token distributed brute force cracker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/django-defectdojo" style="font-weight:600;text-decoration:none">django-DefectDojo</a></div></td><td style="vertical-align:middle">DevSecOps, ASPM, Vulnerability Management.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dmut" style="font-weight:600;text-decoration:none">dmut</a></div></td><td style="vertical-align:middle">Perform permutations, mutations and alteration of subdomains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnspy" style="font-weight:600;text-decoration:none">dnSpy</a></div></td><td style="vertical-align:middle">.NET assembly debugger, decompiler and editor</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnspyex" style="font-weight:600;text-decoration:none">dnSpyEx</a></div></td><td style="vertical-align:middle">.NET assembly debugger, decompiler and editor; fork of dnSpy</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dns-fuzzer" style="font-weight:600;text-decoration:none">dns-fuzzer</a></div></td><td style="vertical-align:middle">It comes with crash detection and crash replay. To use it, first create a file called "records" in the same directory as the fuzzer with the dns records for the target in the following format: <record type>,<record question>,<record class></td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsreaper" style="font-weight:600;text-decoration:none">dnsReaper</a></div></td><td style="vertical-align:middle">Subdomain takeover tool for attackers, bug bounty hunters and the blue team!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsx" style="font-weight:600;text-decoration:none">dnsX</a></div></td><td style="vertical-align:middle">Fast and multi-purpose DNS toolkit designed for running DNS queries.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnscan" style="font-weight:600;text-decoration:none">dnscan</a></div></td><td style="vertical-align:middle">Python wordlist-based DNS subdomain scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnscat2" style="font-weight:600;text-decoration:none">dnscat2</a></div></td><td style="vertical-align:middle">DNS tunnel meant for encrypted Command & Control channel, data exfiltration</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnscat2" style="font-weight:600;text-decoration:none">dnscat2</a></div></td><td style="vertical-align:middle">Create an encrypted command-and-control (C&C) channel over the DNS protocol.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsenum" style="font-weight:600;text-decoration:none">dnsenum</a></div></td><td style="vertical-align:middle">Enumerates DNS information of a domain and to discover non-contiguous ip blocks.<
88/td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsenum" style="font-weight:600;text-decoration:none">dnsenum</a></div></td><td style="vertical-align:middle">DNS reconnaissance tool: AXFR, DNS records enumeration, subdomain bruteforce, range reverse lookup</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsenum2" style="font-weight:600;text-decoration:none">dnsenum2</a></div></td><td style="vertical-align:middle">Continuation of dnsenum project</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsgen" style="font-weight:600;text-decoration:none">dnsgen</a></div></td><td style="vertical-align:middle">Generates combination of domain names from the provided input.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnstwist" style="font-weight:600;text-decoration:none">dnstwist</a></div></td><td style="vertical-align:middle">Domain name permutation engine for detecting several types of attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnstwist_" style="font-weight:600;text-decoration:none">dnstwist_</a></div></td><td style="vertical-align:middle">A tool to monitor for potential spear phishing domains and send to Slack.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnswalk" style="font-weight:600;text-decoration:none">dnswalk</a></div></td><td style="vertical-align:middle">A DNS database debugger.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dnsx" style="font-weight:600;text-decoration:none">dnsx</a></div></td><td style="vertical-align:middle">Multi-purpose DNS toolkit allow to run multiple DNS queries</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/docem" style="font-weight:600;text-decoration:none">docem</a></div></td><td style="vertical-align:middle">Uility to embed XXE and XSS payloads in docx, odt, pptx, etc</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/docem" style="font-weight:600;text-decoration:none">docem</a></div></td><td style="vertical-align:middle">Utility to embed XXE and XSS payloads in docx, odt, pptx...</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/docker-bench-security" style="font-weight:600;text-decoration:none">docker-bench-security</a></div></td><td style="vertical-align:middle">Check for dozens of common best-practices around deploying Docker containers in production.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dom-red" style="font-weight:600;text-decoration:none">dom-red</a></div></td><td style="vertical-align:middle">Small script to check a list of domains against open redirect vulnerability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/domain_hunter" style="font-weight:600;text-decoration:none">domain_hunter</a></div></td><td style="vertical-align:middle">Try to find all subdomains, similar-domains and related-domains of an organization.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/domained" style="font-weight:600;text-decoration:none">domained</a></div></td><td style="vertical-align:middle">Multi Tool Subdomain Enumeration.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/domainfinder" style="font-weight:600;text-decoration:none">domainfinder</a></div></td><td style="vertical-align:middle">Find a domain from an IP address</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dontgo403" style="font-weight:600;text-decoration:none">dontgo403</a></div></td><td style="vertical-align:middle">Tool to bypass 40X response codes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dorky" style="font-weight:600;text-decoration:none">dorky</a></div></td><td style="vertical-align:middle">Quickly do keyword searches over GitLab and GitHub for OSINT & bug bounty recon.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dot" style="font-weight:600;text-decoration:none">dot</a></div></td><td style="vertical-align:middle">The Deepfake Offensive Toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dotpeek" style="font-weight:600;text-decoration:none">dotPeek</a></div></td><td style="vertical-align:middle">.NET decompiler and assembly browser</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/doxycannon" style="font-weight:600;text-decoration:none">doxycannon</a></div></td><td style="vertical-align:middle">Proxycannon and botnet, using docker, ovpn files, tor nodes, and dante socks5 proxies that may be used for password spraying</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/drek" style="font-weight:600;text-decoration:none">drek</a></div></td><td style="vertical-align:middle">A static-code-analysis tool for performing security-focused code reviews.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/driftctl" style="font-weight:600;text-decoration:none">driftctl</a></div></td><td style="vertical-align:middle">
88Detect, track and alert on infrastructure drift.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/driftctl" style="font-weight:600;text-decoration:none">driftctl</a></div></td><td style="vertical-align:middle">Measures infrastructure as code coverage, and tracks infrastructure drift</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/droopescan" style="font-weight:600;text-decoration:none">droopescan</a></div></td><td style="vertical-align:middle">CMS scanner supporting SilverStripe and Wordpress, having partial support for Joomla, Moodle, Drupal</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/droopescan" style="font-weight:600;text-decoration:none">droopescan</a></div></td><td style="vertical-align:middle">A plugin-based scanner that aids security researchers in identifying issues with several CMSs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/drozer" style="font-weight:600;text-decoration:none">drozer</a></div></td><td style="vertical-align:middle">The leading security assessment framework for Android.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/drupwn" style="font-weight:600;text-decoration:none">drupwn</a></div></td><td style="vertical-align:middle">Drupal CMS enumeration and exploitation tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ds_store_exp" style="font-weight:600;text-decoration:none">ds_store_exp</a></div></td><td style="vertical-align:middle">Extract files from .DS_Store recursively</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dsieve" style="font-weight:600;text-decoration:none">dsieve</a></div></td><td style="vertical-align:middle">Filter and enrich a list of subdomains by level.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dsniff" style="font-weight:600;text-decoration:none">dsniff</a></div></td><td style="vertical-align:middle">Collection of tools for network auditing and penetration testing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dtd-finder" style="font-weight:600;text-decoration:none">dtd-finder</a></div></td><td style="vertical-align:middle">Identify DTDs on filesystem snapshot and build XXE payloads using those local DTDs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dufflebag" style="font-weight:600;text-decoration:none">dufflebag</a></div></td><td style="vertical-align:middle">Search exposed EBS volumes for secrets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dumpcreds" style="font-weight:600;text-decoration:none">dumpcreds</a></div></td><td style="vertical-align:middle">May be used to extract various credentials from running processes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvcs-ripper" style="font-weight:600;text-decoration:none">dvcs-ripper</a></div></td><td style="vertical-align:middle">Dump web accessible (distributed) version control systems (DVCS/VCS): SVN, GIT, Mercurial/hg, Bazaar/bzr, â¦</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/dvcs-ripper" style="font-weight:600;text-decoration:none">dvcs-ripper</a></div></td><td style="vertical-align:middle">Rip web accessible version control systems: svn, git...</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eldap-ldap-search-and-filter" style="font-weight:600;text-decoration:none">eLdap-Ldap-Search-and-Filter</a></div></td><td style="vertical-align:middle">A tool that helps users searching and filtering queries in Ldap environment.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/etoolsch" style="font-weight:600;text-decoration:none">eTools.ch</a></div></td><td style="vertical-align:middle">Metasearch engine, query 16 search engines in parallel</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/edb" style="font-weight:600;text-decoration:none">edb</a></div></td><td style="vertical-align:middle">Cross platform AArch32/x86/x86-64 debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/egressbuster" style="font-weight:600;text-decoration:none">egressbuster</a></div></td><td style="vertical-align:middle">Check egress filtering and identify if ports are allowed to automatically spawn a shell.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/elpscrk" style="font-weight:600;text-decoration:none">elpscrk</a></div></td><td style="vertical-align:middle">An Intelligent wordlist generator based on user profiling, permutations, and statistics.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/endext" style="font-weight:600;text-decoration:none">
88endext</a></div></td><td style="vertical-align:middle">A tool for extracting all the possible endpoints from the JS files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/endlessh" style="font-weight:600;text-decoration:none">endlessh</a></div></td><td style="vertical-align:middle">SSH tarpit that slowly sends an endless banner </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/honeypot-and-decoy">Honeypot and Decoy</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/endoflife.date" style="font-weight:600;text-decoration:none">
88endoflife.date</a></div></td><td style="vertical-align:middle">Informative site with EoL dates of everything.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/enum4linux" style="font-weight:600;text-decoration:none">enum4Linux</a></div></td><td style="vertical-align:middle">Enumerate data from Windows and Samba hosts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/enum4linux" style="font-weight:600;text-decoration:none">enum4linux</a></div></td><td style="vertical-align:middle">Windows Samba enumeration tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/enum4linux-ng" style="font-weight:600;text-decoration:none">enum4linux-ng</a></div></td><td style="vertical-align:middle">Windows Samba enumeration tool, next generation version of enum4linux</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/enum4linux-ng" style="font-weight:600;text-decoration:none">enum4linux-ng</a></div></td><td style="vertical-align:middle">A Windows/Samba enumeration tool with additional features like JSON/YAML export.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/envizon" style="font-weight:600;text-decoration:none">envizon</a></div></td><td style="vertical-align:middle">Vulnerability management and reporting platform</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/eos" style="font-weight:600;text-decoration:none">eos</a></div></td><td style="vertical-align:middle">Enemies Of Symfony - debug mode Symfony looter.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/espionage" style="font-weight:600;text-decoration:none">espionage</a></div></td><td style="vertical-align:middle">Collects informations related to domains whois, history, dns records and more.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/evil-ssdp" style="font-weight:600;text-decoration:none">evil SSDP</a></div></td><td style="vertical-align:middle">Spoof SSDP replies to phish for credentials and NetNTLM challenge/response.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/evil-winrm" style="font-weight:600;text-decoration:none">evil-winrm</a></div></td><td style="vertical-align:middle">The ultimate WinRM shell for hacking/pentesting.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/evilginx2" style="font-weight:600;text-decoration:none">evilginx2</a></div></td><td style="vertical-align:middle">Man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/evilgophish" style="font-weight:600;text-decoration:none">evilgophish</a></div></td><td style="vertical-align:middle">
88Combination of evilginx3 and GoPhish.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/exfilkit" style="font-weight:600;text-decoration:none">exfilkit</a></div></td><td style="vertical-align:middle">Data exfiltration utility for testing detection capabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/exif" style="font-weight:600;text-decoration:none">exif</a></div></td><td style="vertical-align:middle">Shows EXIF information for JPEG files only</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/exiv2" style="font-weight:600;text-decoration:none">exiv2</a></div></td><td style="vertical-align:middle">Image metadata library and tools.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/extract-endpoints" style="font-weight:600;text-decoration:none">extract-endpoints</a></div></td><td style="vertical-align:middle">Extract endpoints from source files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/extundelete" style="font-weight:600;text-decoration:none">extundelete</a></div></td><td style="vertical-align:middle">Tool to recover deleted files from an ext3 or ext4 partition</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ezxss" style="font-weight:600;text-decoration:none">ezXSS</a></div></td><td style="vertical-align:middle">An easy way for penetration testers and bug bounty hunters to test (blind) XSS.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/faction" style="font-weight:600;text-decoration:none">faction</a></div></td><td style="vertical-align:middle"> Pen Test Report Generation and Assessment Collaboration </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/falco" style="font-weight:600;text-decoration:none">falco</a></div></td><td style="vertical-align:middle">Cloud native runtime security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fastsub" style="font-weight:600;text-decoration:none">fastsub</a></div></td><td style="vertical-align:middle">A DNS bruteforcer with multi-threading, and handling of bad resolvers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/favicon-hashtrick" style="font-weight:600;text-decoration:none">favicon-hashtrick</a></div></td><td style="vertical-align:middle">Python script implementing the favicon hash trick to find subdomains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/favirecon" style="font-weight:600;text-decoration:none">favirecon</a></div></td><td style="vertical-align:middle">Use favicon.ico to improve your target recon phase.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fcrackzip" style="font-weight:600;text-decoration:none">fcrackzip</a></div></td><td style="vertical-align:middle">Zip password cracker.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/feroxbuster" style="font-weight:600;text-decoration:none">feroxbuster</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ffuf" style="font-weight:600;text-decoration:none">ffuf</a></div></td><td style="vertical-align:middle">Fast web fuzzer written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ffuf" style="font-weight:600;text-decoration:none">ffuf</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce); but also a web fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ffufpostprocessing" style="font-weight:600;text-decoration:none">ffufPostprocessing</a></div></td><td style="vertical-align:middle">Golang tool which helps dropping the irrelevant entries from your ffuf result file.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fibratus" style="font-weight:600;text-decoration:none">fibratus</a></div></td><td style="vertical-align:middle">Modern tool for Windows kernel exploration and tracing with a focus on security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/findsecuritycontacts.com" style="font-weight:600;text-decoration:none">findsecuritycontacts.com</a></div></td><td style="vertical-align:middle">Scans the top 500 sites daily for their security.txt file or DNS records.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fingerprintjs" style="font-weight:600;text-decoration:none">fingerprintjs</a></div></td><td style="vertical-align:middle">Browser fingerprinting library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fingerprintx" style="font-weight:600;text-decoration:none">fingerprintx</a></div></td><td style="vertical-align:middle">Standalone utility for service discovery on open ports!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fireelf" style="font-weight:600;text-decoration:none">fireELF</a></div></td><td style="vertical-align:middle">Fileless linux malware framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/flan" style="font-weight:600;text-decoration:none">flan</a></div></td><td style="vertical-align:middle">A pretty sweet vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/flutterguard" style="font-weight:600;text-decoration:none">flutterguard</a></div></td><td style="vertical-align:middle"> Know and see everything an attacker can extract and get from your published Flutter app </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/adversary-simulation">Adversary Simulation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fprobe" style="font-weight:600;text-decoration:none">fprobe</a></div></td><td style="vertical-align:middle">Take a list of domains/subdomains and probe for working http/https server.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fscan" style="font-weight:600;text-decoration:none">fscan</a></div></td><td style="vertical-align:middle">Kscan is an asset mapping tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fuxploider" style="font-weight:600;text-decoration:none">fuxploider</a></div></td><td style="vertical-align:middle">File upload vulnerability scanner and exploitation tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fuxploider" style="font-weight:600;text-decoration:none">fuxploider</a></div></td><td style="vertical-align:middle">Automates the process of detecting and exploiting file upload forms flaws</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fuzzagotchi" style="font-weight:600;text-decoration:none">fuzzagotchi</a></div></td><td style="vertical-align:middle">A fuzzing tool written in Go. It helps your pentesting journey.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/fuzzuli" style="font-weight:600;text-decoration:none">fuzzuli</a></div></td><td style="vertical-align:middle">Find critical backup files by creating a dynamic wordlist based on the domain.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gosint" style="font-weight:600;text-decoration:none">gOSINT</a></div></td><td style="vertical-align:middle">OSINT framework; find mails, dumps, retrieve Telegram history and info about hosts</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gateway-finder" style="font-weight:600;text-decoration:none">gateway-finder</a></div></td><td style="vertical-align:middle">Identify routers on the local LAN and paths to the Internet.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gateway-finder-imp" style="font-weight:600;text-decoration:none">gateway-finder-imp</a></div></td><td style="vertical-align:middle">Identify routers on the local LAN and paths to the Internet.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gau" style="font-weight:600;text-decoration:none">gau</a></div></td><td style="vertical-align:middle">Fetch known URLs from several sources.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gaussrf" style="font-weight:600;text-decoration:none">gaussrf</a></div></td><td style="vertical-align:middle">Fetch known URLs from several sources and Filter Urls With OpenRedirection or SSRF Parameters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gcp_scanner" style="font-weight:600;text-decoration:none">gcp_scanner</a></div></td><td style="vertical-align:middle">A comprehensive scanner for Google Cloud.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gef" style="font-weight:600;text-decoration:none">gef</a></div></td><td style="vertical-align:middle">A modern experience for GDB with advanced debugging capabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/getjs" style="font-weight:600;text-decoration:none">getJS</a></div></td><td style="vertical-align:middle">A tool to fastly get all javascript sources/files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/getsploit" style="font-weight:600;text-decoration:none">getsploit</a></div></td><td style="vertical-align:middle">Command line utility for searching and downloading exploits.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/getsploit" style="font-weight:600;text-decoration:none">getsploit</a></div></td><td style="vertical-align:middle">CLI utility for searching and downloading exploits from Exploit-DB, Metasploit, Packetstorm and others</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gf" style="font-weight:600;text-decoration:none">gf</a></div></td><td style="vertical-align:middle">A wrapper around grep to avoid typing common patterns.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ggshield" style="font-weight:600;text-decoration:none">ggshield</a></div></td><td style="vertical-align:middle">Find multiple types of hardcoded secrets &
88 types of infrastructure-as-code misconfigurations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/git-all-secrets" style="font-weight:600;text-decoration:none">git-all-secrets</a></div></td><td style="vertical-align:middle">Capture all the git secrets by leveraging multiple open source git searching tools.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/git-dump" style="font-weight:600;text-decoration:none">git-dump</a></div></td><td style="vertical-align:middle">Dump the contents of a remote git repository without directory listing enabled</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/git-dumper" style="font-weight:600;text-decoration:none">git-dumper</a></div></td><td style="vertical-align:middle">A tool to dump a git repository from a website.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/git-dumper" style="font-weight:600;text-decoration:none">git-dumper</a></div></td><td style="vertical-align:middle">Dump the contents of a remote git repository without directory listing enabled</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/git-secrets" style="font-weight:600;text-decoration:none">git-secrets</a></div></td><td style="vertical-align:middle">Prevents you from committing secrets and credentials into git repositories.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/git-vuln-finder" style="font-weight:600;text-decoration:none">git-vuln-finder</a></div></td><td style="vertical-align:middle">Find potential software vulnerabilities from git commit messages.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/git-wild-hunt" style="font-weight:600;text-decoration:none">git-wild-hunt</a></div></td><td style="vertical-align:middle">A tool to hunt for credentials in GitHub wild AKA git*hunt.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitgraber" style="font-weight:600;text-decoration:none">gitGraber</a></div></td><td style="vertical-align:middle">Monitor GitHub to search and find sensitive data in real time.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitgraber" style="font-weight:600;text-decoration:none">gitGraber</a></div></td><td style="vertical-align:middle">Monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/github-endpoints" style="font-weight:600;text-decoration:none">github-endpoints</a></div></td><td style="vertical-align:middle">Find endpoints on GitHub.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/github-regexp" style="font-weight:600;text-decoration:none">github-regexp</a></div></td><td style="vertical-align:middle">Basically a regexp over a GitHub search.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/github-subdomains" style="font-weight:600;text-decoration:none">github-subdomains</a></div></td><td style="vertical-align:middle">Find subdomains on GitHub.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitjacker" style="font-weight:600;text-decoration:none">gitjacker</a></div></td><td style="vertical-align:middle">Leak git repositories from misconfigured websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitlab-subdomains" style="font-weight:600;text-decoration:none">gitlab-subdomains</a></div></td><td style="vertical-align:middle">Find subdomains on GitLab.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitleaks" style="font-weight:600;text-decoration:none">gitleaks</a></div></td><td style="vertical-align:middle">Protect and discover secrets using Gitleaks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitpillage" style="font-weight:600;text-decoration:none">gitpillage</a></div></td><td style="vertical-align:middle">Extract data from a .git directory.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gitscraper" style="font-weight:600;text-decoration:none">gitscraper</a></div></td><td style="vertical-align:middle">Scrapes public GitHub repositories for common naming conventions in variables, folders and files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gittyleaks" style="font-weight:600;text-decoration:none">gittyleaks</a></div></td><td style="vertical-align:middle">Find sensitive information for a git repo.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gittyleaks" style="font-weight:600;text-decoration:none">gittyleaks</a></div></td><td style="vertical-align:middle">Find sensitive information (username, password, email) in git repositories</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gmailc2" style="font-weight:600;text-decoration:none">gmailc2</a></div></td><td style="vertical-align:middle">
88Undetectable C2 server that communicates via Google SMTP to evade antivirus protections and network traffic restrictions</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/go-cve-dictionary" style="font-weight:600;text-decoration:none">go-cve-dictionary</a></div></td><td style="vertical-align:middle">Self-hosted CVE feed server</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/go-dork" style="font-weight:600;text-decoration:none">go-dork</a></div></td><td style="vertical-align:middle">The fastest dork scanner written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/go-secdump" style="font-weight:600;text-decoration:none">go-secdump</a></div></td><td style="vertical-align:middle">Tool to remotely dump secrets from the Windows registry.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/go-secdump" style="font-weight:600;text-decoration:none">go-secdump</a></div></td><td style="vertical-align:middle">Remotely dump secrets from the Windows registry (SAM hive, LSA secrets, SECURITY hive)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/go-stare" style="font-weight:600;text-decoration:none">go-stare</a></div></td><td style="vertical-align:middle">A fast & light web screenshot without headless browser but Chrome DevTools protocol.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/godap" style="font-weight:600;text-decoration:none">godap</a></div></td><td style="vertical-align:middle">A complete TUI for LDAP.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goddi" style="font-weight:600;text-decoration:none">goddi</a></div></td><td style="vertical-align:middle">Active Directory domain information dumper</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goddi" style="font-weight:600;text-decoration:none">goddi</a></div></td><td style="vertical-align:middle">Active Directory domain information dumper</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gofingerprint" style="font-weight:600;text-decoration:none">gofingerprint</a></div></td><td style="vertical-align:middle">Indentify web servers by checking their HTTP responses against a user defined list of fingerprints</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/google-authenticator-exporter" style="font-weight:600;text-decoration:none">google-authenticator-exporter</a></div></td><td style="vertical-align:middle">Get the TOTP secrets exported by Google Authenticator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goop" style="font-weight:600;text-decoration:none">goop</a></div></td><td style="vertical-align:middle">Dump the contents of a remote git repository without directory listing enabled; focus on as-complete-as-possible dumps and handling as many edge-cases as possible</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/goreplay" style="font-weight:600;text-decoration:none">goreplay</a></div></td><td style="vertical-align:middle">Capture and replay live HTTP traffic in order to continuously test your system with real data.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gorgo" style="font-weight:600;text-decoration:none">gorgo</a></div></td><td style="vertical-align:middle">The vertasile multi-threaded password sprayer built on the shoulders of giants.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gospider" style="font-weight:600;text-decoration:none">gospider</a></div></td><td style="vertical-align:middle">Fast web spider written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gotator" style="font-weight:600;text-decoration:none">gotator</a></div></td><td style="vertical-align:middle">Generates DNS wordlists through permutations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gowitness" style="font-weight:600;text-decoration:none">gowitness</a></div></td><td style="vertical-align:middle">Take screenshots of websites</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gowitness" style="font-weight:600;text-decoration:none">gowitness</a></div></td><td style="vertical-align:middle">A golang, web screenshot utility using Chrome Headless.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/grafana-ssrf" style="font-weight:600;text-decoration:none">grafana-ssrf</a></div></td><td style="vertical-align:middle">Authenticated SSRF in Grafana.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graftcp" style="font-weight:600;text-decoration:none">graftcp</a></div></td><td style="vertical-align:middle">A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphcat" style="font-weight:600;text-decoration:none">graphcat</a></div></td><td style="vertical-align:middle">Generate graphs and charts based on password cracking results; supports hashcat and john the ripper potfile as well as ntds file</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-armor" style="font-weight:600;text-decoration:none">graphql-armor</a></div></td><td style="vertical-align:middle">The missing GraphQL security security layer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-introspection-analyzer" style="font-weight:600;text-decoration:none">graphql-introspection-analyzer</a></div></td><td style="vertical-align:middle">Graphql introspection query analyzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-path-enum" style="font-weight:600;text-decoration:none">graphql-path-enum</a></div></td><td style="vertical-align:middle">Lists the different ways of reaching a given type in a GraphQL schema.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-path-enum" style="font-weight:600;text-decoration:none">graphql-path-enum</a></div></td><td style="vertical-align:middle">Lists the different ways of reaching a given type in a GraphQL schema</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphql-voyager" style="font-weight:600;text-decoration:none">graphql-voyager</a></div></td><td style="vertical-align:middle">Represent any GraphQL API as an interactive graph.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphqlsecurity" style="font-weight:600;text-decoration:none">graphql.security</a></div></td><td style="vertical-align:middle">Runs a dozen of security checks against a given GraphQL endpoint</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphw00f" style="font-weight:600;text-decoration:none">graphw00f</a></div></td><td style="vertical-align:middle">GraphQL Server Engine Fingerprinting utility for software security professionals.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/graphw00f" style="font-weight:600;text-decoration:none">graphw00f</a></div></td><td style="vertical-align:middle">GraphQL server engine fingerprinting</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/grep.app" style="font-weight:600;text-decoration:none">grep.app</a></div></td><td style="vertical-align:middle">Searches code from over a half million public repositories on GitHub.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/grr" style="font-weight:600;text-decoration:none">grr</a></div></td><td style="vertical-align:middle">An incident response framework focused on remote live forensics.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gscript" style="font-weight:600;text-decoration:none">gscript</a></div></td><td style="vertical-align:middle">Genesis Scripting Engine; framework to rapidly implement custom droppers for all three major operating systems</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gtfo" style="font-weight:600;text-decoration:none">gtfo</a></div></td><td style="vertical-align:middle">CLI for searching gtfobins and lolbas from the terminal</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/gwdomains" style="font-weight:600;text-decoration:none">gwdomains</a></div></td><td style="vertical-align:middle">Sub domain wild card filtering tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/h1-search" style="font-weight:600;text-decoration:none">h1-search</a></div></td><td style="vertical-align:middle">Request the public disclosures on a specific HackerOne program.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/h2csmuggler" style="font-weight:600;text-decoration:none">h2cSmuggler</a></div></td><td style="vertical-align:middle">HTTP Request Smuggling over HTTP/2 Cleartext.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/h8mail" style="font-weight:600;text-decoration:none">h8mail</a></div></td><td style="vertical-align:middle">Email OSINT & Password breach hunting tool; supports chasing down related email</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/h8mail" style="font-weight:600;text-decoration:none">h8mail</a></div></td><td style="vertical-align:middle">Powerful and user-friendly password hunting tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hackox" style="font-weight:600;text-decoration:none">hackOx</a></div></td><td style="vertical-align:middle">Modular web based pentesting interface designed to run on Raspberry Pi</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hakfindinternaldomains" style="font-weight:600;text-decoration:none">hakfindinternaldomains</a></div></td><td style="vertical-align:middle">Feed it a list of subdomains, it will resolve them and tell you which ones are internal.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hakip2host" style="font-weight:600;text-decoration:none">hakip2host</a></div></td><td style="vertical-align:middle">Takes a list of IP addresses then does a series of checks to return associated domain names.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/haklistgen" style="font-weight:600;text-decoration:none">haklistgen</a></div></td><td style="vertical-align:middle">Turns any junk text into a usable wordlist for brute-forcing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hakoriginfinder" style="font-weight:600;text-decoration:none">hakoriginfinder</a></div></td><td style="vertical-align:middle">Discover the origin host behind a reverse proxy, useful for bypassing cloud WAFs!.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hakrawler" style="font-weight:600;text-decoration:none">hakrawler</a></div></td><td style="vertical-align:middle">Simple, fast web crawler designed for discovery of endpoints and assets within a web application.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hakrevdns" style="font-weight:600;text-decoration:none">hakrevdns</a></div></td><td style="vertical-align:middle">Small, fast tool for performing reverse DNS lookups en masse.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/haktldextract" style="font-weight:600;text-decoration:none">haktldextract</a></div></td><td style="vertical-align:middle">Extract domains/subdomains from URLs en masse.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/haktrails" style="font-weight:600;text-decoration:none">haktrails</a></div></td><td style="vertical-align:middle">Golang client for querying SecurityTrails API data.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hardcidr" style="font-weight:600;text-decoration:none">hardCIDR</a></div></td><td style="vertical-align:middle">Discover the netblocks or ranges (in CIDR notation) owned by the target organization.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/harpoon" style="font-weight:600;text-decoration:none">harpoon</a></div></td><td style="vertical-align:middle">CLI tool for open source and threat intelligence.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hashid" style="font-weight:600;text-decoration:none">hashID</a></div></td><td style="vertical-align:middle">Identify the different types of hashes</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hashcobra" style="font-weight:600;text-decoration:none">hashcobra</a></div></td><td style="vertical-align:middle">Hash cracking tool using rainbow tables</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hauditor" style="font-weight:600;text-decoration:none">hauditor</a></div></td><td style="vertical-align:middle">Analyze the security headers returned by a web page and report dangerous configurations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hcxdumptool" style="font-weight:600;text-decoration:none">hcxdumptool</a></div></td><td style="vertical-align:middle">Small tool to capture packets from wlan devices.</td><td style=
88"vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/headerpwn" style="font-weight:600;text-decoration:none">headerpwn</a></div></td><td style="vertical-align:middle">Fuzzer for analyzing how servers respond to different HTTP headers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/headi" style="font-weight:600;text-decoration:none">headi</a></div></td><td style="vertical-align:middle">Customisable and automated HTTP header injection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/heaphopper" style="font-weight:600;text-decoration:none">heaphopper</a></div></td><td style="vertical-align:middle">Bounded model checking framework for Heap-implementations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/binary-exploitation">Binary Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hetty" style="font-weight:600;text-decoration:none">hetty</a></div></td><td style="vertical-align:middle">An HTTP toolkit for security research.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hidensneak" style="font-weight:600;text-decoration:none">hideNsneak</a></div></td><td style="vertical-align:middle">CLI tool for ephemeral penetration testing, rapidly deploy and manage various cloud services</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hoaxshell" style="font-weight:600;text-decoration:none">hoaxshell</a></div></td><td style="vertical-align:middle">Windows reverse shell payload generator and handler that abuses the http(s) protocol.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hoaxshell" style="font-weight:600;text-decoration:none">hoaxshell</a></div></td><td style="vertical-align:middle">Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/holehe" style="font-weight:600;text-decoration:none">holehe</a></div></td><td style="vertical-align:middle">Check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/honggfuzz" style="font-weight:600;text-decoration:none">honggfuzz</a></div></td><td style="vertical-align:middle">A security oriented software fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/houndsniff" style="font-weight:600;text-decoration:none">houndsniff</a></div></td><td style="vertical-align:middle">Identify the different types of hashes</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptography">Cryptography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hping" style="font-weight:600;text-decoration:none">hping</a></div></td><td style="vertical-align:middle">Network tool able to send custom TCP/IP packets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hrekt" style="font-weight:600;text-decoration:none">hrekt</a></div></td><td style="vertical-align:middle">A really fast HTTP prober.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/http-garden" style="font-weight:600;text-decoration:none">http-garden</a></div></td><td style="vertical-align:middle">Differential testing and fuzzing of HTTP servers and proxies</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/http-request-smuggling" style="font-weight:600;text-decoration:none">http-request-smuggling</a></div></td><td style="vertical-align:middle">HTTP Request Smuggling Detection Tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/http-screenshot-html" style="font-weight:600;text-decoration:none">http-screenshot-html</a></div></td><td style="vertical-align:middle">Nmap NSE script that scans for http server, takes a screenshot of them, and organizes the results into an HTML report</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/httprebind" style="font-weight:600;text-decoration:none">httprebind</a></div></td><td style="vertical-align:middle">Automatic tool for DNS rebinding-based SSRF attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/httprobe" style="font-weight:600;text-decoration:none">httprobe</a></div></td><td style="vertical-align:middle">Take a list of domains and probe for working HTTP and HTTPS servers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/httpscreenshot" style="font-weight:600;text-decoration:none">httpscreenshot</a></div></td><td style="vertical-align:middle">Grabs screenshots and HTML of large numbers of websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/httpscreenshot" style="font-weight:600;text-decoration:none">httpscreenshot</a></div></td><td style="vertical-align:middle">Take screenshots of websites</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/httpx" style="font-weight:600;text-decoration:none">httpx</a></div></td><td style="vertical-align:middle">HTTP toolkit that allows running multiple probes using the retryablehttp library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/httpx" style="font-weight:600;text-decoration:none">httpx</a></div></td><td style="vertical-align:middle">Multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/hunter.how" style="font-weight:600;text-decoration:none">hunter.how</a></div></td><td style="vertical-align:middle">Internet search engines for security researchers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/icmpdoor" style="font-weight:600;text-decoration:none">icmpdoor</a></div></td><td style="vertical-align:middle">An ICMP reverse shell written in Python3 and scapy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ike-scan" style="font-weight:600;text-decoration:none">ike-scan</a></div></td><td style="vertical-align:middle">Discover and fingerprint IKE hosts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ikeforce" style="font-weight:600;text-decoration:none">ikeforce</a></div></td><td style="vertical-align:middle">Command line IPSEC VPN brute forcing tool for Linux.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/impacket" style="font-weight:600;text-decoration:none">impacket</a></div></td><td style="vertical-align:middle">Collection of Python classes for working with network protocols.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/infer" style="font-weight:600;text-decoration:none">infer</a></div></td><td style="vertical-align:middle">A static analyzer for Java, C, C++, and Objective-C.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/infoooze" style="font-weight:600;text-decoration:none">infoooze</a></div></td><td style="vertical-align:middle">User-friendly OSINT tool that allows you to quickly and easily gather informations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/inlite" style="font-weight:600;text-decoration:none">inlite</a></div></td><td style="vertical-align:middle">Scan QR-code, 1D, DataMatrix, Postal, PDF417, and more</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/intel-wifi-research-tools" style="font-weight:600;text-decoration:none">intel-wifi-research-tools</a></div></td><td style="vertical-align:middle">Research tools developed for Intel Wi-Fi chips : decode firmware files, communicate with the chip through Linux's debug filesystem</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/interactsh" style="font-weight:600;text-decoration:none">interactsh</a></div></td><td style="vertical-align:middle">An OOB interaction gathering server and client library</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ipsourcebypass" style="font-weight:600;text-decoration:none">ipsourcebypass</a></div></td><td style="vertical-align:middle">Bypass IP source restrictions using HTTP headers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/is-website-vulnerable" style="font-weight:600;text-decoration:none">is-website-vulnerable</a></div></td><td style="vertical-align:middle">Finds publicly known security vulnerabilities in a website's frontend JavaScript libraries.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/itdis" style="font-weight:600;text-decoration:none">itdis</a></div></td><td style="vertical-align:middle">Is This Domain In Scope; a small tool that allows you to check if a list of domains you have been provided is in the scope of your pentest or not</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsql-injection" style="font-weight:600;text-decoration:none">jSQL Injection</a></div></td><td style="vertical-align:middle">Java application for automatic SQL database injection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ja3" style="font-weight:600;text-decoration:none">ja3</a></div></td><td style="vertical-align:middle">Create SSL client fingerprints in an easy to produce and shareable way.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jackdaw" style="font-weight:600;text-decoration:none">jackdaw</a></div></td><td style="vertical-align:middle">Gather gather gather.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jadx" style="font-weight:600;text-decoration:none">jadx</a></div></td><td style="vertical-align:middle">DEX to Java decompiler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jadx" style="font-weight:600;text-decoration:none">jadx</a></div></td><td style="vertical-align:middle">Dex to Java decompiler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/johnny" style="font-weight:600;text-decoration:none">johnny</a></div></td><td style="vertical-align:middle">GUI frontend to John the Ripper</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jok3r" style="font-weight:600;text-decoration:none">jok3r</a></div></td><td style="vertical-align:middle">Network and Web Pentest Automation Framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/js-beautify" style="font-weight:600;text-decoration:none">js-beautify</a></div></td><td style="vertical-align:middle">Beautifier for JavaScript.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsfinder" style="font-weight:600;text-decoration:none">jsfinder</a></div></td><td style="vertical-align:middle">Fetches JavaScript files quickly and comprehensively from a defined list of URLs or domains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsleak" style="font-weight:600;text-decoration:none">jsleak</a></div></td><td style="vertical-align:middle">Find secrets, paths or links in the source code.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jsluice" style="font-weight:600;text-decoration:none">jsluice</a></div></td><td style="vertical-align:middle">Extract URLs, paths, secrets, and other interesting bits from JavaScript.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/json-web-tokens" style="font-weight:600;text-decoration:none">json-web-tokens</a></div></td><td style="vertical-align:middle">JSON Web Tokens Support for Burp Suite.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jswzl" style="font-weight:600;text-decoration:none">jswzl</a></div></td><td style="vertical-align:middle">Improve your web application aecurity testing with rich data from static analysis.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt-cracker" style="font-weight:600;text-decoration:none">jwt-cracker</a></div></td><td style="vertical-align:middle">Simple JWT token brute force cracker.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt-hack" style="font-weight:600;text-decoration:none">jwt-hack</a></div></td><td style="vertical-align:middle">JWT encod
88ing/decoding, generates payloads for JWT attack and very fast cracking.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt-hack" style="font-weight:600;text-decoration:none">jwt-hack</a></div></td><td style="vertical-align:middle">A toolkit for JWT tokens security testing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt-heartbreaker" style="font-weight:600;text-decoration:none">jwt-heartbreaker</a></div></td><td style="vertical-align:middle">Burp Suite extension to check JWT for using keys from known from public sources.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwt_tool" style="font-weight:600;text-decoration:none">jwt_tool</a></div></td><td style="vertical-align:middle">A toolkit for validating, forging and cracking JWT tokens</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwtcat" style="font-weight:600;text-decoration:none">jwtcat</a></div></td><td style="vertical-align:middle">JWT brute-force cracker</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/jwtear" style="font-weight:600;text-decoration:none">jwtear</a></div></td><td style="vertical-align:middle">Modular command-line tool to parse, create and manipulate JWT tokens.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kalitorify" style="font-weight:600;text-decoration:none">kalitorify</a></div></td><td style="vertical-align:middle">Script for Kali Linux which use iptables settings to create a transparent proxy through Tor Network</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/karma-v2" style="font-weight:600;text-decoration:none">karma v2</a></div></td><td style="vertical-align:middle">Passive open source intelligence automated reconnaissance.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/katana" style="font-weight:600;text-decoration:none">katana</a></div></td><td style="vertical-align:middle">A next-generation crawling and spidering framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/katoolin3" style="font-weight:600;text-decoration:none">katoolin3</a></div></td><td style="vertical-align:middle">Get your favourite Kali Linux tools on Debian/Ubuntu/Linux Mint.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kerberoast" style="font-weight:600;text-decoration:none">kerberoast</a></div></td><td style="vertical-align:middle">Series of tools for attacking MS Kerberos implementations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kerbrute" style="font-weight:600;text-decoration:none">kerbrute</a></div></td><td style="vertical-align:middle">Bruteforce and enumerate Active Directory accounts through Kerberos pre-authentication.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
88<a href="/tool/kernel-exploit-factory" style="font-weight:600;text-decoration:none">kernel-exploit-factory</a></div></td><td style="vertical-align:middle">Linux kernel CVE exploit analysis report and relative debug environment.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/keyhacks.sh" style="font-weight:600;text-decoration:none">keyhacks.sh</a></div></td><td style="vertical-align:middle">Automation of tokens/api keys testing.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kh2hc" style="font-weight:600;text-decoration:none">kh2hc</a></div></td><td style="vertical-align:middle">Convert OpenSSH known_hosts file hashed with HashKnownHosts to hashes crackable by Hashcat</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kicks3" style="font-weight:600;text-decoration:none">kicks3</a></div></td><td style="vertical-align:middle">S3 bucket finder from html,js and bucket misconfiguration testing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/king-phisher" style="font-weight:600;text-decoration:none">king-phisher</a></div></td><td style="vertical-align:middle">Phishing Campaign Toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kiterunner" style="font-weight:600;text-decoration:none">kiterunner</a></div></td><td style="vertical-align:middle">Contextual content discovery tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kitphishr" style="font-weight:600;text-decoration:none">kitphishr</a></div></td><td style="vertical-align:middle">Hunts for phishing kit source code by traversing URL folders and searching in open directories for zip files; supports list of URLs or PhishTank</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/komiser" style="font-weight:600;text-decoration:none">komiser</a></div></td><td style="vertical-align:middle">Cloud resources manager designed to analyze and manage cloud cost, usage, security, and more!.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kube-bench" style="font-weight:600;text-decoration:none">kube-bench</a></div></td><td style="vertical-align:middle">Checks whether Kubernetes is deployed according to security best practices.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/kxss" style="font-weight:600;text-decoration:none">kxss</a></div></td><td style="vertical-align:middle">Adaption of tomnomnom's kxss tool with a different output format.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/l0phtcrack" style="font-weight:600;text-decoration:none">l0phtcrack</a></div></td><td style="vertical-align:middle">Crack Windows passwords from hashes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lateralus" style="font-weight:600;text-decoration:none">lateralus</a></div></td><td style="vertical-align:middle">
88Terminal based phishing campaign tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lazyegg" style="font-weight:600;text-decoration:none">lazyegg</a></div></td><td style="vertical-align:middle">Powerful tool for extracting various types of data from a target URL.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lazys3" style="font-weight:600;text-decoration:none">lazys3</a></div></td><td style="vertical-align:middle">Ruby script to bruteforce for AWS s3 buckets using different permutations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ldd" style="font-weight:600;text-decoration:none">ldd</a></div></td><td style="vertical-align:middle">Tool that print shared library dependencies</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ldeep" style="font-weight:600;text-decoration:none">ldeep</a></div></td><td style="vertical-align:middle">Active Directory LDAP enumeration utility</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/leakscraper" style="font-weight:600;text-decoration:none">leakScraper</a></div></td><td style="vertical-align:middle">Set of tools to process and visualize huge text files containing credentials.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/leakscraper" style="font-weight:600;text-decoration:none">leakScraper</a></div></td><td style="vertical-align:middle">Set of tools to process and visualize huge text files containing credentials</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/libformatstr" style="font-weight:600;text-decoration:none">libformatstr</a></div></td><td style="vertical-align:middle">Library to simplify format string exploitation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/binary-exploitation">Binary Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/libiris" style="font-weight:600;text-decoration:none">libiris</a></div></td><td style="vertical-align:middle">Cross-platform sandboxing library</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ligolo" style="font-weight:600;text-decoration:none">ligolo</a></div></td><td style="vertical-align:middle">Reverse tunneling made easy for pentesters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linwinpwn" style="font-weight:600;text-decoration:none">linWinPwn</a></div></td><td style="vertical-align:middle">Automates a number of Active Directory enumeration and vulnerability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linwinpwn" style="font-weight:600;text-decoration:none">linWinPwn</a></div></td><td style="vertical-align:middle">Script that automates a number of Active Directory enumeration and vulnerability checks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/link" style="font-weight:600;text-decoration:none">link</a></div></td><td style="vertical-align:middle">Command and control framework; HTTPS communication, process injection, in-memory .NET assembly execution, SharpCollection tools, sRDI implementation for shellcode generation, Windows link reloads DLLs from disk into current process</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/les" style="font-weight:600;text-decoration:none">linux-exploit-suggester</a></div></td><td style="vertical-align:middle">Linux privilege escalation auditing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linux-exploit-suggestersh" style="font-weight:600;text-decoration:none">linux-exploit-suggester.sh</a></div></td><td style="vertical-align:middle">Linux kernel exploit suggester</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linux-smart-enumeration" style="font-weight:600;text-decoration:none">linux-smart-enumeration</a></div></td><td style="vertical-align:middle">Linux enumeration tool for pentesting and CTFs with verbosity levels.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linuxprivchecker" style="font-weight:600;text-decoration:none">linuxprivchecker</a></div></td><td style="vertical-align:middle">
88A Linux privilege escalation check script.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linuxprivcheckerpy" style="font-weight:600;text-decoration:none">linuxprivchecker.py</a></div></td><td style="vertical-align:middle">Linux privilege escalation check script</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/linx" style="font-weight:600;text-decoration:none">linx</a></div></td><td style="vertical-align:middle">Reveals invisible links within JavaScript files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/litefuzz" style="font-weight:600;text-decoration:none">litefuzz</a></div></td><td style="vertical-align:middle">A multi-platform fuzzer for poking at userland binaries and servers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lk_scraper" style="font-weight:600;text-decoration:none">lk_scraper</a></div></td><td style="vertical-align:middle">A fully configurable LinkedIn scraper: scrape anything within LinkedIn.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lnkbomb" style="font-weight:600;text-decoration:none">lnkbomb</a></div></td><td style="vertical-align:middle">Malicious shortcut generator for collecting NTLM hashes from insecure file shares.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/localdatahog" style="font-weight:600;text-decoration:none">localdataHog</a></div></td><td style="vertical-align:middle">String-based secret-searching tool, high entropy and regexes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/longtongue" style="font-weight:600;text-decoration:none">longtongue</a></div></td><td style="vertical-align:middle">Password wordlist generator based on target information</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lorsrf" style="font-weight:600;text-decoration:none">lorsrf</a></div></td><td style="vertical-align:middle">Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lsassy" style="font-weight:600;text-decoration:none">lsassy</a></div></td><td style="vertical-align:middle">
88Python tool to remotely extract credentials on a set of hosts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lsassy" style="font-weight:600;text-decoration:none">lsassy</a></div></td><td style="vertical-align:middle">CLI tool and library to extract credentials from lsass remotely</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lyncsmash" style="font-weight:600;text-decoration:none">lyncsmash</a></div></td><td style="vertical-align:middle">Locate and attack Lync and Skype for Business.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lynis" style="font-weight:600;text-decoration:none">lynis</a></div></td><td style="vertical-align:middle">Security auditing tool for Linux, macOS, and UNIX-based systems.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/lyricpass" style="font-weight:600;text-decoration:none">lyricpass</a></div></td><td style="vertical-align:middle">Tool to generate wordlists based on lyrics</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/macchanger" style="font-weight:600;text-decoration:none">macchanger</a></div></td><td style="vertical-align:middle">Makes the maniputation of MAC addresses of network interfaces easier.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/macro_pack" style="font-weight:600;text-decoration:none">macro_pack</a></div></td><td style="vertical-align:middle">Obfuscation and generation of retro formats such as MS Office documents or VBS like format</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/magspoof" style="font-weight:600;text-decoration:none">magspoof</a></div></td><td style="vertical-align:middle">A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card wirelessly.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/malicious-pdf" style="font-weight:600;text-decoration:none">malicious-pdf</a></div></td><td style="vertical-align:middle">Generates a bunch of malicious pdf files with phone-home functionality.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/maltrail" style="font-weight:600;text-decoration:none">maltrail</a></div></td><td style="vertical-align:middle">Malicious traffic detection system.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mana" style="font-weight:600;text-decoration:none">mana</a></div></td><td style="vertical-align:middle">Wifi rogue AP attacks and MitM.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mantis" style="font-weight:600;text-decoration:none">mantis</a></div></td><td style="vertical-align:middle">Command-line framework designed to automate the workflow of asset discovery, reconnaissance, and scanning</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mapcidr" style="font-weight:600;text-decoration:none">mapcidr</a></div></td><td style="vertical-align:middle">Small utility program to perform multiple operations for a given subnet/CIDR ranges.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mass-s3-bucket-tester" style="font-weight:600;text-decoration:none">mass-s3-bucket-tester</a></div></td><td style="vertical-align:middle">
88Tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mec" style="font-weight:600;text-decoration:none">mec</a></div></td><td style="vertical-align:middle">MassExploitConsole; mass reconnaissance and exploitation framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/meg" style="font-weight:600;text-decoration:none">meg</a></div></td><td style="vertical-align:middle">Fetch many paths for many hosts, without killing the hosts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mentalist" style="font-weight:600;text-decoration:none">mentalist</a></div></td><td style="vertical-align:middle">Graphical tool for custom wordlist generation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/merlin" style="font-weight:600;text-decoration:none">merlin</a></div></td><td style="vertical-align:middle">Cross-platform post-exploitation HTTP/2 Command & Control server and agent.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metahttp" style="font-weight:600;text-decoration:none">metahttp</a></div></td><td style="vertical-align:middle">Script that automates the scanning of a target network for HTTP resources through XXE.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/metasploitable" style="font-weight:600;text-decoration:none">metasploitable</a></div></td><td style="vertical-align:middle">VM that is built from the ground up with a large amount of security vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mfoc" style="font-weight:600;text-decoration:none">mfoc</a></div></td><td style="vertical-align:middle">Mifare classic offline cracker.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mihari" style="font-weight:600;text-decoration:none">mihari</a></div></td><td style="vertical-align:middle">Aggregates results from Shodan, Censys, VirusTotal, SecurityTrail, etc. and extracts artifacts (IP addresses, domains, URLs or hashes
88)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mimikatz" style="font-weight:600;text-decoration:none">mimikatz</a></div></td><td style="vertical-align:middle">A little tool to play with Windows security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mimikatz" style="font-weight:600;text-decoration:none">mimikatz</a></div></td><td style="vertical-align:middle">Extract plaintext passwords, hash, PIN code and kerberos tickets from memory; perform pass-the-hash, pass-the-ticket or build Golden tickets</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mimikittenz" style="font-weight:600;text-decoration:none">mimikittenz</a></div></td><td style="vertical-align:middle">A post-exploitation powershell tool for extracting juicy info from memory.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/minidump" style="font-weight:600;text-decoration:none">minidump</a></div></td><td style="vertical-align:middle">Library and CLI to parse and read Microsoft minidump file format</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mitm6" style="font-weight:600;text-decoration:none">mitm6</a></div></td><td style="vertical-align:middle">pwning IPv4 via IPv6.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mitmap" style="font-weight:600;text-decoration:none">mitmAP</a></div></td><td style="vertical-align:middle">A python program to create a fake AP and sniff data.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mitmproxy" style="font-weight:600;text-decoration:none">mitmproxy</a></div></td><td style="vertical-align:middle">Interactive HTTPS proxy</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mitmproxy" style="font-weight:600;text-decoration:none">mitmproxy</a></div></td><td style="vertical-align:middle">An interactive TLS-capable intercepting HTTP proxy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mksub" style="font-weight:600;text-decoration:none">mksub</a></div></td><td style="vertical-align:middle">Generate tens of thousands of subdomain combinations in a matter of seconds.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/modifycerttemplate" style="font-weight:600;text-decoration:none">modifyCertTemplate</a></div></td><td style="vertical-align:middle">Aid operators in modifying ADCS certificate templates so that a created vulnerable state can be leveraged for privilege escalation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/moniorg" style="font-weight:600;text-decoration:none">moniorg</a></div></td><td style="vertical-align:middle">Leverage crt.sh website to monitor domains of a target.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/monomorph" style="font-weight:600;text-decoration:none">monomorph</a></div></td><td style="vertical-align:middle">MD5-monomorphic shellcode packer, all payloads have the same MD5 hash</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/monsoon" style="font-weight:600;text-decoration:none">monsoon</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/moonwalk-back" style="font-weight:600;text-decoration:none">moonwalk-back</a></div></td><td style="vertical-align:middle">Cover your tracks during Linux exploitation by leaving zero traces on the exploited system.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/morphhta" style="font-weight:600;text-decoration:none">morphHTA</a></div></td><td style="vertical-align:middle">Morphing Cobalt Strike's evil.HTA.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/msldapdump" style="font-weight:600;text-decoration:none">msLDAPDump</a></div></td><td style="vertical-align:middle">LDAP enumeration tool implemented in Python3.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/msfpc" style="font-weight:600;text-decoration:none">msfpc</a></div></td><td style="vertical-align:middle">A quick way to generate various basic Meterpreter payloads via MSFvenom.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/msldap" style="font-weight:600;text-decoration:none">msldap</a></div></td><td style="vertical-align:middle">LDAP library for auditing Microsoft Active Directory.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mssqlproxy" style="font-weight:600;text-decoration:none">mssqlproxy</a></div></td><td style="vertical-align:middle">Perform lateral movement in restricted environments through a compromised MSSQL Server.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/murphysec" style="font-weight:600;text-decoration:none">murphysec</a></div></td><td style="vertical-align:middle">An open source tool focused on software supply chain security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mvt" style="font-weight:600;text-decoration:none">mvt</a></div></td><td style="vertical-align:middle">Helps with conducting forensics of mobile devices in order to find signs of a potential compromise.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mx-takeover" style="font-weight:600;text-decoration:none">mx-takeover</a></div></td><td style="vertical-align:middle">
88Focuses DNS MX records and detects misconfigured MX records.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/mythril" style="font-weight:600;text-decoration:none">mythril</a></div></td><td style="vertical-align:middle">Security analysis tool for EVM bytecode that supports smart contracts builds.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/naabu" style="font-weight:600;text-decoration:none">naabu</a></div></td><td style="vertical-align:middle">Port scanner with a focus on reliability and simplicity</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nasm" style="font-weight:600;text-decoration:none">nasm</a></div></td><td style="vertical-align:middle">A cross-platform x86 assembler with an Intel-like syntax.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nbtscan" style="font-weight:600;text-decoration:none">nbtscan</a></div></td><td style="vertical-align:middle">Scan networks searching for NetBIOS information.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ncat" style="font-weight:600;text-decoration:none">ncat</a></div></td><td style="vertical-align:middle">Improved reimplementation of Netcat by nmap team; Supports TCP and UDP, IPv4 and IPv6, SSL, proxy (HTTP and SOCKS4)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ncrack" style="font-weight:600;text-decoration:none">ncrack</a></div></td><td style="vertical-align:middle">Open source tool for network authentication cracking.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nemesis" style="font-weight:600;text-decoration:none">nemesis</a></div></td><td style="vertical-align:middle">Packet manipulation CLI tool; craft and inject packets of several protocols</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netcap" style="font-weight:600;text-decoration:none">netcap</a></div></td><td style="vertical-align:middle">A framework for secure and scalable network traffic analysis.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netdiscover" style="font-weight:600;text-decoration:none">netdiscover</a></div></td><td style="vertical-align:middle">Network address discovering tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/netzob" style="font-weight:600;text-decoration:none">netzob</a></div></td><td style="vertical-align:middle">Protocol reverse engineering, modeling and fuzzing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nexfil" style="font-weight:600;text-decoration:none">nexfil</a></div></td><td style="vertical-align:middle">OSINT tool for finding profiles by username.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ngocok" style="font-weight:600;text-decoration:none">ngocok</a></div></td><td style="vertical-align:middle">ngrok collaborator link</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nikto" style="font-weight:600;text-decoration:none">nikto</a></div></td><td style="vertical-align:middle">Very light web security scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nipper-ng" style="font-weight:600;text-decoration:none">nipper-ng</a></div></td><td style="vertical-align:middle">Network infrastructure configuration parser.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nmap-parse-output" style="font-weight:600;text-decoration:none">nmap-parse-output</a></div></td><td style="vertical-align:middle">Converts / manipulates / extracts data from a nmap scan output</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nmap-query-xml" style="font-weight:600;text-decoration:none">nmap-query-xml</a></div></td><td style="vertical-align:middle">A simple program to query nmap XML files in the terminal.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nmapautomater" style="font-weight:600;text-decoration:none">nmapAutomater</a></div></td><td style="vertical-align:middle">Automate the process of enumeration & recon that is run every time.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nodejsscan" style="font-weight:600;text-decoration:none">nodejsscan</a></div></td><td style="vertical-align:middle">A static security code scanner for Node.js applications.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/npk" style="font-weight:600;text-decoration:none">npk</a></div></td><td style="vertical-align:middle">Distributed hash cracking platform meant to be deployed on AWS (Cognito, DynamoDB, S3) so you pay only when you have a task running</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nqntnqnqmb" style="font-weight:600;text-decoration:none">
88nqntnqnqmb</a></div></td><td style="vertical-align:middle">Retrieve information on linkedin profiles, companies on linkedin and search on linkedin companies/persons</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ntlm_theft" style="font-weight:600;text-decoration:none">ntlm_theft</a></div></td><td style="vertical-align:middle">Generate multiple types of NTLMv2 hash theft files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nuclei-burp-plugin" style="font-weight:600;text-decoration:none">nuclei-burp-plugin</a></div></td><td style="vertical-align:middle">A Burp Suite plugin intended to help with Nuclei template generation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nuclei-wordfence-cve" style="font-weight:600;text-decoration:none">nuclei-wordfence-cve</a></div></td><td style="vertical-align:middle">Collection of Nuclei templates dedicated to WordPress core, plugins and themes vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/nvd_feed_api" style="font-weight:600;text-decoration:none">nvd_feed_api</a></div></td><td style="vertical-align:middle">A ruby API for NVD CVE feeds management, the library will help you to download and manage NVD Data Feeds, search for CVEs, build your vulerability assesment platform or vulnerability database</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerability-assessment">Vulnerability Assessment</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/o365recon" style="font-weight:600;text-decoration:none">o365recon</a></div></td><td style="vertical-align:middle">Retrieve information via O365 and AzureAD with valid credentials.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/objection" style="font-weight:600;text-decoration:none">objection</a></div></td><td style="vertical-align:middle">Runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/objection" style="font-weight:600;text-decoration:none">objection</a></div></td><td style="vertical-align:middle">Runtime mobile exploration.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/octosql" style="font-weight:600;text-decoration:none">octosql</a></div></td><td style="vertical-align:middle">CLI tool which lets you query a plethora of databases and file formats.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/databases">Databases</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/octosuite" style="font-weight:600;text-decoration:none">octosuite</a></div></td><td style="vertical-align:middle">An all-in-one GitHub open-source intelligence framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/off-by-slash" style="font-weight:600;text-decoration:none">off-by-slash</a></div></td><td style="vertical-align:middle">Burp extension to detect alias traversal via NGINX misconfiguration at scale.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/onedrive_user_enum" style="font-weight:600;text-decoration:none">onedrive_user_enum</a></div></td><td style="vertical-align:middle">Enumerate valid o365 users.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/onesixtyone" style="font-weight:600;text-decoration:none">onesixtyone</a></div></td><td style="vertical-align:middle">SNMP scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/open-sesame" style="font-weight:600;text-decoration:none">open-sesame</a></div></td><td style="vertical-align:middle">Contains HackerOne disclosed reports and other bug bounty writeups.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/orpheus" style="font-weight:600;text-decoration:none">orpheus</a></div></td><td style="vertical-align:middle">Bypass Kerberoast detections with modified KDC options and encryption types.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/osintname" style="font-weight:600;text-decoration:none">osintname</a></div></td><td style="vertical-align:middle">Generate emails and usernames.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/otori" style="font-weight:600;text-decoration:none">otori</a></div></td><td style="vertical-align:middle">On The Outside, Reaching In, exploitation toolbox for XXE attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owabrute" style="font-weight:600;text-decoration:none">owabrute</a></div></td><td style="vertical-align:middle">Hydra wrapper for bruteforcing Microsoft Outlook Web Application</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp-mastg" style="font-weight:600;text-decoration:none">owasp MASTG</a></div></td><td style="vertical-align:middle">Comprehensive manual for mobile application security testing and reverse engineering.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/owasp-masvs" style="font-weight:600;text-decoration:none">owasp MASVS</a></div></td><td style="vertical-align:middle">The industry standard for mobile application security.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oxml_xxe" style="font-weight:600;text-decoration:none">oxml_xxe</a></div></td><td style="vertical-align:middle">Embeds XXE/XML exploits into different filetypes.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oxml_xxe" style="font-weight:600;text-decoration:none">oxml_xxe</a></div></td><td style="vertical-align:middle">Tool for embedding XXE/XML exploits into different filetypes (docx/xlsx, odt/ods, svg, xml, etc.)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/oyente" style="font-weight:600;text-decoration:none">oyente</a></div></td><td style="vertical-align:middle">An analysis tool for smart contracts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/p0f" style="font-weight:600;text-decoration:none">p0f</a></div></td><td style="vertical-align:middle">Identify the operating system of a target host simply by examining captured packets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/p0wnedshell" style="font-weight:600;text-decoration:none">p0wnedShell</a></div></td><td style="vertical-align:middle">PowerShell runspace post exploitation toolkit</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/padding-oracle-attacker" style="font-weight:600;text-decoration:none">padding-oracle-attacker</a></div></td><td style="vertical-align:middle">Execute padding oracle attacks with support for concurrent network requests and an elegant UI.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pagodo" style="font-weight:600;text-decoration:none">pagodo</a></div></td><td style="vertical-align:middle">Automate google hacking database scraping and searching.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/param-miner" style="font-weight:600;text-decoration:none">param-miner</a></div></td><td style="vertical-align:middle">Identifies hidden, unlinked parameters, useful for finding web cache poisoning vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/parameth" style="font-weight:600;text-decoration:none">parameth</a></div></td><td style="vertical-align:middle">Brute discover GET and POST parameters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/parameth" style="font-weight:600;text-decoration:none">parameth</a></div></td><td style="vertical-align:middle">HTTP parameter discovery suite</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pass-station" style="font-weight:600;text-decoration:none">pass-station</a></div></td><td style="vertical-align:middle">CLI & library to search for default credentials among thousands of products/vendors.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/passivedns" style="font-weight:600;text-decoration:none">passiveDNS</a></div></td><td style="vertical-align:middle">A network sniffer that logs all DNS server replies for use in a passive DNS setup.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pcc" style="font-weight:600;text-decoration:none">pcc</a></div></td><td style="vertical-align:middle">PHP Secure Configuration Checker; parse php.ini to find security misconfiguration</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/configuration-audit">Configuration Audit</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pe_to_shellcode" style="font-weight:600;text-decoration:none">pe_to_shellcode</a></div></td><td style="vertical-align:middle">Converts PE into a shellcode</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/peda" style="font-weight:600;text-decoration:none">peda</a></div></td><td style="vertical-align:middle">Python Exploit Development Assistance for GDB.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/personal-security-checklist" style="font-weight:600;text-decoration:none">personal-security-checklist</a></div></td><td style="vertical-align:middle">A compiled checklist of 300+ tips for protecting digital security and privacy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phpsploit" style="font-weight:600;text-decoration:none">phpsploit</a></div></td><td style="vertical-align:middle">Command & Controll framework which silently persists on webserver via polymorphic PHP oneliner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/red-teaming">Red Teaming</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/phpsploit" style="font-weight:600;text-decoration:none">phpsploit</a></div></td><td style="vertical-align:middle">Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pingcastle" style="font-weight:600;text-decoration:none">pingcastle</a></div></td><td style="vertical-align:middle">Get Active Directory security at 80% in 20% of the time.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pipedream" style="font-weight:600;text-decoration:none">pipedream</a></div></td><td style="vertical-align:middle">Collect HTTP or webhook requests and inspect them in a human-friendly way.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pivotnacci" style="font-weight:600;text-decoration:none">pivotnacci</a></div></td><td style="vertical-align:middle">A tool to make socks connections through HTTP agents.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/plasma" style="font-weight:600;text-decoration:none">plasma</a></div></td><td style="vertical-align:middle">Interactive disassembler that generates indented pseudo-code with colored syntax.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/plution" style="font-weight:600;text-decoration:none">plution</a></div></td><td style="vertical-align:middle">Prototype pollution scanner using headless chrome.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pmd" style="font-weight:600;text-decoration:none">pmd</a></div></td><td style="vertical-align:middle">An extensible multilanguage static code analyzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pnwgen" style="font-weight:600;text-decoration:none">pnwgen</a></div></td><td style="vertical-align:middle">Phone number wordlist generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/polarbearscan" style="font-weight:600;text-decoration:none">polarbearscan</a></div></td><td style="vertical-align:middle">Port scanner and banner grabber</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/postmessage-tracker" style="font-weight:600;text-decoration:none">postMessage-tracker</a></div></td><td style="vertical-align:middle">A Chrome Extension to track postMessage usage (url, domain and stack).</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/postleaks" style="font-weight:600;text-decoration:none">postleaks</a></div></td><td style="vertical-align:middle">Search for sensitive data in Postman public library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/postmaniac" style="font-weight:600;text-decoration:none">postmaniac</a></div></td><td style="vertical-align:middle">Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pown.js" style="font-weight:600;text-decoration:none">pown.js</a></div></td><td style="vertical-align:middle">Security testing and exploitation toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ppfuzz" style="font-weight:600;text-decoration:none">ppfuzz</a></div></td><td style="vertical-align:middle">Scan for client-side prototype pollution</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ppfuzz" style="font-weight:600;text-decoration:none">ppfuzz</a></div></td><td style="vertical-align:middle">A fast tool to scan client-side prototype pollution vulnerability written in Rust.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pphack" style="font-weight:600;text-decoration:none">pphack</a></div></td><td style="vertical-align:middle">Client-side prototype pollution scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pphack" style="font-weight:600;text-decoration:none">pphack</a></div></td><td style="vertical-align:middle">The most advanced client-side prototype pollution scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ppmap" style="font-weight:600;text-decoration:none">ppmap</a></div></td><td style="vertical-align:middle">Exploitation tool which leverages client-side Prototype Pollution to XSS.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/prototype-pollution-exploits" style="font-weight:600;text-decoration:none">prototype-pollution-exploits</a></div></td><td style="vertical-align:middle">Prototype Pollution exploits collection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/proxify" style="font-weight:600;text-decoration:none">proxify</a></div></td><td style="vertical-align:middle">Swiss Army knife Proxy tool for HTTP(S) traffic capture, manipulation, and replay on the go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/proxmark3" style="font-weight:600;text-decoration:none">proxmark3</a></div></td><td style="vertical-align:middle">RFID tool designed to snoop, listen and emulate everything from Low to High Frequency tags.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/proxychains" style="font-weight:600;text-decoration:none">proxychains</a></div></td><td style="vertical-align:middle">Force any TCP connection made by any given application to follow through proxy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/proxychains-ng" style="font-weight:600;text-decoration:none">proxychains-ng</a></div></td><td style="vertical-align:middle">
88Continuation of the unmaintained proxychains project.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pspy" style="font-weight:600;text-decoration:none">pspy</a></div></td><td style="vertical-align:middle">CLI tool designed to snoop on processes without need for root permissions; it allows to see commands run by other users, cron jobs, etc. as they execute</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/psudohash" style="font-weight:600;text-decoration:none">psudohash</a></div></td><td style="vertical-align:middle">Password list generator for orchestrating brute force attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pty4all" style="font-weight:600;text-decoration:none">pty4all</a></div></td><td style="vertical-align:middle">Persistent multi reverse shell handler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pupy" style="font-weight:600;text-decoration:none">pupy</a></div></td><td style="vertical-align:middle">Opensource, cross-platform C2 and post-exploitation framework written in python and C.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/puredns" style="font-weight:600;text-decoration:none">puredns</a></div></td><td style="vertical-align:middle">Puredns is a fast domain resolver & subdomain bruteforcing tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwnagotchi" style="font-weight:600;text-decoration:none">pwnagotchi</a></div></td><td style="vertical-align:middle">Deep reinforcement learning instrumenting bettercap for WiFi pwning.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwnat" style="font-weight:600;text-decoration:none">pwnat</a></div></td><td style="vertical-align:middle">Punch holes through firewalls/NATs where both clients and servers can be behind separate NATs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwncat" style="font-weight:600;text-decoration:none">pwncat</a></div></td><td style="vertical-align:middle">Sophisticated bind and reverse shell handler with many features as well as a drop-in replacement or compatible complement to netcat, ncat or socat</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwncat" style="font-weight:600;text-decoration:none">pwncat</a></div></td><td style="vertical-align:middle">Netcat on steroids with many extra features.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwncat-caleb" style="font-weight:600;text-decoration:none">pwncat-caleb</a></div></td><td style="vertical-align:middle">Fancy reverse and bind shell handler, can perform automated actions on the remote host including enumeration, implant installation and privilege escalation; attempt to spawn a pseudoterminal (pty) for a full interactive session</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwndrop" style="font-weight:600;text-decoration:none">pwndrop</a></div></td><td style="vertical-align:middle">Self-deployable file hosting service allowing to easily upload and share payloads over HTTP and WebD.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwntools" style="font-weight:600;text-decoration:none">pwntools</a></div></td><td style="vertical-align:middle">CTF framework and exploit development library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwntools" style="font-weight:600;text-decoration:none">pwntools</a></div></td><td style="vertical-align:middle">Framework and exploit development library</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/binary-exploitation">Binary Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pwntools-ruby" style="font-weight:600;text-decoration:none">pwntools-ruby</a></div></td><td style="vertical-align:middle">Framework and exploit development library, ported onto ruby</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/binary-exploitation">Binary Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pybuster" style="font-weight:600;text-decoration:none">pyBuster</a></div></td><td style="vertical-align:middle">A multi-target URL bruteforcer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pygpoabuse" style="font-weight:600;text-decoration:none">pyGPOAbuse</a></div></td><td style="vertical-align:middle">Partial python implementation of SharpGPOAbuse; modify an existing GPO by creating an immediate scheduled task as SYSTEM on the remote computer for computer GPO or logged in user for user GPO</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pydictor" style="font-weight:600;text-decoration:none">pydictor</a></div></td><td style="vertical-align:middle">A powerful and useful hacker dictionary builder for a brute-force attack.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pydictor" style="font-weight:600;text-decoration:none">pydictor</a></div></td><td style="vertical-align:middle">Multi-method password wordlist generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pyfiscan" style="font-weight:600;text-decoration:none">pyfiscan</a></div></td><td style="vertical-align:middle">Free web-application vulnerability and version scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pypotomux" style="font-weight:600;text-decoration:none">pypotomux</a></div></td><td style="vertical-align:middle">Protocol demuxed honeypot and wordlists collected from it</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/honeypot-and-decoy">Honeypot and Decoy</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pypykatz" style="font-weight:600;text-decoration:none">pypykatz</a></div></td><td style="vertical-align:middle">Platform idependent Mimikatz implementation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pypykatz" style="font-weight:600;text-decoration:none">pypykatz</a></div></td><td style="vertical-align:middle">Mimikatz implementation in pure Python.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pywerview" style="font-weight:600;text-decoration:none">pywerview</a></div></td><td style="vertical-align:middle">A (partial) Python rewriting of PowerSploit's PowerView.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/pywerview" style="font-weight:600;text-decoration:none">pywerview</a></div></td><td style="vertical-align:middle">A partial Python rewriting of PowerSploit's PowerView</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qark" style="font-weight:600;text-decoration:none">qark</a></div></td><td style="vertical-align:middle">Look for several security related Android application vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qemu" style="font-weight:600;text-decoration:none">qemu</a></div></td><td style="vertical-align:middle">A generic and open source machine emulator and virtualizer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qira" style="font-weight:600;text-decoration:none">qira</a></div></td><td style="vertical-align:middle">QEMU Interactive Runtime Analyser.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-ligh
88t" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qscan" style="font-weight:600;text-decoration:none">qscan</a></div></td><td style="vertical-align:middle">Quick network scanner library.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qsfuzz" style="font-weight:600;text-decoration:none">qsfuzz</a></div></td><td style="vertical-align:middle">qsfuzz is a tool that allows to write simple rules in YAML that define what value to inject</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qsinject" style="font-weight:600;text-decoration:none">qsinject</a></div></td><td style="vertical-align:middle">Allows you to quickly substitute query string values with regex matches, one-at-a-time.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/qsreplace" style="font-weight:600;text-decoration:none">qsreplace</a></div></td><td style="vertical-align:middle">Accept URLs on stdin, replace all query string values with a user-supplied value.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/radare2" style="font-weight:600;text-decoration:none">radare2</a></div></td><td style="vertical-align:middle">UNIX-like reverse engineering framework and command-line toolset.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/radare2" style="font-weight:600;text-decoration:none">radare2</a></div></td><td style="vertical-align:middle">Crossplatform binary analysis framework, disassembler, decompiler and debugger, support collaborative analysis</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rate-limit-checker" style="font-weight:600;text-decoration:none">rate-limit-checker</a></div></td><td style="vertical-align:middle">Check whether the domain has a rate limit enabled.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ratproxy" style="font-weight:600;text-decoration:none">ratproxy</a></div></td><td style="vertical-align:middle">A semi-automated largely passive web application security audit tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rawsec_cli" style="font-weight:600;text-decoration:none">rawsec_cli</a></div></td><td style="vertical-align:middle">Rawsec Inventory search CLI to find security tools and resources</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rbkb" style="font-weight:600;text-decoration:none">rbkb</a></div></td><td style="vertical-align:middle">Ruby BlackBag; a miscellaneous collection of command-line tools and ruby library helpers related to pen-testing and reversing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rbndr" style="font-weight:600;text-decoration:none">rbndr</a></div></td><td style="vertical-align:middle">Server for testing software against DNS rebinding vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rdp-sec-check" style="font-weight:600;text-decoration:none">rdp-sec-check</a></div></td><td style="vertical-align:middle">Script to enumerate security settings of an RDP Service</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rdpy" style="font-weight:600;text-decoration:none">rdpy</a></div></td><td style="vertical-align:middle">Remote Desktop Protocol in twisted Python.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reduh" style="font-weight:600;text-decoration:none">reDuh</a></div></td><td style="vertical-align:middle">Create a TCP circuit through validly formed HTTP requests.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/regeorg" style="font-weight:600;text-decoration:none">reGeorg</a></div></td><td style="vertical-align:middle">SOCKS proxies through the DMZ for pivoting</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/regeorg" style="font-weight:600;text-decoration:none">reGeorg</a></div></td><td style="vertical-align:middle">Pwn a bastion webserver and create SOCKS proxies through the DMZ.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rengine" style="font-weight:600;text-decoration:none">reNgine</a></div></td><td style="vertical-align:middle">Automated recon framework for web applications; customizable scan engines & pipeline of reconnaissance</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reapoc" style="font-weight:600;text-decoration:none">reapoc</a></div></td><td style="vertical-align:middle">OpenSource Poc && Vulnerable-Target Storage Box.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reaver-wps" style="font-weight:600;text-decoration:none">reaver-wps</a></div></td><td style="vertical-align:middle">Bruteforce WPS tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reaver-wps-t6x-fork" style="font-weight:600;text-decoration:none">reaver-wps (t6x fork)</a></div></td><td style="vertical-align:middle">Bruteforce WPS tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/recollapse" style="font-weight:600;text-decoration:none">recollapse</a></div></td><td style="vertical-align:middle">
88Helper tool for black-box regex fuzzing to bypass validations.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reconftw" style="font-weight:600;text-decoration:none">reconFTW</a></div></td><td style="vertical-align:middle">Perform automated recon on a target domain by running set of tools to perform scanning and finding out vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reconftw" style="font-weight:600;text-decoration:none">reconFTW</a></div></td><td style="vertical-align:middle">Runs the best set of tools to perform scanning and finding out vulnerabilities on a target domain.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/regulator" style="font-weight:600;text-decoration:none">regulator</a></div></td><td style="vertical-align:middle">Automated learning of regexes for DNS discovery.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rekall" style="font-weight:600;text-decoration:none">rekall</a></div></td><td style="vertical-align:middle">Rekall Memory Forensic Framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rekall" style="font-weight:600;text-decoration:none">rekall</a></div></td><td style="vertical-align:middle">Volatile memory extraction utility</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rekall-fireeye-fork" style="font-weight:600;text-decoration:none">rekall (Fireeye fork)</a></div></td><td style="vertical-align:middle">Fork of rekall with support for Windows 10 memory compression</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/related-domains" style="font-weight:600;text-decoration:none">related-domains</a></div></td><td style="vertical-align:middle">Find related domains of a given domain.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/repo-supervisor" style="font-weight:600;text-decoration:none">repo-supervisor</a></div></td><td style="vertical-align:middle">Scan your code for security misconfiguration, search for passwords and secrets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/resolvers" style="font-weight:600;text-decoration:none">resolvers</a></div></td><td style="vertical-align:middle">The most exhaustive list of reliable DNS resolvers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/reverse-shell-generator" style="font-weight:600;text-decoration:none">reverse-shell-generator</a></div></td><td style="vertical-align:middle">Hosted Reverse Shell generator with a ton of functionality.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rexsser" style="font-weight:600;text-decoration:none">rexsser</a></div></td><td style="vertical-align:middle">
88Burp Suite plugin that extracts keywords from response using and test for reflected XSS.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ripgen" style="font-weight:600;text-decoration:none">ripgen</a></div></td><td style="vertical-align:middle">Rust-based high performance domain permutation generator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ronin-exploits" style="font-weight:600;text-decoration:none">ronin-exploits</a></div></td><td style="vertical-align:middle">A micro-framework for writing and running exploits</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/Exploits">Exploits</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ronin-payloads" style="font-weight:600;text-decoration:none">ronin-payloads</a></div></td><td style="vertical-align:middle">A micro-framework for writing and running exploit payloads</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/Exploits">Exploits</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ronin-vulns" style="font-weight:600;text-decoration:none">ronin-vulns</a></div></td><td style="vertical-align:middle">Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ruby-nmap" style="font-weight:600;text-decoration:none">ruby-nmap</a></div></td><td style="vertical-align:middle">Library for nmap, allows automating nmap and parsing nmap XML files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ruler" style="font-weight:600;text-decoration:none">ruler</a></div></td><td style="vertical-align:middle">A tool to abuse Exchange services.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rulesfinder" style="font-weight:600;text-decoration:none">rulesfinder</a></div></td><td style="vertical-align:middle">Machine-learn password mangling rules;
88 finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rush" style="font-weight:600;text-decoration:none">rush</a></div></td><td style="vertical-align:middle">A cross-platform command-line tool for executing jobs in parallel.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/rustbuster" style="font-weight:600;text-decoration:none">rustbuster</a></div></td><td style="vertical-align:middle">Web directory, file and DNS scanner (wordlist bruteforce); but also a web fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3-buckets-finder" style="font-weight:600;text-decoration:none">s3-buckets-finder</a></div></td><td style="vertical-align:middle">Find AWS S3 buckets and test their permissions.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3cxsser" style="font-weight:600;text-decoration:none">s3cXSSer</a></div></td><td style="vertical-align:middle">This extension will help you to detect GET/POST based XSS vulnerability in any website easily.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3cario" style="font-weight:600;text-decoration:none">s3cario</a></div></td><td style="vertical-align:middle">Performs buckets checks from a given list of subdomains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3recon" style="font-weight:600;text-decoration:none">s3recon</a></div></td><td style="vertical-align:middle">Amazon S3 bucket finder and crawler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3reverse" style="font-weight:600;text-decoration:none">s3reverse</a></div></td><td style="vertical-align:middle">The format of various S3 buckets is convert in one format.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/s3tk" style="font-weight:600;text-decoration:none">s3tk</a></div></td><td style="vertical-align:middle">A security toolkit for Amazon S3.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sjet" style="font-weight:600;text-decoration:none">sJET</a></div></td><td style="vertical-align:middle">JMX Exploitation Toolkit</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/safecopy" style="font-weight:600;text-decoration:none">safecopy</a></div></td><td style="vertical-align:middle">Burp Extension for copying requests safely.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/samdump2" style="font-weight:600;text-decoration:none">samdump2</a></div></td><td style="vertical-align:middle">Retrieves syskey and extract hashes from Windows 2k/NT/XP/Vista SAM, often used with bkhive, part of the ophcrack project</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sandmap" style="font-weight:600;text-decoration:none">sandmap</a></div></td><td style="vertical-align:middle">Metasploit-like CLI interface for Nmap Script Engine (NSE)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sandsifter" style="font-weight:600;text-decoration:none">sandsifter</a></div></td><td style="vertical-align:middle">The x86 processor fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sandsifter" style="font-weight:600;text-decoration:none">sandsifter</a></div></td><td style="vertical-align:middle">x86 processor fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scan-check-builder" style="font-weight:600;text-decoration:none">scan-check-builder</a></div></td><td style="vertical-align:middle">Burp Suite extension which helps to improve the active and passive scanner by yourself.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scanless" style="font-weight:600;text-decoration:none">scanless</a></div></td><td style="vertical-align:middle">Online port scan scraper.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/scavenger" style="font-weight:600;text-decoration:none">scavenger</a></div></td><td style="vertical-align:middle">multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as interesting files containing sensitive information</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/secbutler" style="font-weight:600;text-decoration:none">secbutler</a></div></td><td style="vertical-align:middle">The perfect butler for pentesters, bug-bounty hunters and security researchers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/secret-bridge" style="font-weight:600;text-decoration:none">secret-bridge</a></div></td><td style="vertical-align:middle">Monitors Github for leaked secrets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta">
88<a href="/tool/securecodebox" style="font-weight:600;text-decoration:none">secureCodeBox</a></div></td><td style="vertical-align:middle">Continuous security scans based on kubernetes; orchestrate and automate a bunch of security-testing tools</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/securityonion" style="font-weight:600;text-decoration:none">securityonion</a></div></td><td style="vertical-align:middle">Free and open platform for threat hunting, enterprise security monitoring, and log management.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sentryssrf" style="font-weight:600;text-decoration:none">sentrySSRF</a></div></td><td style="vertical-align:middle">Searching for Sentry config on page or in Javascript files and check blind SSRF.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/server-side-prototype-pollution" style="font-weight:600;text-decoration:none">server-side-prototype-pollution</a></div></td><td style="vertical-align:middle">Identifies server-side prototype pollution vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shad0w" style="font-weight:600;text-decoration:none">shad0w</a></div></td><td style="vertical-align:middle">A post exploitation framework designed to operate covertly on heavily monitored environments.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shellbags" style="font-weight:600;text-decoration:none">shellbags</a></div></td><td style="vertical-align:middle">Shellbag parser (Windows Registry Keys)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shhgit" style="font-weight:600;text-decoration:none">shhgit</a></div></td><td style="vertical-align:middle">Secrets detection for your GitHub, GitLab and Bitbucket repositories.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shosubgo" style="font-weight:600;text-decoration:none">shosubgo</a></div></td><td style="vertical-align:middle">Small tool to grab subdomains using Shodan API.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shosubgo" style="font-weight:600;text-decoration:none">shosubgo</a></div></td><td style="vertical-align:middle">Grab subdomains using Shodan api</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shuffledns" style="font-weight:600;text-decoration:none">shuffleDNS</a></div></td><td style="vertical-align:middle">Enumerate valid subdomains using active bruteforce and DNS resolution.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/shuffledns" style="font-weight:600;text-decoration:none">shuffledns</a></div></td><td style="vertical-align:middle">Wrapper around massdns that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/simulator" style="font-weight:600;text-decoration:none">
88simulator</a></div></td><td style="vertical-align:middle">Distributed systems and infrastructure simulator for attacking and debugging Kubernetes, creates a Kubernetes cluster in AWS and runs scenarios which misconfigure it or leave it vulnerable to compromise to train in mitigating against these vulnerabilities</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/intentionally-vulnerable-applications">Intentionally Vulnerable Applications</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sj" style="font-weight:600;text-decoration:none">sj</a></div></td><td style="vertical-align:middle">Swagger Jacker; audit API endpoints defined in exposed (Swagger/OpenAPI) definition files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/skipfish" style="font-weight:600;text-decoration:none">skipfish</a></div></td><td style="vertical-align:middle">Active web application security reconnaissance tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/slither" style="font-weight:600;text-decoration:none">slither</a></div></td><td style="vertical-align:middle">Static analyzer for Solidity.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sliver" style="font-weight:600;text-decoration:none">sliver</a></div></td><td style="vertical-align:middle">Adversary emulation framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smap" style="font-weight:600;text-decoration:none">smap</a></div></td><td style="vertical-align:middle">A drop-in replacement for Nmap powered by shodan.io.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smb-scanner" style="font-weight:600;text-decoration:none">smb-scanner</a></div></td><td style="vertical-align:middle">Samba scanning tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smbcrawler" style="font-weight:600;text-decoration:none">smbcrawler</a></div></td><td style="vertical-align:middle">No-nonsense tool that takes credentials and a list of hosts and crawls through those shares.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/smbmap" style="font-weight:600;text-decoration:none">smbmap</a></div></td><td style="vertical-align:middle">A handy SMB enumeration tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/snallygaster" style="font-weight:600;text-decoration:none">snallygaster</a></div></td><td style="vertical-align:middle">Tool to scan for secret files on HTTP servers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/snallygaster" style="font-weight:600;text-decoration:none">snallygaster</a></div></td><td style="vertical-align:middle">Web scanner that looks for files accessible on web servers that shouldn't be public</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/snmpbwpl" style="font-weight:600;text-decoration:none">snmpbw.pl</a></div></td><td style="vertical-align:middle">Multithreaded script for bulk walking targeted host systems for SNMP data</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sns" style="font-weight:600;text-decoration:none">sns</a></div></td><td style="vertical-align:middle">IIS shortname scanner written in Go.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/socialhunter" style="font-weight:600;text-decoration:none">socialhunter</a></div></td><td style="vertical-align:middle">Crawls the website and finds broken social media links that can be hijacked</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sonarqube" style="font-weight:600;text-decoration:none">sonarqube</a></div></td><td style="vertical-align:middle">Continuous inspection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sops" style="font-weight:600;text-decoration:none">sops</a></div></td><td style="vertical-align:middle">Simple and flexible tool for managing secrets.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sourcemapper" style="font-weight:600;text-decoration:none">sourcemapper</a></div></td><td style="vertical-align:middle">Extract JavaScript source trees from source map files.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spaces-finder" style="font-weight:600;text-decoration:none">spaces-finder</a></div></td><td style="vertical-align:middle">A tool to hunt for publicly accessible DigitalOcean Spaces.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spamscanner" style="font-weight:600;text-decoration:none">spamscanner</a></div></td><td style="vertical-align:middle">Node.js anti-spam, email filtering, and phishing prevention tool and service.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spiderfoot" style="font-weight:600;text-decoration:none">spiderfoot</a></div></td><td style="vertical-align:middle">OSINT framework, collect and manage data, scan target</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spidr" style="font-weight:600;text-decoration:none">spidr</a></div></td><td style="vertical-align:middle">Web spidering library that can spider a site, multiple domains, certain links or infinitely</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sploitctl" style="font-weight:600;text-decoration:none">sploitctl</a></div></td><td style="vertical-align:middle">Fetch, install and search exploit archives from exploit sites like Packet Storm or Exploit-DB</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spoofcheck" style="font-weight:600;text-decoration:none">spoofcheck</a></div></td><td style="vertical-align:middle">Simple script that checks a domain for email protection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/spraykatz" style="font-weight:600;text-decoration:none">spraykatz</a></div></td><td style="vertical-align:middle">Credentials gathering tool automating remote procdump and parse of lsass process.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqli-labs" style="font-weight:600;text-decoration:none">sqli-labs</a></div></td><td style="vertical-align:middle">SQLI labs to test error based, blind boolean based, time based.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlipy" style="font-weight:600;text-decoration:none">sqlipy</a></div></td><td style="vertical-align:middle">Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/well-known-products">Well known products</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlmap" style="font-weight:600;text-decoration:none">sqlmap</a></div></td><td style="vertical-align:middle">Automatic SQL injection and database takeover</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlmap" style="font-weight:600;text-decoration:none">sqlmap</a></div></td><td style="vertical-align:middle">Automatic SQL injection and database takeover tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sqlmate" style="font-weight:600;text-decoration:none">sqlmate</a></div></td><td style="vertical-align:middle">A friend of SQLmap which will do what you always expected from SQLmap.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssh-audit" style="font-weight:600;text-decoration:none">ssh-audit</a></div></td><td style="vertical-align:middle">SSH server auditing: banner, key exchange, encryption, compatibility, security...</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssh-audit" style="font-weight:600;text-decoration:none">ssh-audit</a></div></td><td style="vertical-align:middle">SSH scanner that detects protocol, version, grab banner, recognize software and operating system, output algorithm information and recommendations</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssh-auditor" style="font-weight:600;text-decoration:none">ssh-auditor</a></div></td><td style="vertical-align:middle">The best way to scan for weak ssh passwords on your network.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sshlooter" style="font-weight:600;text-decoration:none">sshLooter</a></div></td><td style="vertical-align:middle">Script to steal passwords from ssh.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sshlooterc" style="font-weight:600;text-decoration:none">sshLooterC</a></div></td><td style="vertical-align:middle">It's the C version of sshLooter.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sshame" style="font-weight:600;text-decoration:none">sshame</a></div></td><td style="vertical-align:middle">Brute force SSH public-key authentication interactively</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ssllabs-scan" style="font-weight:600;text-decoration:none">ssllabs-scan</a></div></td><td style="vertical-align:middle">CLI reference-implementation client for Qualys SSL Labs APIs, designed for automated and/
88or bulk testing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sslscan" style="font-weight:600;text-decoration:none">sslscan</a></div></td><td style="vertical-align:middle">Tests SSL/TLS enabled services to discover supported cipher suites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sslscan2" style="font-weight:600;text-decoration:none">sslscan2</a></div></td><td style="vertical-align:middle">Tests SSL/TLS enabled services to discover supported cipher suites</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sslstrip" style="font-weight:600;text-decoration:none">sslstrip</a></div></td><td style="vertical-align:middle">A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/steghide" style="font-weight:600;text-decoration:none">steghide</a></div></td><td style="vertical-align:middle">Steganography program that hides secrets in the least significant bits of a file.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/strace" style="font-weight:600;text-decoration:none">strace</a></div></td><td style="vertical-align:middle">Debugger for Linux</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sub-domain-enumeration-techniques" style="font-weight:600;text-decoration:none">sub-domain enumeration techniques</a></div></td><td style="vertical-align:middle">Esoteric sub-domain enumeration techniques - Bugcrowd LevelUp</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sub404" style="font-weight:600;text-decoration:none">sub404</a></div></td><td style="vertical-align:middle">
88A fast tool to check subdomain takeover vulnerability.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subhijack" style="font-weight:600;text-decoration:none">subHijack</a></div></td><td style="vertical-align:middle">Hijacking forgotten & misconfigured subdomains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subfinder" style="font-weight:600;text-decoration:none">subfinder</a></div></td><td style="vertical-align:middle">Discovers valid subdomains for websites, designed as a passive framework to be useful for bug bounties and safe for penetration testing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subjs" style="font-weight:600;text-decoration:none">subjs</a></div></td><td style="vertical-align:middle">Fetches javascript file from a list of URLS or subdomains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subnerium" style="font-weight:600;text-decoration:none">subnerium</a></div></td><td style="vertical-align:middle">A fast passive subdomain enumeration tool that uses various sources to gather data.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subtake" style="font-weight:600;text-decoration:none">subtake</a></div></td><td style="vertical-align:middle">Extension of sublister tool to check for subdomain takeovers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subzuf" style="font-weight:600;text-decoration:none">subzuf</a></div></td><td style="vertical-align:middle">DNS response-guided subdomain fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subzuf" style="font-weight:600;text-decoration:none">subzuf</a></div></td><td style="vertical-align:middle">A smart DNS response-guided subdomain fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/subzy" style="font-weight:600;text-decoration:none">subzy</a></div></td><td style="vertical-align:middle">Subdomain takeover vulnerability checker.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/sulley" style="font-weight:600;text-decoration:none">sulley</a></div></td><td style="vertical-align:middle">A pure-python fully automated and unattended fuzzing framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/svn-extractor" style="font-weight:600;text-decoration:none">svn-extractor</a></div></td><td style="vertical-align:middle">Simple script to extract all web resources by means of .SVN folder exposed over network.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/swagroutes" style="font-weight:600;text-decoration:none">swagroutes</a></div></td><td style="vertical-align:middle">Extract and list API routes from Swagger files in YAML/JSON format.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/t14m4t" style="font-weight:600;text-decoration:none">t14m4t</a></div></td><td style="vertical-align:middle">Automated brute-forcing attack tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/takeover" style="font-weight:600;text-decoration:none">takeover</a></div></td><td style="vertical-align:middle">A tool for testing subdomain takeover possibilities at a mass scale.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/talisman" style="font-weight:600;text-decoration:none">talisman</a></div></td><td style="vertical-align:middle">Validate the outgoing changeset for things that look suspicious such as tokens, passwords and keys.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/terraform" style="font-weight:600;text-decoration:none">terraform</a></div></td><td style="vertical-align:middle">Enables you to safely and predictably create, change, and improve infrastru
88cture.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/testsslsh" style="font-weight:600;text-decoration:none">testssl.sh</a></div></td><td style="vertical-align:middle">TLS/SSL scanner to find weak ciphers, protocols or flaws</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/testssl.sh" style="font-weight:600;text-decoration:none">testssl.sh</a></div></td><td style="vertical-align:middle">Testing TLS/SSL encryption anywhere on any port.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tfsec" style="font-weight:600;text-decoration:none">tfsec</a></div></td><td style="vertical-align:middle">Security scanner for your Terraform code.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/theharvester" style="font-weight:600;text-decoration:none">theHarvester</a></div></td><td style="vertical-align:middle">E-mails, subdomains and names Harvester.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/theharvester" style="font-weight:600;text-decoration:none">theHarvester</a></div></td><td style="vertical-align:middle">Multi-purpose information gathering tool: emails, names, subdomains, IPs, URLs</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/thezoo" style="font-weight:600;text-decoration:none">theZoo</a></div></td><td style="vertical-align:middle">Repository of live malwares for malware analysis</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/threatfeedsio" style="font-weight:600;text-decoration:none">threatfeeds.io</a></div></td><td style="vertical-align:middle">Open-source threat intelligence feeds; sharing malware URLs, IP reputation, bad IPs, etc.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/threat-intelligence">Threat Intelligence</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/timesketch" style="font-weight:600;text-decoration:none">timesketch</a></div></td><td style="vertical-align:middle">Collaborative forensic timeline analysis.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tinfoleak" style="font-weight:600;text-decoration:none">tinfoleak</a></div></td><td style="vertical-align:middle">Twitter intelligence analysis tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tinfoleak" style="font-weight:600;text-decoration:none">tinfoleak</a></div></td><td style="vertical-align:middle">The most complete open-source tool for Twitter intelligence analysis.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tko-subs" style="font-weight:600;text-decoration:none">tko-subs</a></div></td><td style="vertical-align:middle">A tool that can help detect and takeover subdomains with dead DNS records.<
88/td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tlsx" style="font-weight:600;text-decoration:none">tlsx</a></div></td><td style="vertical-align:middle">Fast and configurable TLS grabber focused on TLS based data collection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/toxssin" style="font-weight:600;text-decoration:none">toxssin</a></div></td><td style="vertical-align:middle">Open-source penetration testing tool that automates the process of exploiting XSS.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/toxssin" style="font-weight:600;text-decoration:none">toxssin</a></div></td><td style="vertical-align:middle">XSS exploitation command-line interface and payload generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tplmap" style="font-weight:600;text-decoration:none">tplmap</a></div></td><td style="vertical-align:middle">Server-Side Template Injection and Code Injection Detection and Exploitation Tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tplmap" style="font-weight:600;text-decoration:none">tplmap</a></div></td><td style="vertical-align:middle">SSTI and code injection detection and exploitation tool</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trackerjacker" style="font-weight:600;text-decoration:none">trackerjacker</a></div></td><td style="vertical-align:middle">Like nmap for mapping wifi networks you're not connected to, plus device tracking.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trackerjacker" style="font-weight:600;text-decoration:none">trackerjacker</a></div></td><td style="vertical-align:middle">Tool for mapping and tacking wifi networks and devices through raw 802.11 monitoring</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/traitor" style="font-weight:600;text-decoration:none">traitor</a></div></td><td style="vertical-align:middle">Automatic Linux privilege escalation via exploitation of low-hanging fruit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trape" style="font-weight:600;text-decoration:none">trape</a></div></td><td style="vertical-align:middle">Analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trape" style="font-weight:600;text-decoration:none">trape</a></div></td><td style="vertical-align:middle">People tracker on the Internet: OSINT analysis and research tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/trurl" style="font-weight:600;text-decoration:none">trurl</a></div></td><td style="vertical-align:middle">Command line tool for URL parsing and manipulation.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tsunami-security-scanner" style="font-weight:600;text-decoration:none">tsunami-security-scanner</a></div></td><td style="vertical-align:middle">Network security scanner with an extensible plugin system.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ttddbg" style="font-weight:600;text-decoration:none">ttddbg</a></div></td><td style="vertical-align:middle">Time Travel Debugging IDA plugin</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/tun2socks" style="font-weight:600;text-decoration:none">tun2socks</a></div></td><td style="vertical-align:middle">Handle all network traffic of any internet programs sent by the device through a proxy.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/twint" style="font-weight:600;text-decoration:none">twint</a></div></td><td style="vertical-align:middle">Twitter scraping & OSINT tool allowing you to scrape a user's followers, following, tweets and more.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ufonet" style="font-weight:600;text-decoration:none">ufonet</a></div></td><td style="vertical-align:middle">Denial of Service Toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uncoderio" style="font-weight:600;text-decoration:none">uncoder.io</a></div></td><td style="vertical-align:middle">Translate sigma rules into various SIEM, EDR, and XDR formats</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uncompyle" style="font-weight:600;text-decoration:none">uncompyle</a></div></td><td style="vertical-align:middle">Python 2.7 binaries (.pyc) decompiler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uncompyle6" style="font-weight:600;text-decoration:none">uncompyle6</a></div></td><td style="vertical-align:middle">Python 1.5, 2.1 to 2.7, 3.1 to 3.6 binaries (.pyc) decompiler</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uncompyle6" style="font-weight:600;text-decoration:none">uncompyle6</a></div></td><td style="vertical-align:middle">A cross-version Python bytecode decompiler.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uncover" style="font-weight:600;text-decoration:none">uncover</a></div></td><td style="vertical-align:middle">Quickly discover exposed hosts on the internet using multiple search engines.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uncover" style="font-weight:600;text-decoration:none">uncover</a></div></td><td style="vertical-align:middle">Discover exposed hosts on the internet using multiple search engines</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/undetected-chromedriver" style="font-weight:600;text-decoration:none">undetected-chromedriver</a></div></td><td style="vertical-align:middle">Optimized Selenium Chromedriver patch which does not trigger anti-bot services.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/unfurl" style="font-weight:600;text-decoration:none">unfurl</a></div></td><td style="vertical-align:middle">An Entropy-Based Link Vulnerability Tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/unicorn" style="font-weight:600;text-decoration:none">unicorn</a></div></td><td style="vertical-align:middle">Tool for using a PowerShell downgrade attack and inject shellcode into memory</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/unicorn" style="font-weight:600;text-decoration:none">unicorn</a></div></td><td style="vertical-align:middle">Simple tool for using a PowerShell downgrade attack and inject shellcode into memory.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/unisec" style="font-weight:600;text-decoration:none">unisec</a></div></td><td style
88="vertical-align:middle">Toolkit for security research manipulating Unicode: confusables, homoglyphs, hexdump, code point, UTF-8, UTF-16, UTF-32, properties, regexp search, size, grapheme, surrogates, version, ICU, CLDR, UCD</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/unix-privesc-check" style="font-weight:600;text-decoration:none">unix-privesc-check</a></div></td><td style="vertical-align:middle">Shell script to check for simple privilege escalation vectors on Unix systems.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/upload_bypass" style="font-weight:600;text-decoration:none">upload_bypass</a></div></td><td style="vertical-align:middle">File upload restrictions bypass by using different techniques!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/urless" style="font-weight:600;text-decoration:none">urless</a></div></td><td style="vertical-align:middle">De-clutter a list of URLs.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/urlgrab" style="font-weight:600;text-decoration:none">urlgrab</a></div></td><td style="vertical-align:middle">A golang utility to spider through a website searching for additional links.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/urlhunter" style="font-weight:600;text-decoration:none">urlhunter</a></div></td><td style="vertical-align:middle">Allows searching on URLs that are exposed via shortener services.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/uro" style="font-weight:600;text-decoration:none">uro</a></div></td><td style="vertical-align:middle">Declutters url lists for crawling/pentesting.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/usbsas" style="font-weight:600;text-decoration:none">usbsas</a></div></td><td style="vertical-align:middle">Tool and framework for securely reading untrusted USB mass storage devices</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/defensive">Defensive</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/userefuzz" style="font-weight:600;text-decoration:none">userefuzz</a></div></td><td style="vertical-align:middle">User-Agent, X-Forwarded-For and Referer SQLI Fuzzer.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/v0lt" style="font-weight:600;text-decoration:none">v0lt</a></div></td><td style="vertical-align:middle">CTF toolkit / framework</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/other">Other</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vaf" style="font-weight:600;text-decoration:none">vaf</a></div></td><td style="vertical-align:middle">Web directory and file scanner (wordlist bruteforce); but also a web fuzzer</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vaf" style="font-weight:600;text-decoration:none">vaf</a></div></td><td style="vertical-align:middle">Cross-platform very advanced and fast web fuzzer written in nim.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/van-gonography" style="font-weight:600;text-decoration:none">van-gonography</a></div></td><td style="vertical-align:middle">Hide any type of files inside a image of your choice using steganography.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vaya-ciego-nen" style="font-weight:600;text-decoration:none">vaya-ciego-nen</a></div></td><td style="vertical-align:middle">Detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vbscan" style="font-weight:600;text-decoration:none">vbscan</a></div></td><td style="vertical-align:middle">A black box vBulletin vulnerability scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vcr" style="font-weight:600;text-decoration:none">vcr</a></div></td><td style="vertical-align:middle">Vulnerability Compliance Report; parse Nessus CIS benchmark scan files and generate HTML reports</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vcsmap" style="font-weight:600;text-decoration:none">vcsmap</a></div></td><td style="vertical-align:middle">Plugin-based tool to scan public version control systems for sensitive information.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/source-code-management">Source code management</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vhosts-sieve" style="font-weight:600;text-decoration:none">vhosts-sieve</a></div></td><td style="vertical-align:middle">Searching for virtual hosts among non-resolvable domains.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/volatility" style="font-weight:600;text-decoration:none">volatility</a></div></td><td style="vertical-align:middle">The volatile memory extraction framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/volatility" style="font-weight:600;text-decoration:none">volatility</a></div></td><td style="vertical-align:middle">Volatile memory extraction utility</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/volatility-fireeye-fork" style="font-weight:600;text-decoration:none">volatility (Fireeye fork)</a></div></td><td style="vertical-align:middle">Fork of volatility with support for Windows 10 memory compression</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/digital-forensics">Digital Forensics</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/volatility-gpg" style="font-weight:600;text-decoration:none">volatility-gpg</a></div></td><td style="vertical-align:middle">Volatility3 plugins that can retrieve partial and full gpg passphrases from gpg-agent'
88s cache</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vuldash" style="font-weight:600;text-decoration:none">vuldash</a></div></td><td style="vertical-align:middle">Vulnerability Dashboard; vulnerability database, project management and report generation</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vulhub" style="font-weight:600;text-decoration:none">vulhub</a></div></td><td style="vertical-align:middle">Pre-built vulnerable environments based on docker-compose.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vulnerable-ad" style="font-weight:600;text-decoration:none">vulnerable-AD</a></div></td><td style="vertical-align:middle">Create a vulnerable active directory to test most of the active directory attacks in a local lab.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vulners" style="font-weight:600;text-decoration:none">vulners</a></div></td><td style="vertical-align:middle">Vulnerability scanner based on vulners.com search API</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/plugins">Plugins</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/vulnrepo" style="font-weight:600;text-decoration:none">vulnrepo</a></div></td><td style="vertical-align:middle">VULNRÎPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting! </td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/collaboration-and-report">Collaboration and Report</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/w3af" style="font-weight:600;text-decoration:none">w3af</a></div></td><td style="vertical-align:middle">Web application attack and audit framework, web-oriented security scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/w3af" style="font-weight:600;text-decoration:none">w3af</a></div></td><td style="vertical-align:middle">Web Application Attack and Audit Framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wacker" style="font-weight:600;text-decoration:none">wacker</a></div></td><td style="vertical-align:middle">A WPA3 dictionary cracker.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/waf-bypass" style="font-weight:600;text-decoration:none">waf-bypass</a></div></td><td style="vertical-align:middle">Check your WAF before an attacker does.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wafw00f" style="font-weight:600;text-decoration:none">wafw00f</a></div></td><td style="vertical-align:middle">Identify and fingerprint Web Application Firewall products protecting a website.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wapiti" style="font-weight:600;text-decoration:none">wapiti</a></div></td><td style="vertical-align:middle">Web-oriented vulnerability scanner, can generates reports</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/waybacksqliscanner" style="font-weight:600;text-decoration:none">waybackSqliScanner</a></div></td><td style="vertical-align:middle">Gather urls from wayback machine and test each GET parameter for SQL injection.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/waybackurls" style="font-weight:600;text-decoration:none">waybackurls</a></div></td><td style="vertical-align:middle">Fetch all the URLs that the Wayback Machine knows about for a domain.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cloud-services">Cloud & services</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/waymore" style="font-weight:600;text-decoration:none">waymore</a></div></td><td style="vertical-align:middle">Find links from Wayback Machine, Common Crawl, Alien Vault OTX and URLScan; download the archived responses for URLs on Wayback Machine</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wazuh" style="font-weight:600;text-decoration:none">wazuh</a></div></td><td style="vertical-align:middle">The open source security platform.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/bug-bounty">Bug bounty</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/weakpass" style="font-weight:600;text-decoration:none">weakpass</a></div></td><td style="vertical-align:middle">Database of wordlists for hash cracking and compilation of best wordlists.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/web-hacking-toolkit" style="font-weight:600;text-decoration:none">web-hacking-toolkit</a></div></td><td style="vertical-align:middle">A web hacking toolkit.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/virtualization">Virtualization</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/web2shell" style="font-weight:600;text-decoration:none">web2shell</a></div></td><td style="vertical-align:middle">Automate converting webshells into reverse shells.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webanalyze" style="font-weight:600;text-decoration:none">webanalyze</a></div></td><td style="vertical-align:middle">Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
88Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webanalyze" style="font-weight:600;text-decoration:none">webanalyze</a></div></td><td style="vertical-align:middle">Uncovers technologies used on websites to automate mass scanning.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webhook" style="font-weight:600;text-decoration:none">webhook</a></div></td><td style="vertical-align:middle">A lightweight incoming webhook server to run shell commands.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webhook.site" style="font-weight:600;text-decoration:none">webhook.site</a></div></td><td style="vertical-align:middle">Easily test HTTP webhooks with this handy tool that displays requests instantly.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webhookd" style="font-weight:600;text-decoration:none">webhookd</a></div></td><td style="vertical-align:middle">A very simple webhook server launching shell scripts.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webpalm" style="font-weight:600;text-decoration:none">webpalm</a></div></td><td style="vertical-align:middle">A tool that traverses a website and generates a tree of all the webpages and their links.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/webscreenshot" style="font-weight:600;text-decoration:none">webscreenshot</a></div></td><td style="vertical-align:middle">A simple script to screenshot a list of websites.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/websy" style="font-weight:600;text-decoration:none">websy</a></div></td><td style="vertical-align:middle">Keep an eye on your targets to get quickly notified for any change they push on their server.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/weevely3" style="font-weight:600;text-decoration:none">weevely3</a></div></td><td style="vertical-align:middle">Weaponized web shell.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/weggli" style="font-weight:600;text-decoration:none">weggli</a></div></td><td style="vertical-align:middle">Semantic search tool for C and C++ designed to help security researchers identify interesting functionality in large codebase
88s</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wgen.io" style="font-weight:600;text-decoration:none">wgen.io</a></div></td><td style="vertical-align:middle">Generate rich wordlists for targeted attacks online.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whonow" style="font-weight:600;text-decoration:none">whonow</a></div></td><td style="vertical-align:middle">A malicious DNS server for executing DNS Rebinding attacks on the fly.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/whosthere" style="font-weight:600;text-decoration:none">whosthere</a></div></td><td style="vertical-align:middle">Local Area Network discovery tool with a modern Terminal User Interface (TUI) written in Go. Discover, explore, and understand your LAN in an intuitive way. 89 90Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by attempting TCP/UDP connections to trigger ARP resolution, then reads the ARP cache to identify devices on your Local Area Network. This technique populates the ARP cache without requiring elevated privileges. All discovered devices are enhanced with OUI lookups to display manufacturers when available. 91 92Whosthere provides a friendly, intuitive way to answer the question every network administrator asks: "Who's there on my network?"</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-danger is-light" title="Has Video Review"><i class="fa-solid fa-play"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifi-bruteforcer-fsecurify" style="font-weight:600;text-decoration:none">wifi-bruteforcer-fsecurify</a></div></td><td style="vertical-align:middle">Android application to brute force WiFi passwords without requiring a rooted device.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifijammer" style="font-weight:600;text-decoration:none">wifijammer</a></div></td><td style="vertical-align:middle">Script to jam wifi clients and access points</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifijammer" style="font-weight:600;text-decoration:none">wifijammer</a></div></td><td style="vertical-align:middle">Continuously jam all wifi clients/routers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifiphisher" style="font-weight:600;text-decoration:none">wifiphisher</a></div></td><td style="vertical-align:middle">The rogue access point framework.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifipumpkin3" style="font-weight:600;text-decoration:none">wifipumpkin3</a></div></td><td style="vertical-align:middle">Powerful framework for rogue access point attack.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifite" style="font-weight:600;text-decoration:none">wifite</a></div></td><td style="vertical-align:middle">Runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches!</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wifite2" style="font-weight:600;text-decoration:none">wifite2</a></div></td><td style="vertical-align:middle">Script for auditing wireless networks that runs existing wireless-auditing tools</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/wireless">Wireless</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wikto" style="font-weight:600;text-decoration:none">wikto</a></div></td><td style="vertical-align:middle">Nikto for Windows with some extra features.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wikto" style="font-weight:600;text-decoration:none">wikto</a></div></td><td style="vertical-align:middle">Nikto for Windows; web security scanner</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
92Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wildcrawl" style="font-weight:600;text-decoration:none">wildcrawl</a></div></td><td style="vertical-align:middle">Crawls URL to get a better image of what is tied to a website.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/windapsearch" style="font-weight:600;text-decoration:none">windapsearch</a></div></td><td style="vertical-align:middle">Enumerate users, groups and computers from a Windows domain through LDAP queries.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/windapsearch" style="font-weight:600;text-decoration:none">windapsearch</a></div></td><td style="vertical-align:middle">Script to enumerate users, groups and computers from a Windows domain through LDAP queries</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/windows-kernel-exploits" style="font-weight:600;text-decoration:none">windows-kernel-exploits</a></div></td><td style="vertical-align:middle">A list of Windows kernel exploits.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/operating-systems">Operating systems</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/windows-privesc-check" style="font-weight:600;text-decoration:none">windows-privesc-check</a></div></td><td style="vertical-align:middle">Standalone executable to check for simple privilege escalation vectors.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wlgen" style="font-weight:600;text-decoration:none">wlgen</a></div></td><td style="vertical-align:middle">Automate building wordlists for AppSec directory/resource bruting.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wmiexec-pro" style="font-weight:600;text-decoration:none">wmiexec-Pro</a></div></td><td style="vertical-align:middle">Perform different ways of command execution via WMI protocol (port 135) for AV evasion</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wmiexec-pro" style="font-weight:600;text-decoration:none">wmiexec-Pro</a></div></td><td style="vertical-align:middle">The new generation of wmiexec.py with all operations performed on port 135 for antivirus evasion.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wmiexec-regout" style="font-weight:600;text-decoration:none">wmiexec-RegOut</a></div></td><td style="vertical-align:middle">Modify version of impacket wmiexec.py, get output from registry.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wordlistrb" style="font-weight:600;text-decoration:none">wordlist.rb</a></div></td><td style="vertical-align:middle">
92Library for reading, combining, manipulating, and building wordlists, efficiently</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wordlistctl" style="font-weight:600;text-decoration:none">wordlistctl</a></div></td><td style="vertical-align:middle">Fetch, install and search wordlist archives from websites and torrent peers.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/resources">Resources</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wordlistctl" style="font-weight:600;text-decoration:none">wordlistctl</a></div></td><td style="vertical-align:middle">Fetch, install and search wordlist archives from websites and torrent peers</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wordlistgen" style="font-weight:600;text-decoration:none">wordlistgen</a></div></td><td style="vertical-align:middle">Generate context-specific wordlists for content discovery from lists of URLs or paths</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cracking">Cracking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wordlistgen" style="font-weight:600;text-decoration:none">wordlistgen</a></div></td><td style="vertical-align:middle">Quickly generate context-specific wordlists for content discovery from lists of URLs or paths.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wpbullet" style="font-weight:600;text-decoration:none">wpBullet</a></div></td><td style="vertical-align:middle">Static code analysis for WordPress Plugins and Themes (and PHP)</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/code-analysis">Code Analysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wpfinger" style="font-weight:600;text-decoration:none">wpfinger</a></div></td><td style="vertical-align:middle">wpfinger is a red-team WordPress scanning tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cms">CMS</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wrapwrap" style="font-weight:600;text-decoration:none">wrapwrap</a></div></td><td style="vertical-align:middle">Generates a php://filter chain that adds a prefix and a suffix to the contents of a file</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
92Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wsrepl" style="font-weight:600;text-decoration:none">wsrepl</a></div></td><td style="vertical-align:middle">Interactive websocket REPL designed specifically for penetration testing</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wstunnel" style="font-weight:600;text-decoration:none">wstunnel</a></div></td><td style="vertical-align:middle">Tunneling over websocket protocol - Static binary available.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/wtfis" style="font-weight:600;text-decoration:none">wtfis</a></div></td><td style="vertical-align:middle">Passive hostname, domain and IP lookup tool for non-robots.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/x64dbg" style="font-weight:600;text-decoration:none">x64dbg</a></div></td><td style="vertical-align:middle">Windows debugger</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/x64dbg" style="font-weight:600;text-decoration:none">x64dbg</a></div></td><td style="vertical-align:middle">An open-source user mode debugger for Windows for reverse engineering and malware analysis.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/x8" style="font-weight:600;text-decoration:none">x8</a></div></td><td style="vertical-align:middle">HTTP parameter discovery suite</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xnlinkfinder" style="font-weight:600;text-decoration:none">xnLinkFinder</a></div></td><td style="vertical-align:middle">Discover endpoints and potential parameters for a given target</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xnlinkfinder" style="font-weight:600;text-decoration:none">xnLinkFinder</a></div></td><td style="vertical-align:middle">A python tool used to discover endpoints and potential parameters for a given target.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xray" style="font-weight:600;text-decoration:none">xray</a></div></td><td style="vertical-align:middle">Security assessment tool that supports common web security issue scanning and custom PoC.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/auth-perms">Auth & perms</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xss2png" style="font-weight:600;text-decoration:none">xss2png</a></div></td><td style="vertical-align:middle">PNG IDAT chunks XSS payload generator.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xssvalidator" style="font-weight:600;text-decoration:none">xssValidator</a></div></td><td style="vertical-align:middle">A Burp Intruder extender designed for automation and validation of XSS vulnerabilities.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xsscrapy" style="font-weight:600;text-decoration:none">xsscrapy</a></div></td><td style="vertical-align:middle">Fast, thorough, XSS/SQLi spider.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xssor2" style="font-weight:600;text-decoration:none">xssor2</a></div></td><td style="vertical-align:middle">Hack with JavaScript.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/vulnerabilities">Vulnerabilities</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xurlfind3r" style="font-weight:600;text-decoration:none">xurlfind3r</a></div></td><td style="vertical-align:middle">A cli utility to find domain's known URLs from curated passive online sources.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxeserv" style="font-weight:600;text-decoration:none">xxeserv</a></div></td><td style="vertical-align:middle">HTTP and FTP server for OOB XXE attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">
92Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxeserv" style="font-weight:600;text-decoration:none">xxeserv</a></div></td><td style="vertical-align:middle">A mini webserver with FTP support for XXE payloads.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxxpwn" style="font-weight:600;text-decoration:none">xxxpwn</a></div></td><td style="vertical-align:middle">XPath injection tool, designed for blind injection</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxxpwn_smart" style="font-weight:600;text-decoration:none">xxxpwn_smart</a></div></td><td style="vertical-align:middle">XPath injection tool, fork of xxxpwn adding further optimizations and tweaks, uses predictive text based on a dictionary of words/phrases vs frequencies of occurrence</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/web-application-exploitation">Web Application Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/xxxswf" style="font-weight:600;text-decoration:none">xxxswf</a></div></td><td style="vertical-align:middle">Small script for carving, scanning, compressing, decompressing and analyzing SWF files</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/reverse-engineering">Reverse Engineering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yar" style="font-weight:600;text-decoration:none">yar</a></div></td><td style="vertical-align:middle">Find secret information (secrets, tokens, passwords) in git repositories</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/osint-and-reconnaissance">OSINT and Reconnaissance</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yaranalyzer" style="font-weight:600;text-decoration:none">yarAnalyzer</a></div></td><td style="vertical-align:middle">Creates statistics on a yara rule set and files in a sample directory</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yargen" style="font-weight:600;text-decoration:none">yarGen</a></div></td><td style="vertical-align:middle">YARA rules generator</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/incident-response">Incident Response</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yersinia" style="font-weight:600;text-decoration:none">yersinia</a></div></td><td style="vertical-align:middle">Framework for layer 2 attacks</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/networking">Networking</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/yersinia" style="font-weight:600;text-decoration:none">yersinia</a></div></td><td style="vertical-align:middle">A framework for layer 2 attacks.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ysoserial" style="font-weight:600;text-decoration:none">ysoserial</a></div></td><td style="vertical-align:middle">Generates payloads that exploit unsafe Java object deserialization.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ysoserial" style="font-weight:600;text-decoration:none">ysoserial</a></div></td><td style="vertical-align:middle">Tool for generating payloads that exploit unsafe Java object deserialization</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/system-exploitation">System Exploitation</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span><span class="tag is-warning is-light" title="Used in Pentest Reports"><i class="fa-solid fa-file-lines"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/ysoserial.net" style="font-weight:600;text-decoration:none">ysoserial.net</a></div></td><td style="vertical-align:middle">Deserialization payload generator for a variety of .NET formatters.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/development">Development</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zarp" style="font-weight:600;text-decoration:none">zarp</a></div></td><td style="vertical-align:middle">Network attack tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zdns" style="font-weight:600;text-decoration:none">zdns</a></div></td><td style="vertical-align:middle">Fast CLI DNS lookup tool.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zgrab" style="font-weight:600;text-decoration:none">zgrab</a></div></td><td style="vertical-align:middle">Fast Go application scanner.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/network">Network</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zmap" style="font-weight:600;text-decoration:none">zmap</a></div></td><td style="vertical-align:middle">Fast single packet network scanner designed for Internet-wide network surveys.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/informations-gathering">Informations gathering</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zsteg" style="font-weight:600;text-decoration:none">zsteg</a></div></td><td style="vertical-align:middle">Detect stegano-hidden data in PNG & BMP.</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/cryptanalysis">Cryptanalysis</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr><tr class=""><td style="vertical-align:middle"><div class="table-row-meta"><a href="/tool/zsteg" style="font-weight:600;text-decoration:none">zsteg</a></div></td><td style="vertical-align:middle">Tool to detect hidden data in PNG and BMP</td><td style="vertical-align:middle"><a class="tag is-info is-light" href="/tools/steganography">Steganography</a></td><td style="vertical-align:middle"><div class="tags"><span class="tag is-success is-light" title="Open Source (Has Repository)"><i class="fa-solid fa-code-branch"></i></span></div></td></tr></tbody></table></div></div></div><div class="notification is-primary mt-6"><strong>ð CONTRIBUTE</strong>: <a href="/add-software">Add software</a></div></div><!--$--><!--/$--></div><footer class="footer-modern"><div class="footer-modern__glow"></div><div class="container"><div class="columns footer-modern__grid"><div class="column is-4 footer-modern__brand-col"><div class="footer-modern__brand"><span class="footer-modern__brand-icon"><i class="fas fa-shield-halved"></i></span><strong class="footer-modern__brand-title">Pentest Reports</strong></div><p class="footer-modern__description">The premier open-source database of cybersecurity intelligence, penetration test reports, and advanced security tooling. Curated at scale to empower security practitioners, researchers, and developers.</p><div class="footer-modern__socials"><a href="https://github.com/reconmap/pentest-reports" rel="noopener noreferer" target="_blank" class="footer-modern__social-btn" aria-label="GitHub Repository"><i class="fab fa-github"></i><span class="footer-modern__social-tooltip">GitHub</span></a><a href="https://www.youtube.com/@Netfoe" rel="noopener noreferer" target="_blank" class="footer-modern__social-btn" aria-label="YouTube Channel"><i class="fab fa-youtube"></i><span class="footer-modern__social-tooltip">YouTube</span></a></div></div><div class="column is-2 footer-modern__links-col"><h5 class="footer-modern__heading">Resources</h5><ul class="footer-modern__links-list"><li><a class="footer-modern__link" href="/submit-report">Submit Report</a></li><li><a class="footer-modern__link" href="/templates">Templates</a></li><li><a class="footer-modern__link" href="/search">Search Database</a></li></ul></div><div class="column is-2 footer-modern__links-col"><h5 class="footer-modern__heading">Database</h5><ul class="footer-modern__links-list"><li><a class="footer-modern__link" href="/data/threat-groups">Threat Groups</a></li><li><a class="footer-modern__link" href="/cna">CNAs Directory</a></li><li><a class="footer-modern__link" href="/cve">CVEs Directory</a></li><li><a class="footer-modern__link" href="/cwe">CWEs Directory</a></li><li><a class="footer-modern__link" href="/videos">Video Center</a></li></ul></div><div class="column is-2 footer-modern__links-col"><h5 class="footer-modern__heading">Legal</h5><ul class="footer-modern__links-list"><li><a class="footer-modern__link" href="/about/privacy-policy">Privacy Policy</a></li><li><a class="footer-modern__link" href="/about/terms-of-service">Terms of Service</a></li><li><a class="footer-modern__link" href="/about/changelog">Changelog</a></li></ul></div></div><div class="footer-modern__bottom"><div class="footer-modern__bottom-left"><p>© <!-- -->2026<!-- --> Netfoe. All rights reserved.</p><p class="footer-modern__made-by">Developed with <i class="fas fa-heart footer-modern__heart-pulse"></i> by <a href="https://netfoe.com" target="_blank" rel="noopener noreferrer" class="footer-modern__author-link">Netfoe</a></p></div></div></div></footer>
vendor: 108 bytes, line 92
92<script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script>
92<script src="/_next/static/immutable/chunks/0ne5wmdqb31eg.js" id="_R_" async=""></script>
92<script id="theme-setup"> 93 (function() { 94 var savedTheme = localStorage.getItem('theme'); 95 var systemTheme = window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'; 96 var theme = savedTheme || systemTheme; 97 document.documentElement.setAttribute('data-theme', theme); 98 })(); 99 </script>
99<script>(self.__next_f=self.__next_f||[]).push([0])</script>
99<script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[63880,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"default\"]\n3:I[79520,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"\"]\n4:\"$Sreact.suspense\"\n5:I[17166,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"default\"]\n6:I[39756,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"default\"]\n7:I[37457,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"default\"]\n8:I[22016,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\",\"/_next/static/immutable/chunks/0foai6cpub7ey.js\"],\"\"]\n12:I[68027,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"default\",1]\n:HL[\"/_next/static/immutable/chunks/12ssnbsazuewp.css\",\"style\"]\n:HL[\"/_next/static/immutable/chunks/1w3ypgb7gboxf.css\",\"style\"]\n:HC[\"/\",\"\"]\n:HL[\"/_next/static/immutable/chunks/0actbgyr4rshc.css\",\"style\"]\n10:X\n0:{\"P\":null,\"c\":[\"\",\"tools\"],\"q\":\"\",\"i\":false,\"f\":[[[\"\",{\"children\":[\"tools\",{\"children\":[\"__PAGE__\",{},\"$undefined\",\"$undefined\",4608]},\"$undefined\",\"$undefined\",4608]},\"$undefined\",\"$undefined\",4624],[[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/12ssnbsazuewp.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/1w3ypgb7gboxf.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"suppressHydrationWarning\":true,\"children\":[[\"$\",\"head\",null,{\"children\":[[\"$\",\"link\",null,{\"rel\":\"icon\",\"type\":\"image/svg+xml\",\"href\":\"/favicon.svg\"}],[\"$\",\"$L2\",null,{}],[\"$\",\"$L3\",null,{\"src\":\"https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit\",\"strategy\":\"afterInteractive\"}]]}],[\"$\",\"body\",null,{\"className\":\"has-navbar-fixed-top\",\"children\":[[\"$\",\"$4\",null,{\"children\":[\"$\",\"$L5\",null,{}]}],[\"$\",\"div\",null,{\"className\":\"container\",\"children\":[\"$\",\"$L6\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L7\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":[[\"$\",\"main\",null,{\"className\":\"content has-text-centered not-found-page\",\"children\":[[\"$\",\"h2\",null,{\"className\":\"is-size-3\",\"children\":\"404 - Page Not Found\"}],[\"$\",\"p\",null,{\"className\":\"lead not-found-message\",\"children\":\"The page you are looking for might have been removed, had its name changed, or is temporarily unavailable.\"}],[\"$\",\"div\",null,{\"className\":\"not-found-actions\",\"children\":[\"$\",\"$L8\",null,{\"href\":\"/\",\"className\":\"button is-primary is-large not-found-button\",\"children\":\"Return to Homepage\"}]}]]}],[]],\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}],[\"$\",\"footer\",null,{\"className\":\"footer-modern\",\"children\":[[\"$\",\"div\",null,{\"className\":\"footer-modern__glow\"}],[\"$\",\"div\",null,{\"className\":\"container\",\"children\":[[\"$\",\"div\",null,{\"className\":\"columns footer-modern__grid\",\"children\":[[\"$\",\"div\",null,{\"className\":\"column is-4 footer-modern__brand-col\",\"children\":[[\"$\",\"div\",null,{\"className\":\"footer-modern__brand\",\"children\":[[\"$\",\"span\",null,{\"className\":\"footer-modern__brand-icon\",\"children\":[\"$\",\"i\",null,{\"className\":\"fas fa-shield-halved\"}]}],[\"$\",\"strong\",null,{\"className\":\"footer-modern__brand-title\",\"children\":\"Pentest Reports\"}]]}],[\"$\",\"p\",null,{\"className\":\"footer-modern__description\",\"children\":\"The premier open-source database of cybersecurity intelligence, penetration test reports, and advanced security tooling. Curated at scale to empower security practitioners, researchers, and developers.\"}],[\"$\",\"div\",null,{\"className\":\"footer-modern__socials\",\"children\":[[\"$\",\"a\",null,{\"href\":\"https://github.com/reconmap/pentest-reports\",\"rel\":\"noopener noreferer\",\"target\":\"_blank\",\"className\":\"footer-modern__social-btn\",\"aria-label\":\"GitHub Repository\",\"children\":[[\"$\",\"i\",null,{\"className\":\"fab fa-github\"}],[\"$\",\"span\",null,{\"className\":\"footer-modern__social-tooltip\",\"children\":\"GitHub\"}]]}],[\"$\",\"a\",null,{\"href\":\"https://www.youtube.com/@Netfoe\",\"rel\":\"noopener noreferer\",\"target\":\"_blank\",\"className\":\"footer-modern__social-btn\",\"aria-label\":\"YouTube Channel\",\"children\":[[\"$\",\"i\",null,{\"className\":\"fab fa-youtube\"}],[\"$\",\"span\",null,{\"className\":\"footer-modern__social-tooltip\",\"children\":\"YouTube\"}]]}]]}]]}],[\"$\",\"div\",null,{\"className\":\"column is-2 footer-modern__links-col\",\"children\":[[\"$\",\"h5\",null,{\"className\":\"footer-modern__heading\",\"children\":\"Resources\"}],[\"$\",\"ul\",null,{\"className\":\"footer-modern__links-list\",\"children\":[[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/submit-report\",\"className\":\"footer-modern__link\",\"children\":\"Submit Report\"}]}],[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/templates\",\"className\":\"footer-modern__link\",\"children\":\"Templates\"}]}],[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/search\",\"className\":\"footer-modern__link\",\"children\":\"Search Database\"}]}]]}]]}],[\"$\",\"div\",null,{\"className\":\"column is-2 footer-modern__links-col\",\"children\":[[\"$\",\"h5\",null,{\"className\":\"footer-modern__heading\",\"children\":\"Database\"}],[\"$\",\"ul\",null,{\"className\":\"footer-modern__links-list\",\"children\":[[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/data/threat-groups\",\"className\":\"footer-modern__link\",\"children\":\"Threat Groups\"}]}],[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/cna\",\"className\":\"footer-modern__link\",\"children\":\"CNAs Directory\"}]}],[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/cve\",\"className\":\"footer-modern__link\",\"children\":\"CVEs Directory\"}]}],\"$L9\",\"$La\"]}]]}],\"$Lb\"]}],\"$Lc\"]}]]}],\"$Ld\"]}]]}]]}],{\"children\":[\"$Le\",{\"children\":[\"$Lf\",{}
99,null,false,null]},null,false,\"$10\"]},null,false,null],\"$L11\",false]],\"m\":\"$undefined\",\"G\":[\"$12\",[\"$L13\",\"$L14\"]],\"S\":true,\"h\":null,\"r\":\"$undefined\",\"s\":\"$undefined\",\"a\":\"$undefined\",\"l\":\"$undefined\",\"p\":\"$undefined\",\"d\":\"$undefined\",\"b\":\"GhmSOODziyWLImCbU8Ivb\"}\n15:I[43880,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"Analytics\"]\n17:I[97367,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"OutletBoundary\"]\n19:I[97367,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"ViewportBoundary\"]\n1b:I[97367,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\"],\"MetadataBoundary\"]\n9:[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/cwe\",\"className\":\"footer-modern__link\",\"children\":\"CWEs Directory\"}]}]\na:[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/videos\",\"className\":\"footer-modern__link\",\"children\":\"Video Center\"}]}]\nb:[\"$\",\"div\",null,{\"className\":\"column is-2 footer-modern__links-col\",\"children\":[[\"$\",\"h5\",null,{\"className\":\"footer-modern__heading\",\"children\":\"Legal\"}],[\"$\",\"ul\",null,{\"className\":\"footer-modern__links-list\",\"children\":[[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/about/privacy-policy\",\"className\":\"footer-modern__link\",\"children\":\"Privacy Policy\"}]}],[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/about/terms-of-service\",\"className\":\"footer-modern__link\",\"children\":\"Terms of Service\"}]}],[\"$\",\"li\",null,{\"children\":[\"$\",\"$L8\",null,{\"href\":\"/about/changelog\",\"className\":\"footer-modern__link\",\"children\":\"Changelog\"}]}]]}]]}]\nc:[\"$\",\"div\",null,{\"className\":\"footer-modern__bottom\",\"children\":[\"$\",\"div\",null,{\"className\":\"footer-modern__bottom-left\",\"children\":[[\"$\",\"p\",null,{\"children\":[\"© \",2026,\" Netfoe. All rights reserved.\"]}],[\"$\",\"p\",null,{\"className\":\"footer-modern__made-by\",\"children\":[\"Developed with \",[\"$\",\"i\",null,{\"className\":\"fas fa-heart footer-modern__heart-pulse\"}],\" by \",[\"$\",\"a\",null,{\"href\":\"https://netfoe.com\",\"target\":\"_blank\",\"rel\":\"noopener noreferrer\",\"className\":\"footer-modern__author-link\",\"children\":\"Netfoe\"}]]}]]}]}]\nd:[\"$\",\"$L15\",null,{}]\ne:[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L6\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L7\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}]\nf:[\"$\",\"$1\",\"c\",{\"children\":[\"$L16\",[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/0actbgyr4rshc.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}],[\"$\",\"script\",\"script-0\",{\"src\":\"/_next/static/immutable/chunks/0foai6cpub7ey.js\",\"async\":true,\"nonce\":\"$undefined\"}]],[\"$\",\"$L17\",null,{\"children\":[\"$\",\"$4\",null,{\"name\":\"Next.MetadataOutlet\",\"children\":\"$@18\"}]}]]}]\n11:[\"$\",\"$1\",\"h\",{\"children\":[null,[\"$\",\"$L19\",null,{\"children\":\"$L1a\"}],[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$L1b\",null,{\"children\":[\"$\",\"$4\",null,{\"name\":\"Next.Metadata\",\"children\":\"$L1c\"}]}]}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]]}]\n13:[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/12ssnbsazuewp.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]\n14:[\"$\",\"link\",\"1\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/immutable/chunks/1w3ypgb7gboxf.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]\n10:C\n1a:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n18:null\n1c:[[\"$\",\"title\",\"0\",{\"children\":\"Penetration Testing Tools \u0026 Commands - Essential Security Arsenal\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"Explore a comprehensive collection of penetration testing tools, commands, and techniques. Includes tools for reconnaissance, scanning, exploitation, web testing, wireless, and post-exploitation.\"}],[\"$\",\"meta\",\"2\",{\"name\":\"keywords\",\"content\":\"penetration testing reports,pentest templates,security assessment,vulnerability testing,cybersecurity\"}],[\"$\",\"meta\",\"3\",{\"property\":\"og:title\",\"content\":\"Penetration Testing Tools Directory - Commands \u0026 Techniques Guide\"}],[\"$\",\"meta\",\"4\",{\"property\":\"og:description\",\"content\":\"Discover essential tools for penetration testing across multiple categories. Learn command syntax, usage, and real-world penetration testing scenarios.\"}],[\"$\",\"meta\",\"5\",{\"property\":\"og:url\",\"content\":\"https://pentestreports.com/tools\"}],[\"$\",\"meta\",\"6\",{\"property\":\"og:site_name\",\"content\":\"PentestReports.com\"}],[\"$\",\"meta\",\"7\",{\"property\":\"og:type\",\"content\":\"website\"}],[\"$\",\"meta\",\"8\",{\"name\":\"twitter:card\",\"content\":\"summary\"}],[\"$\",\"meta\",\"9\",{\"name\":\"twitter:title\",\"content\":\"Penetration Testing Tools Directory - Commands \u0026 Techniques Guide\"}],[\"$\",\"meta\",\"10\",{\"name\":\"twitter:description\",\"content\":\"Discover essential tools for penetration testing across multiple categories. Learn command syntax, usage, and real-world penetration testing scenarios.\"}]]\n"])</script>
99<script>self.__next_f.push([1,"1d:I[78979,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\",\"/_next/static/immutable/chunks/0foai6cpub7ey.js\"],\"default\"]\n1e:I[61826,[\"/_next/static/immutable/chunks/0t66m6z6rt_ft.js\",\"/_next/static/immutable/chunks/0foai6cpub7ey.js\"],\"default\"]\n1f:T879,Cygeniq is an end-to-end AI security, governance, and compliance platform designed to protect artificial intelligence systems from emerging threats, operational risks, and regulatory challenges.\nAs AI becomes central to enterprise decision-making, organizations face new and evolving risks such as prompt injection, data poisoning, model theft, adversarial manipulation, and non-compliance with AI regulations. Cygeniq addresses these challenges by securing AI systems across their full lifecycle, from development and testing to deployment, monitoring, and governance.\nCygeniqâs platform is powered by three integrated solutions:\nHexashield AI â Advanced AI Security \u0026 Protection\nHexashield AI protects AI models and applications against modern attack vectors including prompt injection, data poisoning, adversarial threats, and model exploitation. It provides continuous monitoring, vulnerability detection, and runtime protection to ensure AI systems remain resilient and trustworthy.\nGRCortex AI â AI Governance, Risk \u0026 Compliance (AI GRC)\nGRCortex AI enables organizations to manage AI risk, enforce governance frameworks, and maintain compliance with evolving global AI regulations. It provides visibility into AI usage, risk assessments, policy enforcement, audit readiness, and regulatory alignment, ensuring responsible and compliant AI adoption.\nCyberTiX AI â Intelligent Threat Intelligence \u0026 Risk Insights\nCyberTiX AI delivers actionable intelligence and risk insights tailored to AI ecosystems. It helps security teams proactively identify vulnerabilities, assess emerging AI-related threats, and strengthen defensive posture across AI-driven environments.\nTogether, these solutions provide unified visibility, control, and protection across the AI lifecycle. Cygeniq integrates seamlessly with modern AI stacks, cloud environments, and enterprise systems, allowing organizations to deploy and scale AI securely without disrupting innovation.\nBuilt for enterprises, regulated industries, and AI-first organizations, Cygeniq ensures that AI systems remain secure, compliant, and resilient in an increasingly complex digital and regulatory landscape.20:T5be,### Jiraffe\n\nJiraffe is a modern, modular security reconnaissance and vulnerability validation framework for Atlassian Jira deployments.\n\nDesigned for security professionals, Jiraffe focuses on accuracy, signal quality, and safe validation rather than noisy scanning. It follows a recon-first, exploit-second model, allowing users to understand a target's exposure before performing controlled vulnerability validation.\n\nJiraffe currently includes 14+ dedicated reconnaissance modules covering unauthenticated access checks, information disclosures, and common Jira misconfigurations, along with 16 custom CVE exploit implementations, with new modules added continuously.\n\n#### Features\n\n* Modular reconnaissance and exploit framework\n* Passive, unauthenticated recon modules for:\n * Information disclosure\n * Misconfigurations\n * Exposed or weakly protected endpoints\n* Safe CVE validation with severity filtering\n* Jira version and deployment awareness (Cloud vs Server/DC) to avoid misleading or invalid checks\n* SSRF helpers, including cloud metadata and custom targets\n* JSON output for automation, CI/CD, and scripting\n* No automatic shell execution or intrusive behavior by default\n\n#### Use cases\n\n* Bug bounty reconnaissance\n* Internal security assessments\n* Red team tooling\n* Responsible vulnerability validation\n\nJiraffe is actively maintained, extensible, and built with clean architecture to support long-term evolution as Jira's attack surface changes.16:[[\"$\",\"nav\",null,{\"className\":\"breadcrumb\",\"aria-label\":\"breadcrumbs\",\"children\":[\"$\",\"ul\",null,{\"children\":[[\"$\",\"li\",\"0\",{\"className\":\"\",\"children\":[\"$\",\"a\",null,{\"href\":\"/\",\"aria-current\":\"$undefined\",\"children\":\"Home\"}]}],[\"$\",\"li\",\"1\",{\"className\":\"is-active\",\"children\":[\"$\",\"a\",null,{\"href\":\"$undefined\",\"aria-current\":\"page\",\"children\":\"Tools\"}]}]]}]}],[\"$\",\"div\",null,{\"children\":[[\"$\",\"div\",null,{\"className\":\"is-flex is-justify-content-space-between is-align-items-center mb-4\",\"children\":[[\"$\",\"h2\",null,{\"className\":\"title mb-0\",\"children\":\"Penetration testing tools\"}],[\"$\",\"$L1d\",null,{\"title\":\"Penetration Testing Tools Directory - PentestReports.com\"}]]}],[\"$\",\"p\",null,{\"children\":\"Unlock the full potential of your penetration testing engagements with our curated collection of essential commands and tools. This resource is designed for security professionals seeking to streamline their workflows, discover new techniques, and enhance their testing capabilities. Whether you are identifying vulnerabilities, exploiting misconfigurations, or automating tasks, these tools will equip you to tackle real-world challenges efficie
99ntly and effectively.\"}],[\"$\",\"$L1e\",null,{\"initialTools\":[{\"_id\":\"688d0d5c5bc8deef670538b3\",\"name\":\"0d1n\",\"slug\":\"0d1n\",\"description\":\"Tool for automating customized attacks against web applications.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/CoolerVoid/0d1n\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"bruteforce\",\"fuzzing\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593b5\",\"name\":\"0d1n\",\"slug\":\"0d1n\",\"description\":\"Automate customized attacks against web applications\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/CoolerVoid/0d1n\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593b6\",\"name\":\"1u.ms\",\"slug\":\"1ums\",\"description\":\"zero-configuration DNS utilities for assisting in detection and exploitation of SSRF-related vulnerabilities\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/neex/1u.ms\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"rebinding\",\"resolvable\",\"records\",\"domain\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5957e\",\"name\":\"221b\",\"slug\":\"221b\",\"description\":\"Bake a windows payload from the C2 of your choice to bypass AV\",\"category\":\"red-teaming\",\"source\":\"https://github.com/CMEPW/221b\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"packer\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593b7\",\"name\":\"230-OOB\",\"slug\":\"230-oob\",\"description\":\"FTP server for OOB XXE attacks\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/lc/230-OOB\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538b4\",\"name\":\"2tearsinabucket\",\"slug\":\"2tearsinabucket\",\"description\":\"Enumerate s3 buckets for a specific target.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/Revenant40/2tearsinabucket\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538b5\",\"name\":\"4-ZERO-3\",\"slug\":\"4-zero-3\",\"description\":\"403/401 Bypass Methods.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Dheerajmadhukar/4-ZERO-3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538b6\",\"name\":\"403-bypasser\",\"slug\":\"403-bypasser\",\"description\":\"A Burp Suite extension made to automate the process of bypassing 403 pages.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/PortSwigger/403-bypasser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authorization\",\"burpsuite\",\"bypass\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538b7\",\"name\":\"403JUMP\",\"slug\":\"403jump\",\"description\":\"HTTP 403 bypass tool.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/trap-bytes/403jump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authorization\",\"bypass\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538b9\",\"name\":\"ACLight\",\"slug\":\"aclight\",\"description\":\"Advanced discovery of Privileged Accounts, includes Shadow Admins.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/cyberark/ACLight\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"privesc\",\"users\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538bd\",\"name\":\"ADAPE Script\",\"slug\":\"adape-script\",\"description\":\"Active Directory assessment and privilege escalation script.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/hausec/ADAPE-Script\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59706\",\"name\":\"ADB-Toolkit\",\"slug\":\"adb-toolkit\",\"description\":\"Wrapper around adb to ease certain tasks\",\"category\":\"mobile\",\"source\":\"https://github.com/ASHWIN990/ADB-Toolkit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5974b\",\"name\":\"ADCSKiller\",\"slug\":\"adcskiller\",\"description\":\"ADCS exploitation automation by weaponizing Certipy and Coercer\",\"category\":\"networking\",\"source\":\"https://github.com/grimlockx/ADCSKiller\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59615\",\"name\":\"ADFSDump\",\"slug\":\"adfsdump\",\"description\":\"Read information from Active Directory and ADFS Configuration Database; fed information into ADFSpoof to generate security tokens\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/mandiant/ADFSDump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wid\",\"dkm\",\"dc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59616\",\"name\":\"ADFSpoof\",\"slug\":\"adfspoof\",\"description\":\"Using ADFSDump information, produce a usable key/cert pair for token signing, produce a signed security token that can be used to access a federated application\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/mandiant/ADFSpoof\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"encryptedpfx\",\"adfs\",\"dkm\",\"active directory\",\"office365\",\"saml\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5974f\",\"name\":\"ADMiner\",\"slug\":\"adminer\",\"description\":\"Active Directory audit tool that extract data from Bloodhound to uncover security weaknesses and generate an HTML report\",\"category\":\"networking\",\"source\":\"https://github.com/Mazars-Tech/AD_Miner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c3\",\"name\":\"ADRT\",\"slug\":\"adrt\",\"description\":\"Active Directory Report Tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/100security/adrt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"domains\",\"enumeration\",\"passwords\",\"users\",\"
99windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c1\",\"name\":\"ADReaper\",\"slug\":\"adreaper\",\"description\":\"Enumerate an Active Directory environment with LDAP queries.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/AidenPearce369/ADReaper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"ldap\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c2\",\"name\":\"ADRecon\",\"slug\":\"adrecon\",\"description\":\"Gather information about the Active Directory and generates a report.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/sense-of-security/ADRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"domains\",\"reports\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59750\",\"name\":\"ADRecon\",\"slug\":\"adrecon\",\"description\":\"Gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment\",\"category\":\"networking\",\"source\":\"https://github.com/adrecon/ADRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59707\",\"name\":\"ADeleg\",\"slug\":\"adeleg\",\"description\":\"Active Directory delegation management tool allowing to make a detailed inventory of delegations set up so far in a forest\",\"category\":\"reconnaissance\",\"source\":\"https://github.com/mtth-bfft/adeleg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5974c\",\"name\":\"ADenum\",\"slug\":\"adenum\",\"description\":\"Find misconfiguration through the LDAP protocol and exploit some weaknesses with kerberos\",\"category\":\"networking\",\"source\":\"https://github.com/SecuProject/ADenum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"active directory\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538bf\",\"name\":\"ADenum\",\"slug\":\"adenum\",\"description\":\"Find misconfiguration through LDAP to exploit weaknesses with Kerberos.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/SecuProject/ADenum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"kerberos\",\"ldap\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5966b\",\"name\":\"ANY RUN\",\"slug\":\"any-run\",\"description\":\"Online virtual machine for malware hunting, sandbox with interactive access, real-time data-flow\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d9\",\"name\":\"AORT\",\"slug\":\"aort\",\"description\":\"All in one recon tool for bug bounty.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/AyoubNajim/AORT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"ips\",\"recon\",\"scanner\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538da\",\"name\":\"API fuzzer\",\"slug\":\"api-fuzzer\",\"description\":\"Fuzz request attributes using common pentesting techniques and lists vulnerabilities.\",\"category\":\"development\",\"source\":\"https://github.com/Fuzzapi/API-fuzzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593bb\",\"name\":\"API-fuzzer\",\"slug\":\"api-fuzzer\",\"description\":\"Library to fuzz request attributes using common pentesting techniques and lists vulnerabilities\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Fuzzapi/API-fuzzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538dd\",\"name\":\"APKEnum\",\"slug\":\"apkenum\",\"description\":\"Passive enumeration utility For Android applications.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/shivsahni/APKEnum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"mobile\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ab\",\"name\":\"APKHunt\",\"slug\":\"apkhunt\",\"description\":\"Static code analysis for Android apps that is based on the OWASP MASVS framework\",\"category\":\"code-analysis\",\"source\":\"https://github.com/Cyber-Buddy/APKHunt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sast\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538df\",\"name\":\"APKLeaks\",\"slug\":\"apkleaks\",\"description\":\"Scanning APK file for URIs, endpoints \u0026 secrets.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/dwisiswant0/apkleaks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"endpoints\",\"regexp\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ac\",\"name\":\"APKLeaks\",\"slug\":\"apkleaks\",\"description\":\"Scanning APK file for URIs, endpoints and secrets\",\"category\":\"code-analysis\",\"source\":\"https://github.com/dwisiswant0/apkleaks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538de\",\"name\":\"APKiD\",\"slug\":\"apkid\",\"description\":\"Android application identifier for packers, protectors, obfuscators and oddities.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/rednaga/APKiD\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"forensic\",\"malware\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5954c\",\"name\":\"APTRS\",\"slug\":\"aptrs\",\"description\":\"APTRS (Automated Penetration Testing Reporting System) is an automated reporting tool in Python and Django. The tool allows Penetration tester
99s to create a report directly without using the Traditional Docx file. It also provides an approach to keeping track of the projects and vulnerabilities.\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/Anof-cyber/APTRS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e3\",\"name\":\"APTRS\",\"slug\":\"aptrs\",\"description\":\"Automated penetration testing reporting system.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/Anof-cyber/APTRS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"organizer\",\"reports\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59663\",\"name\":\"ASLRay\",\"slug\":\"aslray\",\"description\":\"Tool for ASLR bypass with stack-spraying\",\"category\":\"binary-exploitation\",\"source\":\"https://github.com/cryptolok/ASLRay\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538ed\",\"name\":\"ASNLookup\",\"slug\":\"asnlookup\",\"description\":\"Leverage ASN to look up IP addresses owned by a specific organization.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/yassineaboukir/Asnlookup\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"asn\",\"ips\",\"ports\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59754\",\"name\":\"ASNmap\",\"slug\":\"asnmap\",\"description\":\"CLI and Library for quickly mapping organization network ranges using ASN information\",\"category\":\"networking\",\"source\":\"https://github.com/projectdiscovery/asnmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538ee\",\"name\":\"ASNmap\",\"slug\":\"asnmap\",\"description\":\"Quickly maps organization network ranges using ASN information.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/asnmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"ips\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f4\",\"name\":\"ATOR\",\"slug\":\"ator\",\"description\":\"Authentication Token Obtain and Replace Extender.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/synopsys-sig/ATOR-Burp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"burpsuite\",\"cookies\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59580\",\"name\":\"AVET\",\"slug\":\"avet\",\"description\":\"AntiVirus Evasion Tool; targeting windows machines with executable files\",\"category\":\"red-teaming\",\"source\":\"https://github.com/govolution/avet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"anti-virus\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59645\",\"name\":\"AWS Extender\",\"slug\":\"aws-extender\",\"description\":\"Identify and test S3 buckets, Google Storage buckets and Azure Storage containers for common misconfiguration\",\"category\":\"plugins\",\"source\":\"https://github.com/VirtueSecurity/aws-extender\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705390b\",\"name\":\"AWS Extender CLI\",\"slug\":\"aws-extender-cli\",\"description\":\"Command-line script to test cloud storage for common misconfiguration issues.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/VirtueSecurity/aws-extender-cli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"google\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c6\",\"name\":\"AWS Extender CLI\",\"slug\":\"aws-extender-cli\",\"description\":\"Test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues\",\"category\":\"cloud\",\"source\":\"https://github.com/VirtueSecurity/aws-extender-cli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"gcp\",\"azure\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705390d\",\"name\":\"AWS Sensitive Permissions\",\"slug\":\"aws-sensitive-permissions\",\"description\":\"This script enumerates the permissions of all the AWS principals of an account.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/carlospolop/aws_sensitive_permissions\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"permissions\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705390c\",\"name\":\"AWS security checks\",\"slug\":\"aws-security-checks\",\"description\":\"This Burp Suite provides additional Scanner checks for AWS security issues.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/PortSwigger/aws-security-checks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"burpsuite\",\"cloud\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705390e\",\"name\":\"AWSBucketDump\",\"slug\":\"awsbucketdump\",\"description\":\"Security Tool to Look For Interesting Files in S3 Buckets.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/jordanpotti/AWSBucketDump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705390f\",\"name\":\"AWSGoat\",\"slug\":\"awsgoat\",\"description\":\"A damn vulnerable AWS infrastru
99cture.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/ine-labs/AWSGoat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"training\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053910\",\"name\":\"AWSloot\",\"slug\":\"awsloot\",\"description\":\"Pull secrets from an AWS environment.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/sebastian-mora/AWS-Loot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538ba\",\"name\":\"Acra\",\"slug\":\"acra\",\"description\":\"Database protection suite with field level encryption and intrusion detection.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/cossacklabs/acra\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"encryption\",\"proxy\",\"sqli\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59748\",\"name\":\"ActiveDirectoryEnumeration\",\"slug\":\"activedirectoryenumeration\",\"description\":\"Enumerate AD through LDAP with a collection of helpfull scripts being bundled: ASREPRoasting, Kerberoasting, dump AD as BloodHound JSON files, searching GPOs in SYSVOL for cpassword and decrypting, run without creds\",\"category\":\"networking\",\"source\":\"https://github.com/CasperGN/ActiveDirectoryEnumeration\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538bb\",\"name\":\"ActiveScan++\",\"slug\":\"active-scan-plus-plus\",\"description\":\"Extends Burp Suite's active and passive scanning capabilities.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/active-scan-plus-plus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538bc\",\"name\":\"Acunetix\",\"slug\":\"acunetix\",\"description\":\"Quickly find and fix the vulnerabilities that put your web applications at risk of attack.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"reports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593b8\",\"name\":\"Acunetix\",\"slug\":\"acunetix\",\"description\":\"Web application security scanner\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59749\",\"name\":\"Adalanche\",\"slug\":\"adalanche\",\"description\":\"Active Directory ACL visualizer and explorer; similar to BloodHound\",\"category\":\"networking\",\"source\":\"https://github.com/lkarlslund/Adalanche\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a9\",\"name\":\"Adhrit\",\"slug\":\"adhrit\",\"description\":\"Android APK reversing and analysis suite\",\"category\":\"code-analysis\",\"source\":\"https://github.com/abhi-r3v0/Adhrit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c4\",\"name\":\"AdvancedKeyHacks\",\"slug\":\"advancedkeyhacks\",\"description\":\"API key/token exploitation made easy.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/udit-thakkur/AdvancedKeyHacks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596cf\",\"name\":\"Adversary Emulation Library\",\"slug\":\"adversary-emulation-library\",\"description\":\"A library of adversary emulation plans to allow organizations to evaluate their defensive capabilities against the real-world threats they face\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/center-for-threat-informed-defense/adversary_emulation_library\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\",\"simulation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593b9\",\"name\":\"Afuzz\",\"slug\":\"afuzz\",\"description\":\"Web directory and file scanner (wordlist bruteforce)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Rapid
99DNS/Afuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c7\",\"name\":\"Agartha\",\"slug\":\"agartha\",\"description\":\"Burp Suite extension for dynamic payload generation to detect injection flaws.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/volkandindar/agartha\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"lfi\",\"payloads\",\"rce\",\"sqli\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c8\",\"name\":\"AhMyth Android RAT\",\"slug\":\"ahmyth-android-rat\",\"description\":\"Android remote administration tool.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/AhMyth/AhMyth-Android-RAT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"c2c\",\"mobile\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5980e\",\"name\":\"Aircrack-Ng\",\"slug\":\"aircrack-ng\",\"description\":\"Suite of tools to assess WiFi network security (cracking WEP and WPA PSK)\",\"category\":\"wireless\",\"source\":\"https://github.com/aircrack-ng/aircrack-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538cd\",\"name\":\"AllAboutBugBounty\",\"slug\":\"allaboutbugbounty\",\"description\":\"Bug Bounty notes gathered from various sources.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/daffainfo/AllAboutBugBounty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"cms\",\"framework\",\"payloads\",\"resources\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538ce\",\"name\":\"Altdns\",\"slug\":\"altdns\",\"description\":\"Generates permutations, alterations and mutations of subdomains and then resolves them.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/infosec-au/altdns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594e0\",\"name\":\"Amass\",\"slug\":\"amass\",\"description\":\"DNS enumeration and network mapping tool suite: scraping, recursive brute forcing, crawling web archives, reverse DNS sweeping\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/OWASP/Amass/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d1\",\"name\":\"Amass\",\"slug\":\"amass\",\"description\":\"In-depth Attack Surface Mapping and Asset Discovery.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/OWASP/Amass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"asn\",\"ips\",\"network\",\"owasp\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d2\",\"name\":\"Amnesiac\",\"slug\":\"amnesiac\",\"description\":\"Post-exploitation framework designed to assist with lateral movement within Active Directory.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Leo4j/Amnesiac\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"postexploitation\",\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c1\",\"name\":\"Andriller\",\"slug\":\"andriller\",\"description\":\"Software utility with a collection of forensic tools for smartphones; performs read-only, non-destructive acquisition\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/den4uk/andriller\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"extraction\",\"adb\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594aa\",\"name\":\"AndroBugs Framework\",\"slug\":\"androbugs-framework\",\"description\":\"Android APK vulnerability analyzer\",\"category\":\"code-analysis\",\"source\":\"https://github.com/AndroBugs/AndroBugs_Framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d5\",\"name\":\"AndroSet\",\"slug\":\"androset\",\"description\":\"Manage Burp Suite certificate in Android to redirect all traffic to Burp Suite.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/Anof-cyber/Androset\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"burpsuite\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59617\",\"name\":\"Android_Emuroot\",\"slug\":\"android_emuroot\",\"description\":\"Grants root privileges on the fly to shells running on Android virtual machines that use google-provided emulator images called Google API Playstore\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/airbus-seclab/android_emuroot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d7\",\"name\":\"Angry IP Scanner\",\"slug\":\"angry-ip-scanner\",\"description\":\"Fast and simple-to-use open-source/cross-platform network scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/angryip/ipscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"ports\",\"recon\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e0\",\"name\":\"AnoMark\",\"slug\":\"anomark\",\"description\":\"Statistical learning algorithm to create a model on the command lines of the Process Creation events on Windows, in order to detect anomalies in future events\",\"category\":\"defensive\",\"source\":\"https://github.com/ANSSI-FR/AnoMark\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a71fed65d0ff664c7e3fd33\",\"name\":\"Anthropic-Cybersecurity-Skills\",\"slug\":\"anthropic-cybersecurity-skills\",\"description\":\"817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT\u0026CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF \u0026 MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI \u0026 20+ platforms · 29 security domains · Apache 2.0\",\"category\":\"ai-skills\",\"source\":\"https://github.com/mukul975/Anthropic-Cybersecurity-Skills\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ai-agents\",\"claude-code\",\"cloud-security\",\"cybersecurity\",\"devsecops\",\"ethical-hacking\",\"incident-response\",\"infosec\",\"llm\",\"malware-analysis\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5957f\",\"name\":\"AntiScan.Me\",\"slug\":\"antiscanme\",\"description\":\"Multi-AV checker that doesn't distribute the check results, based on Dyncheck.com\",\"category\":\"red-teaming\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"anti-virus\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59601\",\"name\":\"Aperi'Solve\",\"slug\":\"aperisolve\",\"description\":\"Steganalysis web platform with layer, zsteg, steghide and exiftool analysis\",\"category\":\"steganography\",\"source\":\"https://github.com/Zeecka/AperiSolve/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538db\",\"name\":\"Apidor\",\"slug\":\"apidor\",\"description\":\"Tool for automating the search for IDOR vulnerabilities in web applications and APIs.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/bm402/apidor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"idor\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5966c\",\"name\":\"Apk2Gold\",\"slug\":\"apk2gold\",\"description\":\"Android decompiler (wrapper for apktool, dex2jar, and jd-gui)\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/lxdvs/apk2gold\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5966d\",\"name\":\"Apktool\",\"slug\":\"apktool\",\"description\":\"Android disassembler and rebuilder\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/iBotPeaches/Apktool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e0\",\"name\":\"Apktool\",\"slug\":\"apktool\",\"description\":\"A tool for reverse engineering Android APK files.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/iBotPeaches/Apktool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"mobile\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59708\",\"name\":\"AppsecStudy\",\"slug\":\"appsecstudy\",\"description\":\"eLearning management system for information security\",\"category\":\"learning\",\"source\":\"https://github.com/zzzteph/appsec.study\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"education\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e4\",\"name\":\"Aquatone\",\"slug\":\"aquatone\",\"description\":\"A Tool for Domain Flyovers.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/michenriksen/aquatone\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593bc\",\"name\":\"Aquatone\",\"slug\":\"aquatone\",\"description\":\"Domain flyover tool; visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/michenriksen/aquatone\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"screenshot\",\"url\",\"session\",\"headers\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593bd\",\"name\":\"Arachni\",\"slug\":\"arachni\",\"description\":\"Web application security scanner framework\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Arachni/arachni\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e5\",\"name\":\"Arachni\",\"slug\":\"arachni\",\"description\":\"Web Application Security Scanner Framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Arachni/arachni\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"monitoring\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e6\",\"name\":\"Aranea\",\"slug\":\"aranea\",\"description\":\"O
99SINT tool used for web crawling or examining JavaScript files for likely useful data.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/leddcode/Aranea\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\",\"javascript\",\"regexp\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5954d\",\"name\":\"Archery\",\"slug\":\"archery\",\"description\":\"Vulnerability Assessment and Management tool, run scan and manage vulnerabilities\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/archerysec/archerysec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59752\",\"name\":\"Arecibo\",\"slug\":\"arecibo\",\"description\":\"Endpoint for Out-of-Band Exfiltration (DNS \u0026 HTTP)\",\"category\":\"networking\",\"source\":\"https://github.com/TarlogicSecurity/Arecibo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e9\",\"name\":\"Argus-SAF\",\"slug\":\"argus-saf\",\"description\":\"Static analysis framework built in house to do security vetting for Android applications.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/arguslab/Argus-SAF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"codeanalysis\",\"mobile\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538ea\",\"name\":\"Arjun\",\"slug\":\"arjun\",\"description\":\"HTTP parameter discovery suite.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/s0md3v/Arjun\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"fuzzing\",\"parameters\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593be\",\"name\":\"Arjun\",\"slug\":\"arjun\",\"description\":\"HTTP parameter discovery suite\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/s0md3v/Arjun\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538eb\",\"name\":\"Arsenal\",\"slug\":\"arsenal\",\"description\":\"Just a quick inventory, reminder and launcher for pentest commands.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Orange-Cyberdefense/arsenal\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"terminal\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538ec\",\"name\":\"As3nt\",\"slug\":\"as3nt\",\"description\":\"Another Subdomain ENumeration Tool.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/cinerieus/as3nt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"shodan\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594e1\",\"name\":\"Asnlookup\",\"slug\":\"asnlookup\",\"description\":\"Leverage ASN to look up IP addresses (IPv4 \u0026 IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/yassineaboukir/Asnlookup\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593bf\",\"name\":\"AssassinGo\",\"slug\":\"assassingo\",\"description\":\"Web pentest framework for information gathering and vulnerability scanning\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/AmyangXYZ/AssassinGo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f0\",\"name\":\"Astra\",\"slug\":\"astra\",\"description\":\"Automated Security Testing For REST API's.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/flipkart-incubator/Astra\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"authentication\",\"csrf\",\"jwt\",\"sqli\",\"xss\",\"xxe\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c0\",\"name\":\"Astra\",\"slug\":\"astra\",\"description\":\"REST API penetration testing tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/flipkart-incubator/astra\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f1\",\"name\":\"Async DNS Brute\",\"slug\":\"async-dns-brute\",\"description\":\"DNS asynchronous brute force utility.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/blark/aiodnsbrute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"dns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f2\",\"name\":\"Athena OS\",\"slug\":\"athe
99na-os\",\"description\":\"Arch Linux-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!\",\"category\":\"resources\",\"source\":\"https://github.com/Athena-OS/athena-iso\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"toolkit\",\"training\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59709\",\"name\":\"Atheris\",\"slug\":\"atheris\",\"description\":\"Coverage-guided Python fuzzing engine\",\"category\":\"fuzzing\",\"source\":\"https://github.com/google/atheris\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzer\",\"cpython\",\"libfuzzer\",\"native code\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c1\",\"name\":\"Atlas\",\"slug\":\"atlas\",\"description\":\"Tool that suggests sqlmap tampers to bypass WAF/IDS/IPS based on status codes\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/m4ll0k/Atlas\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f3\",\"name\":\"Atomic Red Team\",\"slug\":\"atomic-red-team\",\"description\":\"Small and highly portable detection tests based on MITRE's ATT\u0026CK.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/redcanaryco/atomic-red-team\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mitre\",\"redteam\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d0\",\"name\":\"Atomic Red Team\",\"slug\":\"atomic-red-team\",\"description\":\"A library of tests mapped to the MITRE ATT\u0026CK® framework used to quickly, portably, and reproducibly test their environments\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/redcanaryco/atomic-red-team\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f6\",\"name\":\"AttackForge\",\"slug\":\"attackforge\",\"description\":\"A platform built for productivity, collaboration and visibility.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"organizer\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5954e\",\"name\":\"AttackForge.com\",\"slug\":\"attackforgecom\",\"description\":\"AttackForge helps you manage your penetration testing programs, and deliver large-scale pentesting services. Pentest Management and Reporting Made Easy, A Platform Built for Productivity, Collaboration and Visibility.\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f7\",\"name\":\"AttackSurfaceMapper\",\"slug\":\"attacksurfacemapper\",\"description\":\"AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/superhedgy/AttackSurfaceMapper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"osint\",\"passwords\",\"ports\",\"screenshots\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594e2\",\"name\":\"AttackSurfaceMapper\",\"slug\":\"attacksurfacemapper\",\"description\":\"Subdomain enumerator\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/superhedgy/AttackSurfaceMapper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"reconnaissance\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f8\",\"name\":\"AttifyOS\",\"slug\":\"attifyos\",\"description\":\"Distribution for pentesting IoT devices.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/adi0x90/attifyos\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"iot\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59602\",\"name\":\"Audacity\",\"slug\":\"audacity\",\"description\":\"Tool to edit and analyze audio tracks\",\"category\":\"steganography\",\"source\":\"https://sourceforge.net/projects/audacity/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f9\",\"name\":\"Auth Analyzer\",\"slug\":\"auth-analyzer\",\"description\":\"The Burp extension helps you to find authorization bugs.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/PortSwigger/auth-analyzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authorization\",\"burpsuite\",\"cookies\",\"cors\",\"csrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538fa\",\"name\":\"AuthMatrix\",\"slug\":\"authmatrix\",\"description\":\"Provides a simple way to test authorization in web applications and web services.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/PortSwigger/auth-matrix\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authorization\",\"burpsuite\",\"webservices\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594e3\",\"name\":\"AutoRecon\",\"slug\":\"autorecon\",\"description\":\"Multi-threaded network reconnaissance tool which performs automated enumeration of services\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Tib3rius/AutoRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538fe\",\"name\":\"AutoRecon\",\"slug\":\"autorecon\",\"description\":\"Multi-threaded network reconnaissance tool which performs automated enumeration of services.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Tib3rius/AutoRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\",\"ips\",\"ports\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538ff\",\"name\":\"AutoRepeater\",\"slug\":\"autorepeater\",\"description\":\"Automated HTTP request repeating with Burp Suite.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/nccgroup/AutoRepeater\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053901\",\"name\":\"AutoSploit\",\"slug\":\"autosploit\",\"description\":\"Automated Mass Exploiter.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/NullArray/AutoSploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"automation\",\"censys\",\"exploits\",\"metasploit\",\"rce\",\"shell\",\"shodan\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053900\",\"name\":\"Autorize\",\"slug\":\"autorize\",\"description\":\"Automatic authorization enforcement detection extension for Burp Suite.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Quitten/Autorize\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authorization\",\"burpsuite\",\"permissions\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053904\",\"name\":\"Autowasp\",\"slug\":\"autowasp\",\"description\":\"A one-stop pentesting checklist and logger tool.\",\"category\":\"resources\",\"source\":\"https://github.com/PortSwigger/autowasp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"logs\",\"owasp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5970a\",\"name\":\"Avast Hack Check\",\"slug\":\"avast-hack-check\",\"description\":\"Service to check if an account has been compromised in a data breach, send an email with the breaches not the password\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053907\",\"name\":\"Awesome Bug Bounty\",\"slug\":\"awesome-bug-bounty\",\"description\":\"A comprehensive curated list of available Bug Bounty \u0026 disclosure programs and writeups.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/djadmin/awesome-bug-bounty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"platforms\",\"resources\",\"
99writeups\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053908\",\"name\":\"Awesome BugBounty Writeups\",\"slug\":\"awesome-bugbounty-writeups\",\"description\":\"A curated list of bugbounty writeups (Bug type wise).\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/devanshbatham/Awesome-Bugbounty-Writeups\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"resources\",\"writeups\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053909\",\"name\":\"Awesome-CobaltStrike\",\"slug\":\"awesome-cobaltstrike\",\"description\":\"List of awesome CobaltStrike resources.\",\"category\":\"resources\",\"source\":\"https://github.com/zer0yu/Awesome-CobaltStrike\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"cobaltstrike\",\"learning\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a71ffeca7456260536894a1\",\"name\":\"Awesome-mcp-security\",\"slug\":\"awesome-mcp-security\",\"description\":\"ð¥ð Awesome MCP (Model Context Protocol) Security ð¥ï¸\",\"category\":\"ai-mcp-servers\",\"source\":\"https://github.com/Puliczek/awesome-mcp-security\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"awesome-list\",\"bugbounty\",\"bugbountytips\",\"cybers\",\"exploit\",\"mcp\",\"mcp-client\",\"mcp-server\",\"mcp-servers\",\"pentesting\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5970b\",\"name\":\"Axiom\",\"slug\":\"axiom\",\"description\":\"Dynamic infrastructure framework to distribute the workload of many different scanning tools with ease\",\"category\":\"cloud\",\"source\":\"https://github.com/pry0cc/axiom\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"digitalocean\",\"ibm cloud\",\"linode\",\"azure\",\"aws\",\"gcp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053912\",\"name\":\"AzureADLateralMovement\",\"slug\":\"azureadlateralmovement\",\"description\":\"Lateral movement graph for Azure Active Directory.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/talmaor/AzureADLateralMovement\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"azure\",\"cloud\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c8\",\"name\":\"AzureADRecon\",\"slug\":\"azureadrecon\",\"description\":\"Gathers information about the Azure Active Directory and generates a report which can provide a holistic picture of the current state of the target environment\",\"category\":\"cloud\",\"source\":\"https://github.com/adrecon/AzureADRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"azure\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053913\",\"name\":\"AzureGoat\",\"slug\":\"azuregoat\",\"description\":\"A damn vulnerable Azure infrastru
99cture.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/ine-labs/AzureGoat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"azure\",\"cloud\",\"training\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053914\",\"name\":\"B-XSSRF\",\"slug\":\"b-xssrf\",\"description\":\"Toolkit to detect and keep track on Blind XSS, XXE \u0026 SSRF.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/SpiderMate/B-XSSRF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssrf\",\"vulnerabilities\",\"xss\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705391f\",\"name\":\"BBstats\",\"slug\":\"bbstats\",\"description\":\"Displays stats and graphs about your Bug Bounty activity.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/gwen001/BBstats\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"bugcrowd\",\"hackerone\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d6\",\"name\":\"BBstats\",\"slug\":\"bbstats\",\"description\":\"Aggregate reports/bounties from different platforms in order to create combined stats and graphs\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/gwen001/BBstats\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595cc\",\"name\":\"BEWGor\",\"slug\":\"bewgor\",\"description\":\"Bull's Eye Wordlist Generator, password wordlist generator based on target information\",\"category\":\"cracking\",\"source\":\"https://github.com/berzerk0/BEWGor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c6\",\"name\":\"BFAC\",\"slug\":\"bfac\",\"description\":\"Backup File Artifacts Checker; automated backup artifacts checker\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/mazen160/bfac\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053926\",\"name\":\"BFAC\",\"slug\":\"bfac\",\"description\":\"Check for backup artifacts that may disclose the web-application's source code.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/mazen160/bfac\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backups\",\"endpoints\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5970c\",\"name\":\"BHQW\",\"slug\":\"bhqw\",\"description\":\"Extract information from BloodHound and Neo4J\",\"category\":\"other\",\"source\":\"https://github.com/kaluche/bloodhound-quickwin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59581\",\"name\":\"BOF.NET\",\"slug\":\"bofnet\",\"description\":\"A .NET Runtime for Cobalt Strike's Beacon Object Files\",\"category\":\"red-teaming\",\"source\":\"https://github.com/CCob/BOF.NET\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"anti-virus\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5970d\",\"name\":\"BQM\",\"slug\":\"bqm\",\"description\":\"Bloodhound Query Merger; deduplicate custom BloudHound queries from different datasets and merge them in one customqueries.json file\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cypher\",\"neo4j\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053919\",\"name\":\"BaRMIe\",\"slug\":\"barmie\",\"description\":\"Enumerating and attacking Java Remote Method Invocation services.\",\"category\":\"development\",\"source\":\"https://github.com/NickstaDB/BaRMIe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"java\",\"rmi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c4\",\"name\":\"BaRMIe\",\"slug\":\"barmie\",\"description\":\"Java RMI enumeration and attack tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/NickstaDB/BaRMIe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053917\",\"name\":\"BackupKiller\",\"slug\":\"backupkiller\",\"description\":\"Generate wordlist based on the URLs to check for backup, installation, etc files.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Q0120S/BackupKiller\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"utils\",\"
99wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"686b89c3957246be36b60ddf\",\"name\":\"Bandit\",\"slug\":\"bandit\",\"description\":\"Bandit is a tool designed to find common security issues in Python code.\",\"category\":\"code-analysis\",\"source\":\"https://github.com/PyCQA/bandit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5966f\",\"name\":\"Barf\",\"slug\":\"barf\",\"description\":\"Binary Analysis and Reverse engineering Framework\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/programa-stic/barf-project\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053921\",\"name\":\"BeEF\",\"slug\":\"beef\",\"description\":\"The Browser Exploitation Framework is a penetration testing tool that focuses on the web browser.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/beefproject/beef\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"exploits\",\"framework\",\"vulnerabilities\",\"xss\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053922\",\"name\":\"BeRoot\",\"slug\":\"beroot\",\"description\":\"Multiplaform privilege escalation project.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/AlessandroZ/BeRoot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"privesc\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ad\",\"name\":\"Bearer\",\"slug\":\"bearer\",\"description\":\"Static application security testing tool that helps discover, filter, and prioritize security risks and vulnerabilities\",\"category\":\"code-analysis\",\"source\":\"https://github.com/bearer/bearer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sast\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c5\",\"name\":\"Beeceptor\",\"slug\":\"beeceptor\",\"description\":\"HTTP request collector and inspector\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594e6\",\"name\":\"Belati\",\"slug\":\"belati\",\"description\":\"OSINT tool, collect data and document actively or passively\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/aancw/Belati\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053923\",\"name\":\"BetterBackdoor\",\"slug\":\"betterbackdoor\",\"description\":\"A backdoor with a multitude of features.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/thatcherclough/BetterBackdoor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"exploits\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053925\",\"name\":\"Betterscan\",\"slug\":\"betterscan\",\"description\":\"Code Scanning/SAST/static analysis/linting using many tools/scanners with one report.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/marcinguy/betterscan-ce\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"codeanalysis\",\"cves\",\"exploits\",\"malware\",\"reports\",\"sbom\",\"scanner\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053928\",\"name\":\"BinDiff\",\"slug\":\"bindiff\",\"description\":\"Quickly find differences and similarities in disassembled code.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/google/bindiff\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59671\",\"name\":\"Binary Ninja\",\"slug\":\"binary-ninja\",\"description\":\"Crossplatform binary analysis framework\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705392a\",\"name\":\"BitBlinder\",\"slug\":\"bitblinder\",\"description\":\"Injects custom XSS payloads on every form/request submitted to detect blind XSS.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/BitTheByte/BitBlinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"payloads\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594e7\",\"name\":\"Bitcrook\",\"slug\":\"bitcrook\",\"description\":\"Reconnaissance Apparatus; Information gathering, conglomerate of tools including custom algorithms, API wrappers\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/ax-i-om/bitcrook\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705392c\",\"name\":\"BlackWidow\",\"slug\":\"blackwidow\",\"description\":\"Web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/1N3/BlackWidow\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"endpoints\",\"forms\",\"fuzzing\",\"osint\",\"owasp\",\"parameters\",\"phones\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705392b\",\"name\":\"Blacklist3r\",\"slug\":\"blacklist3r\",\"description\":\"Identify usage of pre-shared Machine Ke
99ys in a application for encryption and decryption.\",\"category\":\"development\",\"source\":\"https://github.com/NotSoSecure/Blacklist3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"asp\",\"cookies\",\"cryptography\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c7\",\"name\":\"Blazy\",\"slug\":\"blazy\",\"description\":\"Login page bruteforcer: CSRF, SQLi, Clickjacking, WAF detection\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/s0md3v/Blazy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59619\",\"name\":\"BloodHound\",\"slug\":\"bloodhound\",\"description\":\"Tool to reveal the hidden and unintended relationships within an Active Directory environment\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/BloodHoundAD/BloodHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705392d\",\"name\":\"BloodHound\",\"slug\":\"bloodhound\",\"description\":\"Six Degrees of Domain Admin.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/BloodHoundAD/BloodHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"azure\",\"exploits\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705392e\",\"name\":\"BlueHound\",\"slug\":\"bluehound\",\"description\":\"Pinpoint the security issues that actually matter.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/zeronetworks/BlueHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"blueteam\",\"network\",\"permissions\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e1\",\"name\":\"BlueHound\",\"slug\":\"bluehound\",\"description\":\"Helps blue teams pinpoint the security issues that actually matter by combining information about user permissions, network access and unpatched vulnerabilities, to reveal the paths attackers would take if they were inside the network\",\"category\":\"defensive\",\"source\":\"https://github.com/zeronetworks/BlueHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e4\",\"name\":\"Bodhi\",\"slug\":\"bodhi\",\"description\":\"Client-side vulnerability playground, CTF style application, a bot program which simulates the real-world victim\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/amolnaik4/bodhi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5975a\",\"name\":\"Boomerang\",\"slug\":\"boomerang\",\"description\":\"Client/Server HTTP pivoting tool\",\"category\":\"networking\",\"source\":\"https://github.com/paranoidninja/Boomerang\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595cd\",\"name\":\"Bopscrk\",\"slug\":\"bopscrk\",\"description\":\"Before Outset PaSsword CRacKing, password wordlist generator with exclusive features like lyrics based mode\",\"category\":\"cracking\",\"source\":\"https://github.com/R3nt0n/bopscrk\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\",\"lyrics\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053931\",\"name\":\"BounceBack\",\"slug\":\"bounceback\",\"description\":\"Stealth redirector for your red team operation security.\",\"category\":\"network\",\"source\":\"https://github.com/D00Movenok/BounceBack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"phishing\",\"proxy\",\"waf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d7\",\"name\":\"Bounty Dashboard\",\"slug\":\"bounty-dashboard\",\"description\":\"Aggregate reports/bounties from different platforms in order to create combined stats and graphs, report and template management system, invoice creation system \",\"category\":\"bug-bounty\",\"source\":\"https://github.com/lucasmartinelle/Bounty-Dashboard/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d9\",\"name\":\"BountyDash\",\"slug\":\"bountydash\",\"description\":\"Dashboard to combine rewards from all platforms, giving insights about progress and bug hunting patterns\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/avlidienbrunn/bountydash\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053934\",\"name\":\"BountyDash\",\"slug\":\"bountydash\",\"description\":\"Combine your rewards from platforms giving you insights about your bug hunting progress.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/avlidienbrunn/bountydash\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"bugcrowd\",\"hackerone\",\"reports\",\"synack\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ae\",\"name\":\"Brakeman\",\"slug\":\"brakeman\",\"description\":\"Static analysis security vulnerability scanner for Ruby on Rails applications\",\"category\":\"code-analysis\",\"source\":\"https://github.com/presidentbeef/brakeman\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sast\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5970e\",\"name\":\"BreachDirectory\",\"slug\":\"breachdirectory\",\"description\":\"Service to check if an account has been compromised in a data breach, display the breaches, partial password and hash\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705393a\",\"name\":\"Brute Hacking Framework\",\"slug\":\"brute-hacking-framework\",\"description\":\"A framework including all the tools that work on Windows.\",\"category\":\"virtualization\",\"source\":\"https://github.com/morpheuslord/Brute-Hacking-Framework-SourceCode/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"toolkit\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59582\",\"name\":\"Brute Ratel\",\"slug\":\"brute-ratel\",\"description\":\"Command \u0026 Control server;
99 DNS over HTTPS, external channels, indirect syscalls\",\"category\":\"red-teaming\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705393c\",\"name\":\"BruteShark\",\"slug\":\"bruteshark\",\"description\":\"Network forensic analysis tool that performs deep processing and inspection of network traffic.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/odedshimon/BruteShark\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"forensic\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5975c\",\"name\":\"BruteSpray\",\"slug\":\"brutespray\",\"description\":\"Takes nmap GNMAP/XML output or newline seperated JSONS and automatically brute-forces services with default credentials using Medusa\",\"category\":\"networking\",\"source\":\"https://github.com/x90skysn3k/brutespray\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5975d\",\"name\":\"BruteX\",\"slug\":\"brutex\",\"description\":\"Tool using nmap and hydra to automatically bruteforce network service accounts\",\"category\":\"networking\",\"source\":\"https://github.com/1N3/BruteX\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705393f\",\"name\":\"BruteX\",\"slug\":\"brutex\",\"description\":\"Automatically brute force all services running on a target.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/1N3/BruteX\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"passwords\",\"ports\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053940\",\"name\":\"BruteXSS\",\"slug\":\"brutexss\",\"description\":\"Tool written in Python simply to find XSS vulnerabilities in web application.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/rajeshmajumdar/BruteXSS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59810\",\"name\":\"BtleJack\",\"slug\":\"btlejack\",\"description\":\"Bluetooth Low Energy Swiss-army knife\",\"category\":\"wireless\",\"source\":\"https://github.com/virtualabs/btlejack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053941\",\"name\":\"Bucket Stream\",\"slug\":\"bucket-stream\",\"description\":\"Find interesting Amazon S3 Buckets by watching certificate transparency logs.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/eth0izzle/bucket-stream\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"certificates\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053943\",\"name\":\"BucketLoot\",\"slug\":\"bucketloot\",\"description\":\"An automated S3-compatible bucket inspector.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/redhuntlabs/BucketLoot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\",\"digitalocean\",\"google\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053944\",\"name\":\"Bug Bounty Guide\",\"slug\":\"bug-bounty-guide\",\"description\":\"Launchpad for bug bounty programs and bug bounty hunters.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/EdOverflow/bugbountyguide\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053945\",\"name\":\"Bug Bounty Reference\",\"slug\":\"bug-bounty-reference\",\"description\":\"A list of Bug Bounty writeups that is categorized by the bug nature.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/ngalongc/bug-bounty-reference\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"resources\",\"vulnerabilities\",\"
99writeups\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053946\",\"name\":\"Bug Bounty Reports Explained\",\"slug\":\"bug-bounty-reports-explained\",\"description\":\"Bug Bounty Reports Explained channel.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"hackers\",\"learning\",\"videos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a71ff15a63d7d80ed378026\",\"name\":\"Bug-hunter\",\"slug\":\"bug-hunter\",\"description\":\"Adversarial AI bug hunter with auto-fix skill for Claude Code, Cursor, Codex CLI, GitHub Copilot CLI, Kiro CLI, Opencode, Pi Coding Agent, and more. Multi-agent pipeline finds security vulnerabilities, logic errors, and runtime bugs â then fixes them autonomously on a safe branch.\",\"category\":\"ai-skills\",\"source\":\"https://github.com/codexstar69/bug-hunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"adversarial-ai\",\"ai-code-review\",\"auto-fix\",\"bug-detection\",\"claude\",\"claude-code\",\"code-quality\",\"codex-cli\",\"coding-agent\",\"cursor\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594db\",\"name\":\"BugBounty Web App\",\"slug\":\"bugbounty-web-app\",\"description\":\"App that helps bug bounty hunters to manage their bounties and target list\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/sokaRepo/bugbounty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gui\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053947\",\"name\":\"BugBountyHunter\",\"slug\":\"bugbountyhunter\",\"description\":\"Helping you become a BugBountyHunter.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"challenges\",\"exercices\",\"learning\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053948\",\"name\":\"BugBountyHunting\",\"slug\":\"bugbountyhunting\",\"description\":\"Search Bug Bounty writeups easily.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"online\",\"resources\",\"writeups\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053949\",\"name\":\"BugBountyScanner\",\"slug\":\"bugbountyscanner\",\"description\":\"A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use.\",\"category\":\"virtualization\",\"source\":\"https://github.com/chvancooten/BugBountyScanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"recon\",\"scanner\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705394b\",\"name\":\"BugProve\",\"slug\":\"bugprove\",\"description\":\"Automated firmware analysis tool for composition analysis and vulnerability scanning.\",\"category\":\"operating-systems\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"cves\",\"firmware\",\"iot\",\"online\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a1b3669b9496c0686ce65ee\",\"name\":\"BugTraceAI\",\"slug\":\"bugtraceai\",\"description\":\"Autonomous AI-powered security scanner â multi-agent vulnerability detection, exploitation, and validation engine\",\"category\":\"ai\",\"source\":\"https://github.com/BugTraceAI/BugTraceAI-CLI\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ai-agents\",\"bugbounty\",\"cybersecurity\",\"hacking\",\"webpentesting\",\"bugtraceai-cli\",\"autonomous\",\"ai-powered\",\"security\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594dc\",\"name\":\"Bugbountydash\",\"slug\":\"bugbountydash\",\"description\":\"Terminal dashboard for bug bounty hunters that use HackerOne and Bugcrowd\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/infosec-au/bugbountydash\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"depreciated\",\"cli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705394a\",\"name\":\"Bugcrowd VRT\",\"slug\":\"bugcrowd-vrt\",\"description\":\"Bugcrowdâs baseline priority ratings for common security vulnerabilities.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/bugcrowd/vulnerability-rating-taxonomy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"bugcrowd\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705394c\",\"name\":\"Built With\",\"slug\":\"built-with\",\"description\":\"Find out what websites are Built With.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"cms\",\"fingerprint\",\"framework\",\"technologies\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5954f\",\"name\":\"Bulwark\",\"slug\":\"bulwark\",\"description\":\"Collaborative penetration test, vulnerability database and reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/softrams/bulwark\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705394e\",\"name\":\"Burp Extender API\",\"slug\":\"burp-extender-api\",\"description\":\"Burp Extender API.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/burp-extender-api\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"burpsuite\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705394f\",\"name\":\"Burp NTLM Challenge Decoder\",\"slug\":\"burp-ntlm-challenge-decoder\",\"description\":\"Burp extension to decode NTLM SSP headers and extract domain/host information.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/GoSecure/burp-ntlm-challenge-decoder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"ntlm\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053950\",\"name\":\"Burp Suite\",\"slug\":\"burp-suite\",\"description\":\"The class-leading vulnerability scanning, penetration testing, and web app security platform.\",\"category\":\"network\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"burpsuite\",\"cves\",\"fuzzing\",\"proxy\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c8\",\"name\":\"Burp Suite\",\"slug\":\"burp-suite\",\"description\":\"Intercepting proxy to replay, inject, scan and fuzz HTTP requests (a limited free version exists)\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053951\",\"name\":\"Burp WP\",\"slug\":\"burp-wp\",\"description\":\"Find known vulnerabilities in WordPress plugins and themes, WPScan like plugin for Burp.\",\"category\":\"cms\",\"source\":\"https://github.com/PortSwigger/wordpress-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"cms\",\"scanner\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053952\",\"name\":\"Burp-AnonymousCloud\",\"slug\":\"burp-anonymouscloud\",\"description\":\"Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/codewatchorg/Burp-AnonymousCloud\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"buckets\",\"burpsuite\",\"cloud\",\"google\",\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053953\",\"name\":\"Burp-Encode-IP\",\"slug\":\"burp-encode-ip\",\"description\":\"Burp Suite extension to encode an IP address focused to bypass application IP/domain blacklist.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/e1abrador/Burp-Encode-IP\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"encoding\",\"ip\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053957\",\"name\":\"Burp-Wordlist-Generator\",\"slug\":\"burp-wordlist-generator\",\"description\":\"Generates wordlists from the Burp sitemap.\",\"category\":\"resources\",\"source\":\"https://github.com/ldcvanderpoel/Burp-Wordlist-Generator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053955\",\"name\":\"Burp-to-SQLMap\",\"slug\":\"burp-to-sqlmap\",\"description\":\"Performing SQLInjection test on Burp Suite Bulk Requests using SQLMap.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/Miladkhoshdel/burp-to-sqlmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"exploits\",\"sqli\",\"sqlmap\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053958\",\"name\":\"BurpBeautifier\",\"slug\":\"burpbeautifier\",\"description\":\"Burpsuite extension for beautifying request/response body.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/burp-beautifier\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"html\",\"javascript\",\"json\",\"xml\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053959\",\"name\":\"BurpBounty\",\"slug\":\"burpbounty\",\"description\":\"Improve the active and passive Burp Suite scanner by means of custom rules through GUI.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/wagiro/BurpBounty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59646\",\"name\":\"BurpBounty\",\"slug\":\"burpbounty\",\"description\":\"Scan Check Builder in BApp Store, improve the active and passive scanner by means of personalized rules through a graphical interface\",\"category\":\"plugins\",\"source\":\"https://github.com/wagiro/BurpBounty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705395a\",\"name\":\"BurpGPT\",\"slug\":\"burpgpt\",\"description\":\"A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/aress31/burpgpt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"gpt\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705395b\",\"name\":\"BurpJSLinkFinder\",\"slug\":\"burpjslinkfinder\",\"description\":\"Burp Extension for a passive scanning JS files for endpoint links.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/js-link-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"endpoints\",\"javascript\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705395c\",\"name\":\"BurpSentinel\",\"slug\":\"burpsentinel\",\"description\":\"GUI Burp Plugin to ease discovering of security holes in web applications.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/dobin/BurpSentinel\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"payloads\",\"sqli\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705395d\",\"name\":\"BurpSmartBuster\",\"slug\":\"burpsmartbuster\",\"description\":\"A Burp Suite content discovery plugin that add the smart into the Buster.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/PortSwigger/burp-smart-buster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"directories\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705395e\",\"name\":\"BurpSuiteHTTPSmuggler\",\"slug\":\"burpsuitehttpsmuggler\",\"description\":\"A Burp Suite extension to bypass WAFs or test their effectiveness using a number of techniques.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/nccgroup/BurpSuiteHTTPSmuggler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"hrs\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e5\",\"name\":\"Bust-A-Kube\",\"slug\":\"bust-a-kube\",\"description\":\"Intentionally-vulnerable Kubernetes cluster, intended to help people self-train on attacking and defending Kubernetes clusters\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053962\",\"name\":\"Bypass URL Parser\",\"slug\":\"bypass-url-parser\",\"description\":\"Tool that tests MANY url bypasses to reach a 40X protected page.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/laluka/bypass-url-parser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"exploits\",\"parser\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053963\",\"name\":\"Bypass-403\",\"slug\":\"bypass-403\",\"description\":\"A simple script just made for self use for bypassing 403.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/iamj0ker/bypass-403\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authorization\",\"bypass\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59677\",\"name\":\"CAPEv2\",\"slug\":\"capev2\",\"description\":\"Malware sandbox derived from Cuckoo with the goal of adding automated malware unpacking, config and payload extraction\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/kevoreilly/CAPEv2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"yara\",\"surcicata\",\"debugger\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053975\",\"name\":\"CDK\",\"slug\":\"cdk\",\"description\":\"Make security testing of K8s, Docker, and Containerd easier.\",\"category\":\"virtualization\",\"source\":\"https://github.com/cdk-team/CDK\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"containers\",\"docker\",\"kubernetes\",\"toolkit\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053976\",\"name\":\"CDN Proxy\",\"slug\":\"cdn-proxy\",\"description\":\"Create a copy of a targeted website with CDN and WAF restrictions disabled.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/RyanJarv/cdn-proxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cdn\",\"cloner\",\"cloudflare\",\"cloudfront\",\"firewall\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5967a\",\"name\":\"CFF Explorer\",\"slug\":\"cff-explorer\",\"description\":\"PE Editor\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f1\",\"name\":\"CIS CAT Lite\",\"slug\":\"cis-cat-lite\",\"description\":\"Asses systems against CIS Benchmarks\",\"category\":\"configuration-audit\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"compliance\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f2\",\"name\":\"CIS CAT Pro\",\"slug\":\"cis-cat-pro\",\"description\":\"Asses systems against CIS Benchmarks\",\"category\":\"configuration-audit\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"compliance\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a7\",\"name\":\"CLZero\",\"slug\":\"clzero\",\"description\":\"A project for fuzzing HTTP/1.1 CL.0 Request Smuggling attack vectors.\",\"category\":\"network\",\"source\":\"https://github.com/Moopinger/CLZero\",\"review_youtube_id\":\"\",\"sponsorship
99_level\":0,\"keywords\":[\"fuzzing\",\"hrs\",\"http\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539aa\",\"name\":\"CMSScan\",\"slug\":\"cmsscan\",\"description\":\"Scan Wordpress, Drupal, Joomla, vBulletin websites for security issues.\",\"category\":\"cms\",\"source\":\"https://github.com/ajinabraham/CMSScan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"drupal\",\"joomla\",\"vbulletin\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d2\",\"name\":\"CMSScan\",\"slug\":\"cmsscan\",\"description\":\"Wordpress, Drupal, Joomla, vBulletin CMS security scanner with dashboard\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/ajinabraham/CMSScan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a8\",\"name\":\"CMSeek\",\"slug\":\"cmseek\",\"description\":\"CMS Detection and Exploitation suite that supports over 180 other CMSs.\",\"category\":\"cms\",\"source\":\"https://github.com/Tuhinshubhra/CMSeeK\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"drupal\",\"joomla\",\"scanner\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d0\",\"name\":\"CMSeek\",\"slug\":\"cmseek\",\"description\":\"CMS detection and exploitation suite; capable of detecting more than 180 CMS\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Tuhinshubhra/CMSeeK\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a9\",\"name\":\"CMSmap\",\"slug\":\"cmsmap\",\"description\":\"CMS scanner that automates the process of detecting security flaws of the most popular CMSs.\",\"category\":\"cms\",\"source\":\"https://github.com/dionach/CMSmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"drupal\",\"joomla\",\"moodle\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d1\",\"name\":\"CMSmap\",\"slug\":\"cmsmap\",\"description\":\"WordPress, Joomla, Drupal, Moodle CMS security scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Dionach/CMSmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b9\",\"name\":\"CORS Scanner\",\"slug\":\"cors-scanner\",\"description\":\"A multi-threaded scanner that helps identify CORS flaws/misconfigurations.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/laconicwolf/cors-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cors\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539bb\",\"name\":\"CORStest\",\"slug\":\"corstest\",\"description\":\"A simple CORS misconfiguration scanner.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/RUB-NDS/CORStest\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cors\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c5\",\"name\":\"CRLF-Injection-Scanner\",\"slug\":\"crlf-injection-scanner\",\"description\":\"Command line tool for testing CRLF injection on a list of domains.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/MichaelStott/CRLF-Injection-Scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crlf\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c7\",\"name\":\"CRLFMap\",\"slug\":\"crlfmap\",\"description\":\"CRLFMap is a tool to find HTTP Splitting vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/ryandamour/crlfmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crlf\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c8\",\"name\":\"CRLFsuite\",\"slug\":\"crlfsuite\",\"description\":\"The most powerful CRLF injection scanner.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Nefcore/CRLFsuite\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crlf\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c9\",\"name\":\"CRLFuzz\",\"slug\":\"crlfuzz\",\"description\":\"A fast tool to scan CRLF vulnerability written in Go.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/dwisiswant0/crlfuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d1\",\"name\":\"CRYPTOHACK\",\"slug\":\"cryptohack\",\"description\":\"A fun, free platform for learning modern cryptography.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cryptography\",\"learning\",\"online\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59801\",\"name\":\"CRYPTOREX\",\"slug\":\"cryptorex\",\"description\":\" Large-scale firmware analysis of cryptographic misuse in IoT devices; supports ARM, MIPS, MIPSel architetures\",\"category\":\"cryptography\",\"source\":\"https://github.com/zhanglikernel/CRYPTOREX\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d2\",\"name\":\"CSP Evaluator\",\"slug\":\"csp-evaluator\",\"description\":\"Check CSP serves as a strong mitigation against cross-site scripting attacks.\",\"category\":\"vulnerabilities\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"csp\",\"online\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d5\",\"name\":\"CSP Evaluator\",\"slug\":\"csp-evaluator\",\"description\":\"Check Content Security Policy (CSP) configuration and assists with the reviewing process\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/google/csp-evaluator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d6\",\"name\":\"CSPass\",\"slug\":\"cspass\",\"description\":\"Test for CSP bypass payloads\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Ruulian/CSPass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d7\",\"name\":\"CSRFT\",\"slug\":\"csrft\",\"description\":\"A lightweight CSRF Toolkit for easy Proof of Concept.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/PaulSec/CSRFT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"csrf\",\"poc\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59588\",\"name\":\"CSSG\",\"slug\":\"cssg\",\"description\":\"Cobalt Strike Shellcode Generator; script used to more easily generate and format beacon shellcode in Cobalt Strike\",\"category\":\"red-teaming\",\"source\":\"https://github.com/RCStep/CSSG\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5964e\",\"name\":\"CSTC\",\"slug\":\"cstc\",\"description\":\"Cyber Security Transformation Chef; chaining simple operations and formatting on each incoming or outgoing HTTP message\",\"category\":\"plugins\",\"source\":\"https://github.com/usdAG/cstc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d7\",\"name\":\"CSWSH\",\"slug\":\"cswsh\",\"description\":\"Cross-Site WebSocket Hijacking Tester\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59552\",\"name\":\"CTFNote\",\"slug\":\"ctfnote\",\"description\":\"Collaborative platform for CTF teams, event planning, credentials sharing, tasks management, notes taking\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/TFNS/CTFNote\",\"review_youtube_id\":\"baXn3jQk_nI\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539db\",\"name\":\"CTFR\",\"slug\":\"ctfr\",\"description\":\"Abusing Certificate Transparency logs for getting HTTPS websites subdomains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/UnaPibaGeek/ctfr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"recon\",\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539da\",\"name\":\"CTFd\",\"slug\":\"ctfd\",\"description\":\"A Capture The Flag framework focusing on ease of use and customizability.\",\"category\":\"resources\",\"source\":\"https://github.com/CTFd/CTFd\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ctf\",\"framework\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d8\",\"name\":\"CUPP\",\"slug\":\"cupp\",\"description\":\"Common User Passwords Profiler, wordlist generator based on user profiling\",\"category\":\"cracking\",\"source\":\"https://github.com/Mebus/cupp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539de\",\"name\":\"CUPP\",\"slug\":\"cupp\",\"description\":\"Common User Passwords Profiler.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Mebus/cupp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e2\",\"name\":\"CVE-MAKER\",\"slug\":\"cve-maker\",\"description\":\"A hub for finding CVEs and exploits based on the official NIST, ExploitDB and Github databases.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/msd0pe-1/cve-maker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5949f\",\"name\":\"CVEMap\",\"slug\":\"cvemap\",\"description\":\"CLI tool designed to provide a structured interface to various vulnerability databases\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/projectdiscovery/cvemap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cve\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e5\",\"name\":\"CVEMap\",\"slug\":\"cvemap\",\"description\":\"Navigate the CVE jungle with ease using CLI tool designed to provide a structured interface.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/projectdiscovery/cvemap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c9\",\"name\":\"Caido\",\"slug\":\"caido\",\"description\":\"Intercepting proxy to replay, inject, scan and fuzz HTTP requests (a limited free version exists)\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053968\",\"name\":\"Cain and Abel\",\"slug\":\"cain-and-abel\",\"description\":\"Password recovery tool for Microsoft Operating Systems.\",\"category\":\"network\",\"source\":\"https://github.com/xchwarze/Cain\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"network\",\"passwords\",\"voip\",\"windows\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053969\",\"name\":\"Cake Fuzzer\",\"slug\":\"cake-fuzzer\",\"description\":\"Cutting-edge project designed to automate the continuous discovery of vulnerabilities in webapps.\",\"category\":\"development\",\"source\":\"https://github.com/Zigrin-Security/CakeFuzzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cakephp\",\"php\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d1\",\"name\":\"Caldera\",\"slug\":\"caldera\",\"description\":\"Cyber security platform designed to easily automate adversary emulation, assist manual red-teams, and automate incident response\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/mitre/caldera\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"docker\",\"simulation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705396a\",\"name\":\"Caldera\",\"slug\":\"caldera\",\"description\":\"Automated adversary emulation platform.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/mitre/caldera\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"framework\",\"postexploitation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5970f\",\"name\":\"Cameradar\",\"slug\":\"cameradar\",\"description\":\"RTSP stream access; detect open hosts, device model, automated dictionary attacks on stream route and credentials\",\"category\":\"reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"docker\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705396c\",\"name\":\"Can I Take Over DNS?\",\"slug\":\"can-i-take-over-dns-\",\"description\":\"A list of DNS providers and how to claim (sub)domains via missing hosted zones.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/indianajson/can-i-take-over-dns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"resources\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705396d\",\"name\":\"Can I take over XYZ?\",\"slug\":\"can-i-take-over-xyz\",\"description\":\"A list of services and how to claim (sub)domains with dangling DNS records.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/EdOverflow/can-i-take-over-xyz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"resources\",\"subdomains\",\"subto\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5949a\",\"name\":\"Canarytokens\",\"slug\":\"canarytokens\",\"description\":\"Quickly deployable honeypot with docker image, the online service allows to get alerted by email for URL token, DNS token, unique email address, custom image, MS word doc., Acrobat Reader PDF doc., and more\",\"category\":\"honeypot-and-decoy\",\"source\":\"https://github.com/thinkst/canarytokens\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705396e\",\"name\":\"Canarytokens\",\"slug\":\"canarytokens\",\"description\":\"Track activity and actions on your network.\",\"category\":\"network\",\"source\":\"https://github.com/thinkst/canarytokens\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leaks\",\"network\",\"protocols\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59550\",\"name\":\"Canopy\",\"slug\":\"canopy\",\"description\":\"Penetration test platform: vulnerability database and reporting\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593ca\",\"name\":\"Cansina\",\"slug\":\"cansina\",\"description\":\"Web directory and file scanner (wordlist bruteforce)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/deibit/cansina/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705396f\",\"name\":\"Canvas\",\"slug\":\"canvas\",\"descrip
99tion\":\"Assessment tool that allows penetration testing and hostile attack simulations.\",\"category\":\"auth-perms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"exploits\",\"framework\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5975f\",\"name\":\"CapAnalysis\",\"slug\":\"capanalysis\",\"description\":\"PCAP analyzer\",\"category\":\"networking\",\"source\":\"https://sourceforge.net/projects/capanalysis/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59583\",\"name\":\"CarbonCopy\",\"slug\":\"carboncopy\",\"description\":\"Create a spoofed certificate of any online website and signs an executable for AV Evasion; works for Windows and Linux\",\"category\":\"red-teaming\",\"source\":\"https://github.com/paranoidninja/CarbonCopy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"anti-virus\",\"signature\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053971\",\"name\":\"CarbonCopy\",\"slug\":\"carboncopy\",\"description\":\"Creates a spoofed certificate of any online website and signs an executable for AV evasion.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/paranoidninja/CarbonCopy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5975e\",\"name\":\"Carnivore\",\"slug\":\"carnivore\",\"description\":\"Assessment of on-premises Microsoft servers such as ADFS, Skype, Exchange, and RDWeb\",\"category\":\"networking\",\"source\":\"https://github.com/nccgroup/Carnivore\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053986\",\"name\":\"CeWL\",\"slug\":\"cewl\",\"description\":\"Custom Word List Generator.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/digininja/CeWL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"passwords\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ce\",\"name\":\"CeWL\",\"slug\":\"cewl\",\"description\":\"CeWL is a Custom Word List Generator\",\"category\":\"cracking\",\"source\":\"https://github.com/digininja/CeWL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cewl\",\"custom\",\"word\",\"list\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053987\",\"name\":\"CeWLeR\",\"slug\":\"cewler\",\"description\":\"Custom word list generator redefined, based on the Scrapy framework.\",\"category\":\"resources\",\"source\":\"https://github.com/roys/cewler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053978\",\"name\":\"Censys Enumeration\",\"slug\":\"censys-enumeration\",\"description\":\"Extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/0xbharath/censys-enumeration\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"censys\",\"certificates\",\"emails\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053979\",\"name\":\"Censys subdomain finder\",\"slug\":\"censys-subdomain-finder\",\"description\":\"Perform subdomain enumeration using the certificate transparency logs from Censys.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/christophetd/censys-subdomain-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"censys\",\"certificates\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c2\",\"name\":\"Cerbero Profiler\",\"slug\":\"cerbero-profiler\",\"description\":\"File analyzer and inspector\",\"category\":\"digital-forensics\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59678\",\"name\":\"Cerberus\",\"slug\":\"cerberus\",\"description\":\"Unstrip Rust and Go binaries (ELF and PE) for static analysis; based on hashing and scoring systems, it can retrieve lots of symbol names\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/h311d1n3r/Cerberus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59760\",\"name\":\"Cerbrutus\",\"slug\":\"cerbrutus\",\"description\":\"Network services credentials brute-forcer: SSH, FTP\",\"category\":\"networking\",\"source\":\"https://github.com/Cerbrutus-BruteForcer/cerbrutus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705397c\",\"name\":\"CertCrunchy\",\"slug\":\"certcrunchy\",\"description\":\"Uses data from SSL Certificates to find potential host names.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/joda32/CertCrunchy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"censys\",\"certificates\",\"certspotter\",\"crtsh\",\"ips\",\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053985\",\"name\":\"CertStealer\",\"slug\":\"certstealer\",\"description\":\"A .NET tool for exporting and importing certificates without touching disk.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/TheWover/CertStealer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"ssl\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705397d\",\"name\":\"Certificate Ripper\",\"slug\":\"certificate-ripper\",\"description\":\"A CLI tool to extract server certificates.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Hakky54/certificate-ripper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"recon\",\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705397e\",\"name\":\"Certificate Search\",\"slug\":\"certificate-search\",\"description\":\"Get informations about SSL certificates.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/crtsh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"online\",\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705397f\",\"name\":\"Certify\",\"slug\":\"certify\",\"description\":\"Active Directory certificate abuse.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/GhostPack/Certify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"certificates\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053980\",\"name\":\"Certipy\",\"slug\":\"certipy\",\"description\":\"Active Directory Certificate Services enumeration and abuse.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ly4k/Certipy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"enumeration\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59761\",\"name\":\"Certipy\",\"slug\":\"certipy\",\"description\":\"Active Directory Certificate Services enumeration and exploitation\",\"category\":\"networking\",\"source\":\"https://github.com/ly4k/Certipy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"adcs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594e9\",\"name\":\"Certstream\",\"slug\":\"certstream\",\"description\":\"Intelligence feed that gives real-time updates from the Certificate Transparency Log network\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/CaliDog/certstream-server\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59551\",\"name\":\"Cervantes\",\"slug\":\"cervantes\",\"description\":\"Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/CervantesSec/cervantes\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"audit\",\"burpsuite\",\"collaboration\",\"collaboration-platform\",\"collaborative\",\"cve\",\"hacking\",\"nessus\",\"nmap\",\"penetration-testing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593cb\",\"name\":\"Chankro\",\"slug\":\"chankro\",\"description\":\"Tool to bypass disable_functions and open_basedir in PHP by calling sendmail and setting LD_PRELOAD environment variable\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/TarlogicSecurity/Chankro\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705398b\",\"name\":\"Chaos\",\"slug\":\"chaos\",\"description\":\"Collect and maintain internet-wide assets data for public Bug Bounty programs.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/chaos-client\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"dns\",\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705398c\",\"name\":\"Charles\",\"slug\":\"charles\",\"description\":\"HTTP proxy / monitor / reverse proxy that allows to view all of the HTTP(S) traffic.\",\"category\":\"network\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"proxy\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593cc\",\"name\":\"Charles\",\"slug\":\"charles\",\"description\":\"Intercepting proxy to replay, inject, scan and fuzz HTTP requests\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705398f\",\"name\":\"Chimera\",\"slug\":\"chimera\",\"description\":\"Obfuscation script designed to bypass AMSI and commercial antivirus solution.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/tokyoneon/Chimera\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"antivirus\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"}
99,{\"_id\":\"6692ff2bd9c7341a02b59704\",\"name\":\"ChipWhisperer\",\"slug\":\"chipwhisperer\",\"description\":\"Toolchain for side-channel power analysis and glitching attacks\",\"category\":\"hardware\",\"source\":\"https://github.com/newaetech/chipwhisperer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593cd\",\"name\":\"ChopChop\",\"slug\":\"chopchop\",\"description\":\"Web application security scanner based on templates\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/michelin/ChopChop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053992\",\"name\":\"ChopChop\",\"slug\":\"chopchop\",\"description\":\"Scan endpoints and identify exposition of sensitive services/files/folders.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/michelin/ChopChop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\",\"recon\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597fd\",\"name\":\"Cipher Suite Info\",\"slug\":\"cipher-suite-info\",\"description\":\"A searchable directory of TLS ciphersuites and related security details\",\"category\":\"cryptography\",\"source\":\"https://github.com/hcrudolph/ciphersuite.info\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053994\",\"name\":\"Ciphey\",\"slug\":\"ciphey\",\"description\":\"Automates decryptions \u0026 decodings with encodings, classical ciphers, hashes, or more.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/Ciphey/Ciphey\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cryptography\",\"hash\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053997\",\"name\":\"ClassyShark\",\"slug\":\"classyshark\",\"description\":\"Android and Java bytecode viewer.\",\"category\":\"development\",\"source\":\"https://github.com/google/android-classyshark\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"binaries\",\"codeanalysis\",\"java\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053998\",\"name\":\"CloakQuest3r\",\"slug\":\"cloakquest3r\",\"description\":\"Uncover the true IP address of websites safeguarded by Cloudflare \u0026 others.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/spyboy-productions/CloakQuest3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloudflare\",\"firewall\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705399a\",\"name\":\"CloudBrute\",\"slug\":\"cloudbrute\",\"description\":\"Awesome cloud enumerator.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/0xsha/CloudBrute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"alibaba\",\"aws\",\"azure\",\"digitalocean\",\"google\",\"linode\",\"vultr\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705399b\",\"name\":\"CloudFail\",\"slug\":\"cloudfail\",\"description\":\"Utilize misconfigured DNS and old database records to find hidden IPs behind CloudFlare network.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/m0rtem/CloudFail\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloudflare\",\"ips\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705399c\",\"name\":\"CloudFlair\",\"slug\":\"cloudflair\",\"description\":\"Find origin servers of websites behind Cloudflare by using Internet-wide scan data from Censys.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/christophetd/CloudFlair\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"censys\",\"cloudflare\",\"ips\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593cf\",\"name\":\"CloudFrunt\",\"slug\":\"cloudfrunt\",\"description\":\"Scanner to identify misconfigured CloudFront domains\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/MindPointGroup/cloudfrunt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705399f\",\"name\":\"CloudFrunt\",\"slug\":\"cloudfrunt\",\"description\":\"A tool for identifying misconfigured CloudFront domains.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/MindPointGroup/cloudfrunt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"cloudfront\",\"domains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c9\",\"name\":\"CloudGPT\",\"slug\":\"cloudgpt\",\"description\":\"Vulnerability scanner for AWS customer managed policies using ChatGPT\",\"category\":\"cloud\",\"source\":\"https://github.com/ustayready/cloudgpt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a0\",\"name\":\"CloudGoat\",\"slug\":\"cloudgoat\",\"description\":\"Vulnerable by design AWS deployment tool.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/RhinoSecurityLabs/cloudgoat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a1\",\"name\":\"CloudJack\",\"slug\":\"cloudjack\",\"description\":\"Route53/CloudFront Vulnerability assessment utility.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/prevade/cloudjack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"cloudfront\",\"dns\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a3\",\"name\":\"CloudMapper\",\"slug\":\"cloudmapper\",\"description\":\"CloudMapper helps you analyze your Amazon Web Services environments.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/duo-labs/cloudmapper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ca\",\"name\":\"CloudMapper\",\"slug\":\"cloudmapper\",\"description\":\"Analyze AWS environments auditing for security issues\",\"category\":\"cloud\",\"source\":\"https://github.com/duo-labs/cloudmapper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a4\",\"name\":\"CloudRecon\",\"slug\":\"cloudrecon\",\"description\":\"Finding assets and subdomains from certificates! Scan the web!\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/g0ldencybersec/CloudRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a5\",\"name\":\"CloudScraper\",\"slug\":\"cloudscraper\",\"description\":\"Tool to enumerate targets in search of cloud resources.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/jordanpotti/cloudscraper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"digitalocean\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59764\",\"name\":\"CloudShark\",\"slug\":\"cloudshark\",\"description\":\"PCAP analyzer\",\"category\":\"networking\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596cb\",\"name\":\"CloudTracker\",\"slug\":\"cloudtracker\",\"description\":\"Find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies\",\"category\":\"cloud\",\"source\":\"https://github.com/duo-labs/cloudtracker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705399e\",\"name\":\"Cloudfox\",\"slug\":\"cloudfox\",\"description\":\"Automating situational awareness for cloud penetration tests.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/BishopFox/cloudfox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"google\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b0\",\"name\":\"CodeCat\",\"slug\":\"codecat\",\"description\":\"Automatic code static analysis tool to detect bugs and vulnerabilities\",\"category\":\"code-analysis\",\"source\":\"https://github.com/CoolerVoid/codecat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sast\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b1\",\"name\":\"CodeQL\",\"slug\":\"codeql\",\"description\":\"Semantic code analysis engine; discover vulnerabilities across a codebase, lets you query code as though it were data, write a query to find all variants of a vulnerability\",\"category\":\"code-analysis\",\"source\":\"https://github.com/github/codeql\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59494\",\"name\":\"Codechella Crisis Response\",\"slug\":\"codechella-crisis-response\",\"description\":\"An application curated to crisis zones to facilitate the dissemination of accurate mission-critical information from sources on the ground to key partners with minimal lag time\",\"category\":\"crisis-management\",\"source\":\"https://github.com/GobindB/crisis-aversion-codechella\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ae\",\"name\":\"Coerced potato\",\"slug\":\"coerced-potato\",\"description\":\"A Windows potato to privesc.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Prepouce/CoercedPotato\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59765\",\"name\":\"Coercer\",\"slug\":\"coercer\",\"description\":\"Coerce a Windows server to authenticate on an arbitrary machine through 12 methods\",\"category\":\"networking\",\"source\":\"https://github.com/p0dalirius/Coercer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"smb\",\"rpc\",\"unc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539af\",\"name\":\"Coercer\",\"slug\":\"coercer\",\"description\":\"Automatically coerce a Windows server to authenticate on an arbitrary machine.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/p0dalirius/Coercer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"network\",\"reports\",\"samba\",\"scanner\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59647\",\"name\":\"CogniCrypt\",\"slug\":\"cognicrypt\",\"description\":\"Supp
99orts Java developers in using Java Cryptographic APIs\",\"category\":\"plugins\",\"source\":\"https://github.com/eclipse-cognicrypt/CogniCrypt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b0\",\"name\":\"Collaborator Everywhere\",\"slug\":\"collaborator-everywhere\",\"description\":\"Burp Suite extension which injects non-invasive headers to reveal backend systems.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/collaborator-everywhere\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backend\",\"burpsuite\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595cf\",\"name\":\"ComPP\",\"slug\":\"compp\",\"description\":\"Company Passwords Profiler helps making a bruteforce wordlist for a targeted company\",\"category\":\"cracking\",\"source\":\"https://github.com/sec-it/ComPP\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b1\",\"name\":\"Commando VM\",\"slug\":\"commando-vm\",\"description\":\"Fully customizable Windows-based pentesting virtual machine distribution.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/mandiant/commando-vm\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"toolkit\",\"training\",\"vm\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b3\",\"name\":\"Commix\",\"slug\":\"commix\",\"description\":\"Automated All-in-One OS Command Injection Exploitation Tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/commixproject/commix\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"rce\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b4\",\"name\":\"Comperio\",\"slug\":\"comperio\",\"description\":\"OSINT tool to find usernames across 80+ social media and social networking sites.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/felipecaon/comperio\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59766\",\"name\":\"ConPass\",\"slug\":\"conpass\",\"description\":\"Password spraying in Active Directory checking the default domain password policy as well as PSO and the badpwdcount LDAP attribute to avoid account locking\",\"category\":\"networking\",\"source\":\"https://github.com/login-securite/conpass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b5\",\"name\":\"ConfuserEx\",\"slug\":\"confuserex\",\"description\":\"An open-source, free protector for .NET applications.\",\"category\":\"development\",\"source\":\"https://github.com/mkaring/ConfuserEx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"defense\",\"dotnet\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59584\",\"name\":\"ConfuserEx\",\"slug\":\"confuserex\",\"description\":\"Protector for .NET applications\",\"category\":\"red-teaming\",\"source\":\"https://github.com/mkaring/ConfuserEx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"packer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59712\",\"name\":\"ConvertHound\",\"slug\":\"converthound\",\"description\":\"Convert BloodHound output files into nmap XML that can be imported into reporting software like Dradis and Plextrac\",\"category\":\"other\",\"source\":\"https://github.com/layer8secure/ConvertHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5961b\",\"name\":\"CookieCrimesJS\",\"slug\":\"cookiecrimesjs\",\"description\":\"Read local Chrome cookies without root or decrypting and display then in JSON; Javascript implementation of cookie_crimes\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/clr2of8/CookieCrimesJS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59648\",\"name\":\"Copy As FFUF\",\"slug\":\"copy-as-ffuf\",\"description\":\"Copies the selected request(s) as FFUF skeleton\",\"category\":\"plugins\",\"source\":\"https://github.com/d3k4z/burp-copy-as-ffuf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59649\",\"name\":\"Copy As Go Request\",\"slug\":\"copy-as-go-request\",\"description\":\"Copies the selected request(s) as Go Request invocations\",\"category\":\"plugins\",\"source\":\"https://github.com/portswigger/copy-as-go-request\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5964c\",\"name\":\"Copy As Python-Requests\",\"slug\":\"copy-as-python-requests\",\"description\":\"Copies selected request(s) as Python-Requests invocations\",\"category\":\"plugins\",\"source\":\"https://github.com/portswigger/copy-as-python-requests\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5964d\",\"name\":\"Copy As XMLHttpRequest\",\"slug\":\"copy-as-xmlhttprequest\",\"description\":\"Copies selected request(s) as JavaScript XMLHttpRequest invocations\",\"category\":\"plugins\",\"source\":\"https://github.com/vulnbe/burpsuite-copy-as-xmlhttprequest\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5964a\",\"name\":\"Copy as Node Request\",\"slug\":\"copy-as-node-request\",\"description\":\"Copies the selected request(s) as Node.JS Request invocations\",\"category\":\"plugins\",\"source\":\"https://github.com/portswigger/copy-as-node-request\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5964b\",\"name\":\"Copy as PowerShell Requests\",\"slug\":\"copy-as-powershell-requests\",\"description\":\"Copies the selected request(s) as PowerShell invocation(s)\",\"category\":\"plugins\",\"source\":\"https://github.com/portswigger/copy-as-powershell-requests\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b8\",\"name\":\"Core Impact\",\"slug\":\"core-impact\",\"description\":\"Designed to enable security team
99s to conduct advanced penetration tests with ease.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"exploits\",\"reports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ba\",\"name\":\"CorsMe\",\"slug\":\"corsme\",\"description\":\"CORS misconfiguration scanner tool with speed and precision in mind!\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Shivangx01b/CorsMe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cors\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539bc\",\"name\":\"Corsy\",\"slug\":\"corsy\",\"description\":\"CORS Misconfiguration Scanner.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/s0md3v/Corsy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cors\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59585\",\"name\":\"Cortex XDR Config Extractor\",\"slug\":\"cortex-xdr-config-extractor\",\"description\":\"Parse the Database Lock Files of the Cortex XDR Agent by Palo Alto Networks and extract Agent Settings, the Hash and Salt of the Uninstall Password, as well as possible Exclusions\",\"category\":\"red-teaming\",\"source\":\"https://github.com/Laokoon-SecurITy/Cortex-XDR-Config-Extractor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539bd\",\"name\":\"Covenant\",\"slug\":\"covenant\",\"description\":\"Collaborative C2 framework for red teamers.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/cobbr/Covenant\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"aws\",\"cloud\",\"framework\",\"google\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59586\",\"name\":\"Covenant\",\"slug\":\"covenant\",\"description\":\"Command \u0026 Control framework with multi-user collaboration\",\"category\":\"red-teaming\",\"source\":\"https://github.com/cobbr/Covenant\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539be\",\"name\":\"Cr3dOv3r\",\"slug\":\"cr3dov3r\",\"description\":\"Know the dangers of credential reuse attacks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/D4Vinci/Cr3dOv3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leaks\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c0\",\"name\":\"CrackMapExec\",\"slug\":\"crackmapexec\",\"description\":\"A swiss army knife for pentesting networks.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/byt3bl33d3r/CrackMapExec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"network\",\"postexploitation\",\"protocols\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59767\",\"name\":\"CrackMapExec\",\"slug\":\"crackmapexec\",\"description\":\"Post-exploitation tool to assess Active Directory networks\",\"category\":\"networking\",\"source\":\"https://github.com/byt3bl33d3r/CrackMapExec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d4\",\"name\":\"CrackQ\",\"slug\":\"crackq\",\"description\":\"Hashcat cracking queue system, API and WebUI\",\"category\":\"cracking\",\"source\":\"https://github.com/f0cker/crackq\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gui\",\"hashcat\",\"crack\",\"hash\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d4\",\"name\":\"CrackQL\",\"slug\":\"crackql\",\"description\":\"GraphQL password brute-force and fuzzing utility\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/nicholasaleks/CrackQL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d6\",\"name\":\"CrackStation\",\"slug\":\"crackstation\",\"description\":\"Pre-computed lookup tables to crack password hashes\",\"category\":\"cracking\",\"source\":\"https://github.com/defuse/crackstation\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d1\",\"name\":\"Cracken\",\"slug\":\"cracken\",\"description\":\"Password wordlist generator, Smartlist creation and password hybrid-mask\",\"category\":\"cracking\",\"source\":\"https://github.com/shmuelamar/cracken\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d2\",\"name\":\"CrackerJack\",\"slug\":\"crackerjack\",\"description\":\"Hashcat WebUI; session management, mask generation, API, notifications, local and LDAP authentication\",\"category\":\"cracking\",\"source\":\"https://github.com/ctxis/crackerjack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gui\",\"hashcat\",\"crack\",\"hash\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d3\",\"name\":\"Cracklord\",\"slug\":\"cracklord\",\"description\":\"Scalable, pluggable, and distributed system for hash cracking, supports Hashcat\",\"category\":\"cracking\",\"source\":\"https://github.com/jmmcatee/cracklord\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gui\",\"hashcat\",\"crack\",\"hash\",\"password\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c1\",\"name\":\"Crawlergo\",\"slug\":\"crawlergo\",\"description\":\"A powerful browser crawler for web vulnerability scanners\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Qianlitp/crawlergo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59587\",\"name\":\"CredMaster\",\"slug\":\"credmaster\",\"description\":\"Password spraying, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling\",\"category\":\"red-teaming\",\"source\":\"https://github.com/knavesec/CredMaster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c6\",\"name\":\"Crlfi\",\"slug\":\"crlfi\",\"description\":\"CRLF bug scanner for WebPentesters and Bugbounty Hunters.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/karthi-the-hacker/crlfi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crlf\",\"payloads\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ca\",\"name\":\"Cross-site scripting cheat sheet\",\"slug\":\"cross-site-scripting-cheat-sheet\",\"description\":\"PortSwigger XSS cheat sheet that c
99ontains many vectors that can help you bypass WAFs and filters.\",\"category\":\"vulnerabilities\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"payloads\",\"resources\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539cb\",\"name\":\"CrossC2\",\"slug\":\"crossc2\",\"description\":\"Generate CobaltStrike's cross-platform payload.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/gloxec/CrossC2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cobalstrike\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539cc\",\"name\":\"CrossLinked\",\"slug\":\"crosslinked\",\"description\":\"LinkedIn enumeration tool to get employee names from an organization using scraping.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/m8sec/CrossLinked\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"enumeration\",\"linkedin\",\"osint\",\"scraper\",\"users\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59811\",\"name\":\"Crunch-Cracker\",\"slug\":\"crunch-cracker\",\"description\":\"Wordlist generator and Wi-Fi cracker\",\"category\":\"wireless\",\"source\":\"https://github.com/KURO-CODE/Crunch-Cracker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597fe\",\"name\":\"CryptoGuard\",\"slug\":\"cryptoguard\",\"description\":\"Program analysis tool to find cryptographic misuse in Java and Android\",\"category\":\"cryptography\",\"source\":\"https://github.com/CryptoGuardOSS/cryptoguard\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59800\",\"name\":\"Crypton\",\"slug\":\"crypton\",\"description\":\"Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Hashing Algorithms along with example challenges from CTFs\",\"category\":\"cryptography\",\"source\":\"https://github.com/ashutosh1206/Crypton\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59802\",\"name\":\"Cryscanner\",\"slug\":\"cryscanner\",\"description\":\"Identify misuse of cryptographic libraries by collecting and analysing logs\",\"category\":\"cryptography\",\"source\":\"https://github.com/amit-choudhari/cryscanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d4\",\"name\":\"Csper\",\"slug\":\"csper\",\"description\":\"The most advance set of Content Security Policy tools.\",\"category\":\"vulnerabilities\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"csp\",\"online\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5967b\",\"name\":\"Cuckoo 3\",\"slug\":\"cuckoo-3\",\"description\":\"Python 3 port of Cuckoo, automated malware analysis system\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/cert-ee/cuckoo3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539dd\",\"name\":\"Cuckoo Sandbox\",\"slug\":\"cuckoo-sandbox\",\"description\":\"An automated dynamic malware analysis system.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/cuckoosandbox/cuckoo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"malware\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5967c\",\"name\":\"Cutter\",\"slug\":\"cutter\",\"description\":\"Qt and C++ GUI for radare2\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/radareorg/cutter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e6\",\"name\":\"CyberChef\",\"slug\":\"cyberchef\",\"description\":\"A web app for encryption, encoding, compression and data analysis.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/gchq/CyberChef\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"encoding\",\"hash\",\"online\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59714\",\"name\":\"CyberChef\",\"slug\":\"cyberchef\",\"description\":\"Data manipulation toolkit in web browser\",\"category\":\"other\",\"source\":\"https://github.com/gchq/CyberChef\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e7\",\"name\":\"CyberSec Quizzes\",\"slug\":\"cybersec-quizzes\",\"description\":\"Test your knowledge on cyber security and practice for industry recognised certifications.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"online\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a72005e351cc6d8898bb06b\",\"name\":\"CyberStrike\",\"slug\":\"cyberstrike\",\"description\":\"Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT\u0026CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.\",\"category\":\"ai\",\"source\":\"https://github.com/CyberStrikeus/CyberStrike\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ai\",\"ai-agent\",\"ai-security\",\"bug-bounty\",\"cybersecurity\",\"devsecops\",\"ethical-hacking\",\"hacking\",\"hacking-tool\",\"llm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"69ae4c93465cdfbb5e0a698f\",\"name\":\"Cygeniq\",\"slug\":\"cygeniq\",\"description\":\"$1f\",\"category\":\"red-teaming\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e8\",\"name\":\"CypherDog\",\"slug\":\"cypherdog\",\"description\":\"PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/SadProcessor/CypherDog\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"api\",\"azure\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"687a8f623573978c5280b627\",\"name\":\"Cyver Core\",\"slug\":\"cyver-core\",\"description\":\"Automate pentest reporting \u0026 project management, generate content with AI, improve client retention, and organize your pentest workload.\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/cyver-core\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e9\",\"name\":\"D3m0n1z3dShell\",\"slug\":\"d3m0n1z3dshell\",\"description\":\"An advanced tool for persistence in Linux.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/MatheuZSecurity/D3m0n1z3dShell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"exploits\",\"linux\",\"persistence\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e2\",\"name\":\"DARKSURGEON\",\"slug\":\"darksurgeon\",\"description\":\"W
99indows project to empower incident response, digital forensics, malware analysis, and network defense with HashiCorp Packer and Vagrant\",\"category\":\"defensive\",\"source\":\"https://github.com/cryps1s/DARKSURGEON\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59553\",\"name\":\"DART\",\"slug\":\"dart\",\"description\":\"Documentation And Reporting Tool; Collaborative penetration test and vulnerability database platform\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/lmco/dart\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59768\",\"name\":\"DC Detector\",\"slug\":\"dc-detector\",\"description\":\"Spot all domain controllers in a Microsoft Active Directory environment, find computer name, FQDN, and IP address(es) of all DCs\",\"category\":\"networking\",\"source\":\"https://github.com/noraj/DCDetector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\",\"dns\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5961d\",\"name\":\"DCOMrade\",\"slug\":\"dcomrade\",\"description\":\"Script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement, code execution, data exfiltration, etc.\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/sud0woodo/DCOMrade\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f8\",\"name\":\"DEFCON\",\"slug\":\"defcon\",\"description\":\"The worldâs most prominent and well-known computer security conferences.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hackers\",\"learning\",\"resources\",\"videos\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f3\",\"name\":\"DFIR ORC\",\"slug\":\"dfir-orc\",\"description\":\"Forensics artefact collection tool for systems running Microsoft Windows\",\"category\":\"incident-response\",\"source\":\"https://github.com/DFIR-ORC/dfir-orc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f4\",\"name\":\"DFIRTrack\",\"slug\":\"dfirtrack\",\"description\":\"Incident response tracking web application, focused on handling one major incident with a lot of affected systems\",\"category\":\"incident-response\",\"source\":\"https://github.com/stuhli/dfirtrack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5961e\",\"name\":\"DLLInjector\",\"slug\":\"dllinjector\",\"description\":\"Dll injection tool\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/OpenSecurityResearch/dllinjector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5961f\",\"name\":\"DLLPasswordFilterImplant\",\"slug\":\"dllpasswordfilterimplant\",\"description\":\"Password filter DLL, triggered on password change to exfiltrate credentials\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/GoSecure/DLLPasswordFilterImplant\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5976a\",\"name\":\"DNS Rebinding Tool\",\"slug\":\"dns-rebinding-tool\",\"description\":\"Toolkit to test further DNS rebinding attacks \",\"category\":\"networking\",\"source\":\"https://github.com/h43z/dns-rebinding-tool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a16\",\"name\":\"DNSCewl\",\"slug\":\"dnscewl\",\"description\":\"A DNS bruteforcing wordlist generator.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/codingo/DNSCewl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"dns\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ee\",\"name\":\"DNSDumpster\",\"slug\":\"dnsdumpster\",\"description\":\"Domain research tool that can discover hosts related to a domain\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a18\",\"name\":\"DNSExfiltrator\",\"slug\":\"dnsexfiltrator\",\"description\":\"Data exfiltration over DNS request covert channel.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Arno0x/DNSExfiltrator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"exfiltration\",\"exploits\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a1a\",\"name\":\"DNSMORPH\",\"slug\":\"dnsmorph\",\"description\":\"Domain name permutation engine written in Go.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/netevert/dnsmorph\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"dns\",\"domains\",\"fuzzing\",\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a1b\",\"name\":\"DNSProbe\",\"slug\":\"dnsprobe\",\"description\":\"Allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/dnsprobe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f1\",\"name\":\"DNSRecon\",\"slug\":\"dnsrecon\",\"description\":\"DNS reconnaissance tool: AXFR, DNS records enumeration, TLD expansion, wildcard resolution, subdomain bruteforce, PTR record lookup, check for cached records\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/darkoperator/dnsrecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a1d\",\"name\":\"DNSRecon\",\"slug\":\"dnsrecon\",\"description\":\"DNS Enumeration Script.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/darkoperator/dnsrecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a1e\",\"name\":\"DNSTake\",\"slug\":\"dnstake\",\"description\":\"A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/pwnesia/dnstake\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a1f\",\"name\":\"DNSTracer\",\"slug\":\"dnstracer\",\"description\":\"Trace the path of a DNS query.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/pcoder/DNSTracer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a23\",\"name\":\"DNSWatch\",\"slug\":\"dnswatch\",\"description\":\"DNS traffic sniffer and analyzer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/HalilDeniz/DNSWatch\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"network\",\"sniffer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a28\",\"name\":\"DOM XSS Scanner\",\"slug\":\"dom-xss-scanner\",\"description\":\"A tool to scan source code for DOM based XSS vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/yaph/domxssscanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a27\",\"name\":\"DOM based XSS finder\",\"slug\":\"dom-based-xss-finder\",\"description\":\"Chrome extension that finds DOM based XSS vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/AsaiKen/dom-based-xss-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a2e\",\"name\":\"DOMDig\",\"slug\":\"domdig\",\"description\":\"DOM XSS scanner for Single Page Applications.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/fcavallarin/domdig\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a31\",\"name\":\"DOMPurify\",\"slug\":\"dompurify\",\"description\":\"A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.\",\"category\":\"development\",\"source\":\"https://github.com/cure53/DOMPurify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dom\",\"html\",\"svg\",\"xss\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59685\",\"name\":\"DRAKVUF Sandbox\",\"slug\":\"drakvuf-sandbox\",\"description\":\"Automated black-box hypervisor-level malware analysis system\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/CERT-Polska/drakvuf-sandbox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a45\",\"name\":\"DSStoreView\",\"slug\":\"dsstoreview\",\"description\":\"DS_Store file parser/viewer.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/macmade/DSStoreView\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ios\",\"parser\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a46\",\"name\":\"DTD Finder\",\"slug\":\"dtd-finder\",\"description\":\"List DTDs and generate XXE payloads using those local DTDs.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/GoSecure/dtd-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dtd\",\"payloads\",\"vulnerabilities\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a4b\",\"name\":\"DVCA\",\"slug\":\"dvca\",\"description\":\"Damn vulnerable cloud application.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/m6a-UdS/dvca\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"training\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e3\",\"name\":\"DVCS-Pillage\",\"slug\":\"dvcs-pillage\",\"description\":\"Dump web accessible (distributed) version control systems (DVCS/VCS): GIT, Mercurial/hg, Bazaar/bzr, â¦\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/evilpacket/DVCS-Pillage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dvcs\",\"vcs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e8\",\"name\":\"DVGA\",\"slug\":\"dvga\",\"description\":\"Damn Vulnerable GraphQL Application, insecure webapp for GraphQL security trainings\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e7\",\"name\":\"DVIA\",\"slug\":\"dvia\",\"description\":\"Damn Vulnerable iOS App, insecure webapp for mobile security trainings\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/prateek147/DVIA-v2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a4e\",\"name\":\"DVRF\",\"slug\":\"dvrf\",\"description\":\"The Damn Vulnerable Router Firmware project.\",\"category\":\"network\",\"source\":\"https://github.com/praetorian-inc/DVRF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"firmware\",\"resources\",\"router\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e9\",\"name\":\"DVWA\",\"slug\":\"dvwa\",\"description\":\"Damn Vulnerable Web Application, insecure webapp for security trainings\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/ethicalhack3r/DVWA\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a4f\",\"name\":\"DVWA\",\"slug\":\"dvwa\",\"description\":\"Damn Vulnerable Web Application.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/digininja/DVWA\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fileupload\",\"learning\",\"resources\",\"sqli\",\"training\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a50\",\"name\":\"DVWS\",\"slug\":\"dvws\",\"description\":\"Vulnerable application with a web service and an API.\",\"category\":\"development\",\"source\":\"https://github.com/snoopysecurity/dvws-node\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"training\",\"vulnerabilities\",\"
99webservices\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a4d\",\"name\":\"DVenom\",\"slug\":\"dvenom\",\"description\":\"Helps to bypass antiviruses by providing an encryption wrapper and loader for your shellcode.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/Zerx0r/dvenom\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"antivirus\",\"encryption\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ea\",\"name\":\"DalFox\",\"slug\":\"dalfox\",\"description\":\"Powerful open source XSS scanning tool and parameter analyzer.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/hahwul/dalfox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d8\",\"name\":\"Dalfox\",\"slug\":\"dalfox\",\"description\":\"XSS scanner and utility focused on automation\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/hahwul/dalfox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539eb\",\"name\":\"Damn Vulnerable Bank\",\"slug\":\"damn-vulnerable-bank\",\"description\":\"A vulnerable Android application with an interface to test your mobile hacking skills.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/rewanthtammana/Damn-Vulnerable-Bank\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"mobile\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ec\",\"name\":\"Damn Vulnerable RESTaurant\",\"slug\":\"damn-vulnerable-restaurant\",\"description\":\"An intentionally vulnerable web API game for learning and training purposes.\",\"category\":\"resources\",\"source\":\"https://github.com/theowni/Damn-Vulnerable-RESTaurant-API-Game\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"learning\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ed\",\"name\":\"Dangerous Methods\",\"slug\":\"dangerous-methods\",\"description\":\"A Burp Suite extension for finding the use of potentially dangerous methods/functions.\",\"category\":\"development\",\"source\":\"https://gitlab.com/solomonsklash/dangerous-methods\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"angular\",\"burpsuite\",\"javascript\",\"jquery\",\"react\",\"vuejs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ea\",\"name\":\"Darkshot\",\"slug\":\"darkshot\",\"description\":\"Lightshot scraper with multi-threaded OCR and auto categorizing screenshots\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/mxrch/darkshot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ee\",\"name\":\"Dastardly Scan Action\",\"slug\":\"dastardly-scan-action\",\"description\":\"Runs a scan using Dastardly by Burp Suite against a target site and generates a report.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/PortSwigger/dastardly-github-action\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"reports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ef\",\"name\":\"DataExtractor\",\"slug\":\"dataextractor\",\"description\":\"A Burp Suite extension to extract data from source code while browsing.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gwen001/DataExtractor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"endpoints\",\"regexp\",\"secrets\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b2\",\"name\":\"Dawnscanner\",\"slug\":\"dawnscanner\",\"description\":\"Sstatic analysis security scanner for ruby written web applications; supports Sinatra, Padrino and Ruby on Rails frameworks\",\"category\":\"code-analysis\",\"source\":\"https://github.com/thesp0nge/dawnscanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5967d\",\"name\":\"DbgShell\",\"slug\":\"dbgshell\",\"description\":\"Front-end for the Windows debugger engine\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/Microsoft/DbgShell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59803\",\"name\":\"Dcode\",\"slug\":\"dcode\",\"description\":\"Code and decode all kind of checksums, algorithms, codes or ciphers\",\"category\":\"cryptography\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f1\",\"name\":\"De4py\",\"slug\":\"de4py\",\"description\":\"toolkit for python reverse engineering.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Fadi002/de4py\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"python\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f9\",\"name\":\"DeHashed\",\"slug\":\"dehashed\",\"description\":\"DeHashed provides free deep-web scans and protection against credential leaks.\",\"category\":\"cryptanalysis\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hash\",\"leaks\",\"online\",\"passwords\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59716\",\"name\":\"DeHashed\",\"slug\":\"dehashed\",\"description\":\"Service to check if an account has been compromised in a data breach\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"leak\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ed\",\"name\":\"DeadTrap\",\"slug\":\"deadtrap\",\"description\":\"Track down footprints of a phone number\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Chr0m0s0m3s/DeadTrapv2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5967f\",\"name\":\"Decompiler Explorer\",\"slug\":\"decompiler-explorer\",\"description\":\"Multi-decompiler engine; supports angr, BinaryNinja, Boomerang, dewolf, Ghidra, Hex-Rays, RecStudio, Reko, Relyze, RetDec, Snowman\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/decompiler-explorer/decompiler-explorer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5967e\",\"name\":\"Decompiler.com\",\"slug\":\"decompilercom\",\"description\":\"C#, Python, Android and Java online decompiler\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f3\",\"name\":\"Decompilers online\",\"slug\":\"decompilers-online\",\"description\":\"Free, accessible, and platform-independent decompilation service.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"apk\",\"codeanalysis\",\"decompiler\",\"java\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f4\",\"name\":\"DeepSecrets\",\"slug\":\"deepsecrets\",\"description\":\"Secrets scanner that understands code.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ntoskernel/deepsecrets\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f5\",\"name\":\"Default Credentials Cheat Sheet\",\"slug\":\"default-credentials-cheat-sheet\",\"description\":\"One place for all the default credentials to assist on finding devices with default password.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ihebski/DefaultCreds-cheat-sheet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f7\",\"name\":\"DefaultPassword\",\"slug\":\"defaultpassword\",\"description\":\"Default passwords database sorted by manufacturers.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59554\",\"name\":\"DefectDojo\",\"slug\":\"defectdojo\",\"description\":\"Vulnerability management application built for DevOps and continuous security integration\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/DefectDojo/django-DefectDojo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59680\",\"name\":\"Defuse online disassembler\",\"slug\":\"defuse-online-disassembler\",\"description\":\"Online x86 (32/64 bits) assembler and disassembler\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5949b\",\"name\":\"DejaVU\",\"slug\":\"dejavu\",\"description\":\"Deception framework which can be used to deploy decoys across the infrastru
99cture\",\"category\":\"honeypot-and-decoy\",\"source\":\"https://github.com/bhdresh/Dejavu\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539fa\",\"name\":\"Demiguise\",\"slug\":\"demiguise\",\"description\":\"HTA encryption tool for Red Teams.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/nccgroup/demiguise\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cryptography\",\"evasion\",\"hta\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e3\",\"name\":\"Deming\",\"slug\":\"deming\",\"description\":\"Management tool for the information security management system (ISMS); manage, plan, track and report the effectiveness of security controls\",\"category\":\"defensive\",\"source\":\"https://github.com/dbarzin/deming\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"iso 27001\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539fc\",\"name\":\"DependencyCheck\",\"slug\":\"dependencycheck\",\"description\":\"Utility that detects publicly disclosed vulnerabilities in application dependencies.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/jeremylong/DependencyCheck\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"dependencies\",\"reports\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539fd\",\"name\":\"Depix\",\"slug\":\"depix\",\"description\":\"Recovers passwords from pixelized screenshots.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/spipm/Depixelization_poc\",\"review_youtube_id\":\"a_F_jfcD6lQ\",\"sponsorship_level\":0,\"keywords\":[\"encryption\",\"images\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59675\",\"name\":\"Dexcalibur\",\"slug\":\"dexcalibur\",\"description\":\"Android reverse engineering platform focus on instrumentation automation (decompile/disass intercepted bytecode at runtime, write hook code, search interesting pattern\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/FrenchYeti/dexcalibur\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a06\",\"name\":\"DirBuster\",\"slug\":\"dirbuster\",\"description\":\"Multi threaded application to brute force directories and files names on web/application servers.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"directories\",\"files\",\"recon\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a0a\",\"name\":\"DirSearch (Golang)\",\"slug\":\"godirsearch\",\"description\":\"A Go implementation of dirsearch.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/evilsocket/dirsearch\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a05\",\"name\":\"Dirb\",\"slug\":\"dirb\",\"description\":\"Web Fuzzer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/v0re/dirb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a0b\",\"name\":\"Dirstalk\",\"slug\":\"dirstalk\",\"description\":\"Multi threaded application designed to brute force paths on web servers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/stefanoj3/dirstalk\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a0d\",\"name\":\"Dismap\",\"slug\":\"dismap\",\"description\":\"Asset discovery and identification tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/zhzyker/dismap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a0e\",\"name\":\"Dispatch\",\"slug\":\"dispatch\",\"description\":\"All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/Netflix/dispat
99ch\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"defense\",\"jira\",\"organizer\",\"slack\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a10\",\"name\":\"Distribute Damage\",\"slug\":\"distribute-damage\",\"description\":\"Evenly distributes scanner load across targets.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/distribute-damage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a11\",\"name\":\"DivideAndScan\",\"slug\":\"divideandscan\",\"description\":\"Divide full port scan results and use it for targeted Nmap runs.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/snovvcrash/DivideAndScan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"nmap\",\"ports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59769\",\"name\":\"DnsFookup\",\"slug\":\"dnsfookup\",\"description\":\"Create DNS request collector and inspector\",\"category\":\"networking\",\"source\":\"https://github.com/makuga01/dnsFookup\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a30\",\"name\":\"DomLink\",\"slug\":\"domlink\",\"description\":\"Link a domain with registered organisation names and emails, to other domains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/vysecurity/DomLink\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"companies\",\"domains\",\"emails\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a2a\",\"name\":\"Domain Analyzer\",\"slug\":\"domain-analyzer\",\"description\":\"Analyze the security of any domain by finding all the information possible. Made in python.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/eldraco/domain_analyzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"dns\",\"endpoints\",\"ips\",\"ports\",\"reports\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a2b\",\"name\":\"Domain Hunter\",\"slug\":\"domain-hunter\",\"description\":\"Checks expired domains to determine good candidates for phishing and C2 domain names.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/threatexpress/domainhunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f4\",\"name\":\"Domainim\",\"slug\":\"domainim\",\"description\":\"Domain reconnaissance for organizational network scanning\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/pptx704/domainim\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"vhost\",\"subdomain\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a2f\",\"name\":\"Dome\",\"slug\":\"dome\",\"description\":\"Script that makes active and/or passive scan to obtain subdomains and search for open ports.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/v4d1/Dome\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"ports\",\"recon\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59620\",\"name\":\"DonPAPI\",\"slug\":\"donpapi\",\"description\":\"Dumping DPAPI credentials remotely; dumps relevant information on compromised targets without AV detection\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/login-securite/DonPAPI\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"password\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a33\",\"name\":\"Donut\",\"slug\":\"donut\",\"description\":\"Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files.\",\"category\":\"development\",\"source\":\"https://github.com/TheWover/donut\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dotnet\",\"memory\",\"payloads\",\"shell\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5958a\",\"name\":\"Donut\",\"slug\":\"donut\",\"description\":\"Generates x86_32, x86_64, or AMD64 position-independent shellcode that loads .NET Assemblies, PE files (EXE), VBScript, JScript, and DLL files from memory and runs them with parameters\",\"category\":\"red-teaming\",\"source\":\"https://github.com/TheWover/donut\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"anti-virus\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a34\",\"name\":\"Dork Search Files\",\"slug\":\"dork-search-files\",\"description\":\"Advanced Google searches using dorks to locate specific files on the internet.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/100security/dsf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"dorks\",\"google\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a35\",\"name\":\"DorkGPT\",\"slug\":\"dorkgpt\",\"description\":\"Generate Google dorks with AI.\",\"category\":\"cloud-services\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dorks\",\"google\",\"gpt\",\"online\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593de\",\"name\":\"DotDotPwn\",\"slug\":\"dotdotpwn\",\"description\":\"Directory Traversal fuzzer\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/wireghoul/dotdotpwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a38\",\"name\":\"DotDotPwn\",\"slug\":\"dotdotpwn\",\"description\":\"The Directory Traversal Fuzzer.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/wireghoul/dotdotpwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"lfi\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a39\",\"name\":\"DotGit\",\"slug\":\"dotgit\",\"description\":\"An extension for checking if .git is exposed in visited
99websites.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/davtur19/DotGit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"firefox\",\"git\",\"github\",\"gitlab\",\"mercurial\",\"svn\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593df\",\"name\":\"DotGit\",\"slug\":\"dotgit\",\"description\":\"Web browser extension (Firefox and CHromium) checking if .git is exposed in visited websites\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/davtur19/DotGit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59718\",\"name\":\"DoubleTap\",\"slug\":\"doubletap\",\"description\":\"Headless browser in order to load pages and execute JavaScript that often generates things like dynamic nonces that validate the page was actually rendered by a human for password spraying\",\"category\":\"other\",\"source\":\"https://github.com/audibleblink/DoubleTap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a3a\",\"name\":\"Dradis\",\"slug\":\"dradis\",\"description\":\"Collaboration and reporting for infosec teams made simple.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"collaboration\",\"organizer\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59555\",\"name\":\"Dradis CE\",\"slug\":\"dradis-ce\",\"description\":\"Dradis is an open-source reporting and collaboration tool trusted by 1,000s of InfoSec professionals around the world.\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/dradis/dradis-ce\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59556\",\"name\":\"Dradis Pro\",\"slug\":\"dradis-pro\",\"description\":\"Collaborative penetration test, vulnerability database and reporting platform; Pro edition\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a3d\",\"name\":\"DripLoader\",\"slug\":\"driploader\",\"description\":\"Evasive shellcode loader for bypassing injection detection.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/xuanxuan0/DripLoader\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"exploits\",\"shell\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59687\",\"name\":\"DroidGuard VM Samples\",\"slug\":\"droidguard-vm-samples\",\"description\":\"Different versions of the DroidGuard VM as well as different version of the bytecode running through this VM\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/romainthomas/droidguard-samples\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59686\",\"name\":\"Droidefense\",\"slug\":\"droidefense\",\"description\":\"Android apps/malware analysis/reversing tool\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/droidefense/engine\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a3e\",\"name\":\"DroneSploit\",\"slug\":\"dronesploit\",\"description\":\"Drone pentesting framework console.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/dhondta/dronesploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"drone\",\"exploits\",\"framework\",\"iot\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a41\",\"name\":\"Drupwn\",\"slug\":\"drupwn\",\"description\":\"Drupal enumeration \u0026 exploitation tool.\",\"category\":\"cms\",\"source\":\"https://github.com/immunIT/drupwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"drupal\",\"exploits\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a42\",\"name\":\"Dshell\",\"slug\":\"dshell\",\"description\":\"A network forensic analysis framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/USArmyResearchLab/Dshell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"forensic\",\"framework\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a49\",\"name\":\"Dumpert\",\"slug\":\"dumpert\",\"description\":\"LSASS memory dumper using direct system calls and API unhooking.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/outflanknl/Dumpert\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"lsass\",\"memory\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a4a\",\"name\":\"DumpsterDiver\",\"slug\":\"dumpsterdiver\",\"description\":\"Tool to search secrets in various filetypes.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/securing/DumpsterDiver\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"passwords\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d9\",\"name\":\"Duplicut\",\"slug\":\"duplicut\",\"description\":\"Remove duplicates from massive wordlist, without sorting it (for dictionary-based password cracking)\",\"category\":\"cracking\",\"source\":\"https://github.com/nil0x42/duplicut\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a53\",\"name\":\"EAPHammer\",\"slug\":\"eaphammer\",\"description\":\"Targeted attacks against WPA2-Enterprise networks, wireless pivots using hostile portal attacks.\",\"category\":\"network\",\"source\":\"https://github.com/s0lst1c3/eaphammer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\",\"wpa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a55\",\"name\":\"EDD\",\"slug\":\"edd\",\"description\":\"Ultimate domain enumeration tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/FortyNorthSecurity/EDD\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"enumeration\",\"users\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5958b\",\"name\":\"EDRSilencer\",\"slug\":\"edrsilencer\",\"description\":\"Uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server\",\"category\":\"red-teaming\",\"source\":\"https://github.com/netero1010/EDRSilencer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"anti-virus\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a58\",\"name\":\"EMBA\",\"slug\":\"emba\",\"description\":\"The security analyzer for firmware of embedded devices.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/e-m-b-a/emba\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"firmware\",\"iot\",\"linux\",\"sbom\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59689\",\"name\":\"EMBA\",\"slug\":\"emba\",\"description\":\"Security analyzer for firmware of embedded devices\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/e-m-b-a/emba\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c4\",\"name\":\"EML analyzer\",\"slug\":\"eml-analyzer\",\"description\":\"Analyze E
99ML files: headers, bodies, attachments; extract IOCs; identify suspicious attachments\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/ninoseki/eml_analyzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a51\",\"name\":\"Eagle\",\"slug\":\"eagle\",\"description\":\"Vulnerability scanner for mass detection of web-based applications vulnerabilities.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/BitTheByte/Eagle\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f5\",\"name\":\"EagleEye\",\"slug\":\"eagleeye\",\"description\":\"Image recognition on instagram, facebook and twitter\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/ThoughtfulDev/EagleEye\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a52\",\"name\":\"EagleEye\",\"slug\":\"eagleeye\",\"description\":\"Stalk your friends on social media using image recognition and reverse image search.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/ThoughtfulDev/EagleEye\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"facebook\",\"images\",\"instagram\",\"osint\",\"socialnetworks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a54\",\"name\":\"EarlyBird\",\"slug\":\"earlybird\",\"description\":\"Sensitive data detection tool capable of scanning source code repositories.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/americanexpress/earlybird\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"pii\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59557\",\"name\":\"Echidna\",\"slug\":\"echidna\",\"description\":\"Collaborative penetration test platform; terminal sharing, target information extraction, command suggestion, exploit searching, chatting, graph visualization\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/Echidna-Pentest/Echidna\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a59\",\"name\":\"Empire\",\"slug\":\"empire\",\"description\":\"Post-exploitation and adversary emulation framework that is used to aid Red Teams and pentesters.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/BC-SECURITY/Empire\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"framework\",\"postexploitation\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59621\",\"name\":\"Empire\",\"slug\":\"empire\",\"description\":\"PowerShell and Python post-exploitation agent\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/EmpireProject/Empire\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59622\",\"name\":\"Empire GUI\",\"slug\":\"empire-gui\",\"description\":\"GUI for Empire framework\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/EmpireProject/Empire-GUI\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a5c\",\"name\":\"EndPointer\",\"slug\":\"endpointer\",\"description\":\"An extension that auto extracts URLs from the current webpage and JS files.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/AtlasWiki/EndPointer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"endpoints\",\"firefox\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e5\",\"name\":\"Enemies Of Symfony\",\"slug\":\"enemies-of-symfony\",\"description\":\"Loots information from a Symfony target using profiler\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/synacktiv/eos\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59495\",\"name\":\"Enki\",\"slug\":\"enki\",\"description\":\"Crisis management platform\",\"category\":\"crisis-management\",\"source\":\"https://github.com/entrepreneur-interet-general/enki\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a5d\",\"name\":\"Enlightn\",\"slug\":\"enlightn\",\"description\":\"Your performance \u0026 security consultant, an artisan command away.\",\"category\":\"development\",\"source\":\"https://github.com/enlightn/enlightn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"framework\",\"laravel\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"68836950e1b1f64f22d1e501\",\"name\":\"EsPReSSO (SSO extension for Burp Suite)\",\"slug\":\"espresso-sso-extension-for-burp-suite\",\"description\":\"The extension is based on the BurpSSO E
99xtension, developed by the Chair of Network and Data Security, Ruhr University Bochum and the Hackmanit GmbH. The extension is part of a bachelor thesis by Tim Guenther at the Ruhr-University Bochum in cooperation with Context Information Security Ltd..\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/RUB-NDS/BurpSSOExtension\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f6\",\"name\":\"Espionage\",\"slug\":\"espionage\",\"description\":\"Domain information gathering: whois, history, dns records, web technologies, records\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/iAbdullahMughal/espionage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a62\",\"name\":\"Ettercap\",\"slug\":\"ettercap\",\"description\":\"Free and open source network security tool for man-in-the-middle attacks on a LAN.\",\"category\":\"network\",\"source\":\"https://github.com/Ettercap/ettercap/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bluetooth\",\"mitm\",\"network\",\"sniffer\",\"wifi\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a63\",\"name\":\"Evil SQL Client\",\"slug\":\"evil-sql-client\",\"description\":\"Interactive .NET SQL console client with enhanced SQL Server discovery/access/exfiltration features.\",\"category\":\"databases\",\"source\":\"https://github.com/NetSPI/ESC\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dotnet\",\"exploits\",\"mssql\",\"scanner\",\"shell\",\"sqli\",\"sqlserver\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5976b\",\"name\":\"Evil-WinRM\",\"slug\":\"evil-winrm\",\"description\":\"Enhanced WinRM shell\",\"category\":\"networking\",\"source\":\"https://github.com/Hackplayers/evil-winrm\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a66\",\"name\":\"EvilClippy\",\"slug\":\"evilclippy\",\"description\":\"Create malicious MS Office documents to hide VBA macros, stomp VBA code.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/outflanknl/EvilClippy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"microsoft\",\"office\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a67\",\"name\":\"Evilginx3\",\"slug\":\"evilginx3\",\"description\":\"Standalone MITM attack framework allowing for the bypass of 2-factor authentication.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/kgretzky/evilginx2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"2fa\",\"framework\",\"mitm\",\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59605\",\"name\":\"ExifTool\",\"slug\":\"exiftool\",\"description\":\"Library and CLI tool to read and write meta information (EXIF, GPS, IPTC, XMP, JFIF, â¦) in files (JPEG, PNG, SVG, MPEG, â¦)\",\"category\":\"steganography\",\"source\":\"https://sourceforge.net/projects/exiftool/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a6a\",\"name\":\"ExifTool\",\"slug\":\"exiftool\",\"description\":\"ExifTool meta information reader/writer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/exiftool/exiftool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"metadata\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c5\",\"name\":\"ExifTool\",\"slug\":\"exiftool\",\"description\":\"Library and CLI tool for reading, writing and editing metadata for a lot of file types\",\"category\":\"digital-forensics\",\"source\":\"https://sourceforge.net/projects/exiftool/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59606\",\"name\":\"Exiv2\",\"slug\":\"exiv2\",\"description\":\"Library and CLI tool to read and write meta information (Exif, IPTC \u0026 XMP metadata and ICC Profile) in images (JPEG, TIFF, PNG, â¦)\",\"category\":\"steganography\",\"source\":\"https://github.com/Exiv2/exiv2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a6c\",\"name\":\"Exploitalert\",\"slug\":\"exploitalert\",\"description\":\"Exploits found on the INTERNET.\",\"category\":\"auth-perms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"resources\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5964f\",\"name\":\"Exporter\",\"slug\":\"exporter\",\"description\":\"Copies selected request(s) as cURL, wget, Python Request, Perl LWP, PHP HTTP_Request2, Go, NodeJS Request, jQuery AJAX, PowerShell, HTML Forms, Ruby Net::HTTP, JavaScript XHR invocations\",\"category\":\"plugins\",\"source\":\"https://github.com/artssec/burp-exporter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a6d\",\"name\":\"Extended SSRF search\",\"slug\":\"extended-ssrf-search\",\"description\":\"Smart SSRF scanner using different methods like parameter brute forcing in POST and GET.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Damian89/extended-ssrf-search\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"ssrf\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a6e\",\"name\":\"Extended XSS Searcher and Finder\",\"slug\":\"extended-xss-searcher-and-finder\",\"description\":\"Scans for different types of XSS on a list of urls.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Damian89/extended-xss-search\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a71\",\"name\":\"EyeSpy\",\"slug\":\"eyespy\",\"description\":\"Designed to enumerate and gain access to IP cameras via RTSP.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/Miiden/EyeSpy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cameras\",\"iot\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e7\",\"name\":\"EyeWitness\",\"slug\":\"eyewitness\",\"description\":\"Take screenshots of websites, provide some server header info, and identify default credentials if possible\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/FortyNorthSecurity/EyeWitness\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a72\",\"name\":\"EyeWitness\",\"slug\":\"eyewitness\",\"description\":\"Take screenshots of websites, provide server header info and identify default credentials.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/FortyNorthSecurity/EyeWitness\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"passwords\",\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a70\",\"name\":\"Eyeballer\",\"slug\":\"eyeballer\",\"description\":\"Convolutional neural network for analyzing pentest screenshots.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/BishopFox/eyeballer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e6\",\"name\":\"Eyeballer\",\"slug\":\"eyeballer\",\"description\":\"Convolutional neural network for analyzing pentest screenshots and automatically label them\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/BishopFox/eyeballer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5971b\",\"name\":\"F-Secure Identity Theft Checker\",\"slug\":\"f-secure-identity-theft-checker\",\"description\":\"Service to check if an account has been compromised in a data breach, send an email with the breaches not the password\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a7d\",\"name\":\"FDsploit\",\"slug\":\"fdsploit\",\"description\":\"File Inclusion \u0026 Directory Traversal fuzzing, enumeration \u0026 exploitation tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/chrispetrou/FDsploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"lfd\",\"lfi\",\"rfi\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59625\",\"name\":\"FFM\",\"slug\":\"ffm\",\"description\":\"Freedom Fighting Mode (FFM), hacking harness, post-exploitation tool\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/JusticeRage/FFM\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594fb\",\"name\":\"FOCA\",\"slug\":\"foca\",\"description\":\"O
99SINT framework and metadata analyser\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/ElevenPaths/FOCA\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a9a\",\"name\":\"FOCA\",\"slug\":\"foca\",\"description\":\"Tool to find metadata and hidden information in the documents.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ElevenPaths/FOCA\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"fingerprint\",\"metadata\",\"network\",\"osint\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ca\",\"name\":\"FTK Imager\",\"slug\":\"ftk-imager\",\"description\":\"Investigate electronic devices; full disk imaging capabilities: preview and image hard drives from Windows and Linux computers, CDs, DVDs, thumb drives, and other USB; forensic image mounting: mount an image for a read-only view that leverages file explorer; preview data; RAM capture\",\"category\":\"digital-forensics\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f8\",\"name\":\"Facebook_OSINT_Dump\",\"slug\":\"facebook_osint_dump\",\"description\":\"OSINT tool, facebook profile dumper, windows and chrome only\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/TheCyberViking/Facebook_OSINT_Dump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a74\",\"name\":\"FakeImageExploiter\",\"slug\":\"fakeimageexploiter\",\"description\":\"Use a Fake image.jpg to exploit targets (hide known file extensions).\",\"category\":\"auth-perms\",\"source\":\"https://github.com/r00t-3xp10it/FakeImageExploiter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"images\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e5\",\"name\":\"FalconHound\",\"slug\":\"falconhound\",\"description\":\"Plug BloodHound with a SIEM or other log aggregation\",\"category\":\"defensive\",\"source\":\"https://github.com/FalconForceTeam/FalconHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59559\",\"name\":\"Faraday\",\"slug\":\"faraday\",\"description\":\"Collaborative penetration test and reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/infobyte/faraday\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a76\",\"name\":\"Faraday security\",\"slug\":\"faraday-security\",\"description\":\"Open source sulnerability management and orchestration platform.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/infobyte/faraday\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"orchestration\",\"organizer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a77\",\"name\":\"FastFuzz Chrome Extension\",\"slug\":\"fastfuzz-chrome-extension\",\"description\":\"Site fast fuzzing with chorme extension.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/tismayil/fastfuz-chrome-ext\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e8\",\"name\":\"Fav-up\",\"slug\":\"fav-up\",\"description\":\"Favicon fingerprinting using Shodan\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/pielco11/fav-up\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloudflare\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e9\",\"name\":\"FavFreak\",\"slug\":\"favfreak\",\"description\":\"Favicon fingerprinting\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/devanshbatham/FavFreak\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a79\",\"name\":\"FavFreak\",\"slug\":\"favfreak\",\"description\":\"Making favicon.ico based recon great again.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/devanshbatham/FavFreak\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"favicon\",\"shodan\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593ea\",\"name\":\"Favinizer\",\"slug\":\"favinizer\",\"description\":\"Favicon fingerprinting\",\"category\":\"web-application-exploitation\",\"source\":\"https://web.archive.org/web/20230604114312/https://github.com/ARPSyndicate/favinizer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59804\",\"name\":\"FeatherDuster\",\"slug\":\"featherduster\",\"description\":\"Cryptanalysis tool and library\",\"category\":\"cryptography\",\"source\":\"https://github.com/nccgroup/featherduster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a7e\",\"name\":\"Femida\",\"slug\":\"femida\",\"description\":\"Automated blind-xss search for Burp Suite.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/wish-i-was/femida\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"oob\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f5\",\"name\":\"Fenrir\",\"slug\":\"fenrir\",\"description\":\"IOC scanner\",\"category\":\"incident-response\",\"source\":\"https://github.com/Neo23x0/Fenrir\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a7f\",\"name\":\"Feroxbuster\",\"slug\":\"feroxbuster\",\"description\":\"A fast, simple, recursive c
99ontent discovery tool written in Rust.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/epi052/feroxbuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\",\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a80\",\"name\":\"FestIN\",\"slug\":\"festin\",\"description\":\"The powered S3 bucket finder and content discover.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/cr0hn/festin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\",\"crawler\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c7\",\"name\":\"Fibratus\",\"slug\":\"fibratus\",\"description\":\"Tool for exploration and tracing of the Windows kernel\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/rabbitstack/fibratus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a84\",\"name\":\"Fiddler Everywhere\",\"slug\":\"fiddler-everywhere\",\"description\":\"Web debugging proxy for MacOS, Windows, and Linux.\",\"category\":\"network\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"http\",\"proxy\",\"requests\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a85\",\"name\":\"Fierce\",\"slug\":\"fierce\",\"description\":\"A DNS reconnaissance tool for locating non-contiguous IP space.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/mschwager/fierce\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"ips\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a86\",\"name\":\"FiercePhish\",\"slug\":\"fiercephish\",\"description\":\"Full-fledged phishing framework to manage all phishing engagements.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Raikia/FiercePhish\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"framework\",\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a87\",\"name\":\"Filebuster\",\"slug\":\"filebuster\",\"description\":\"An extremely fast and flexible web fuzzer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/henshin/filebuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\",\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a89\",\"name\":\"FinDOM-XSS\",\"slug\":\"findom-xss\",\"description\":\"A fast DOM based XSS vulnerability scanner with simplicity.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/dwisiswant0/findom-xss\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a88\",\"name\":\"FinalRecon\",\"slug\":\"finalrecon\",\"description\":\"All In One Web Recon.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/thewhiteh4t/FinalRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"dns\",\"endpoints\",\"ports\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f9\",\"name\":\"FinalRecon\",\"slug\":\"finalrecon\",\"description\":\"Web reconnaissance script\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/thewhiteh4t/FinalRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a8d\",\"name\":\"FindUncommonShares\",\"slug\":\"finduncommonshares\",\"description\":\"Quickly find uncommon shares in vast Windows domains.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/p0dalirius/FindUncommonShares\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"ldap\",\"samba\",\"shares\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594fa\",\"name\":\"Findomain\",\"slug\":\"findomain\",\"description\":\"Fast subdomain enumerator\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Edu4rdSHL/findomain\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a8a\",\"name\":\"Findomain\",\"slug\":\"findomain\",\"description\":\"The complete solution for domain recognition.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Findomain/Findomain\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ports\",\"screenshots\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a8c\",\"name\":\"Findsploit\",\"slug\":\"findsploit\",\"description\":\"Find exploits in local and online databases instantly.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/1N3/Findsploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593ed\",\"name\":\"Fingerprinter\",\"slug\":\"fingerprinter\",\"description\":\"CMS version detection tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/erwanlr/Fingerprinter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a8e\",\"name\":\"Fingerprinter\",\"slug\":\"fingerprinter\",\"description\":\"CMS/LMS/Library etc Versions Fingerprinter.\",\"category\":\"cms\",\"source\":\"https://github.com/erwanlr/Fingerprinter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"drupal\",\"fingerprint\",\"joomla\",\"recon\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a92\",\"name\":\"FireBounty\",\"slug\":\"firebounty\",\"description\":\"The ultimate Vulnerability Disclosure Policy and Bug Bounty list!\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"online\",\"resources\",\"yeswehack\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a94\",\"name\":\"FireShodanMap\",\"slug\":\"fireshodanmap\",\"description\":\"Realtime map that integrates Firebase, Google Maps and Shodan.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Warflop/FireShodanMap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"ports\",\"recon\",\"shodan\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a91\",\"name\":\"Firebase-Extractor\",\"slug\":\"firebase-extractor\",\"description\":\"A tool written in python for scraping firebase data.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/viperbluff/Firebase-Extractor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"firebase\",\"scraper\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a93\",\"name\":\"Firefly\",\"slug\":\"firefly\",\"description\":\"Black box fuzzer for web applications.\",\"category\":\"resources\",\"source\":\"https://github.com/Brum3ns/firefly\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"payloads\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593ee\",\"name\":\"Firefly\",\"slug\":\"firefly\",\"description\":\"Web directory and file scanner (wordlist bruteforce); but also a web fuzzer\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Brum3ns/firefly\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5971a\",\"name\":\"Firefox Monitor\",\"slug\":\"firefox-monitor\",\"description\":\"Service to check if an account has been compromised in a data breach, display the breaches not the password\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595db\",\"name\":\"Fitcrack\",\"slug\":\"fitcrack\",\"description\":\"Hashcat-based distributed password cracking system with WebUI\",\"category\":\"cracking\",\"source\":\"https://github.com/nesfit/fitcrack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5968a\",\"name\":\"Flare\",\"slug\":\"flare\",\"description\":\"Processes SWF and extract scripts from it\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593ef\",\"name\":\"Flask Session Cookie Decoder/Encoder\",\"slug\":\"flask-session-cookie-decoderencoder\",\"description\":\"A script that let you encode and decode a Flask session cookie\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/noraj/flask-se
99ssion-cookie-manager\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5968b\",\"name\":\"Flasm\",\"slug\":\"flasm\",\"description\":\"Disassembler tool for SWF bytecode\",\"category\":\"reverse-engineering\",\"source\":\"https://sourceforge.net/projects/flasm/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a96\",\"name\":\"Floss\",\"slug\":\"floss\",\"description\":\"Automatically extract obfuscated strings from malware.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/mandiant/flare-floss\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"malware\",\"obfuscation\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a97\",\"name\":\"Flow\",\"slug\":\"flow\",\"description\":\"Provides view with filtering capabilities for all requests from all Burp Suite tools.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/flow\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a98\",\"name\":\"FlowMate\",\"slug\":\"flowmate\",\"description\":\"A Burp Suite extension that brings taint analysis to web applications, by tracking all parameters.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/usdAG/FlowMate\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"parameters\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5968c\",\"name\":\"Flutter Spy\",\"slug\":\"flutter-spy\",\"description\":\"Explore, analyze, and gain valuable data \u0026 insights from reverse engineered Flutter apps\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/anasfik/flutter-spy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a99\",\"name\":\"Fluxion\",\"slug\":\"fluxion\",\"description\":\"Fluxion is the future of MITM WPA attacks.\",\"category\":\"network\",\"source\":\"https://github.com/FluxionNetwork/fluxion\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"mitm\",\"network\",\"wifi\",\"wpa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59812\",\"name\":\"Fluxion\",\"slug\":\"fluxion\",\"description\":\"MITM WPA attack tool\",\"category\":\"wireless\",\"source\":\"https://github.com/FluxionNetwork/fluxion\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f0\",\"name\":\"FockCache\",\"slug\":\"fockcache\",\"description\":\"Test Cache Poisoning\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/tismayil/fockcache\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c8\",\"name\":\"Foremost\",\"slug\":\"foremost\",\"description\":\"CLI tool to recover files based on their headers, footers, and internal data structures\",\"category\":\"digital-forensics\",\"source\":\"https://sourceforge.net/projects/foremost/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c9\",\"name\":\"ForensicMiner\",\"slug\":\"forensicminer\",\"description\":\"DFIR automation for collecting and analyzing evidence\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/securityjoes/ForensicMiner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a9c\",\"name\":\"Freddy Deserialization Bug Finder\",\"slug\":\"freddy-deserialization-bug-finder\",\"description\":\"A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/freddy-deserialization-bug-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"deserialization\",\"dotnet\",\"java\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a9d\",\"name\":\"Free Certifications\",\"slug\":\"free-certifications\",\"description\":\"A curated list of free courses \u0026 certifications.\",\"category\":\"resources\",\"source\":\"https://github.com/cloudcommunity/Free-Certifications\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"online\",\"resources\",\"videos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5958d\",\"name\":\"Freeze\",\"slug\":\"freeze\",\"description\":\"Payload creation tool used for circumventing EDR security controls to execute shellcode in a stealthy manner\",\"category\":\"red-teaming\",\"source\":\"https://github.com/optiv/Freeze\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a9e\",\"name\":\"Freeze-rs\",\"slug\":\"freeze-rs\",\"description\":\"Payload toolkit for bypassing EDRs using suspended processes, direct syscalls written.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/optiv/Freeze.rs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"edr\",\"payloads\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a9f\",\"name\":\"Fresh Resolvers\",\"slug\":\"fresh-resolvers\",\"description\":\"List of fresh DNS resolvers updated every 12h.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Findomain/fresh-resolvers\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"probing\",\"resources\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa0\",\"name\":\"Frida\",\"slug\":\"frida\",\"description\":\"Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/frida/frida\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"javascript\",\"mobile\",\"reverse-engineering\",\"toolkit\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5968d\",\"name\":\"Frida\",\"slug\":\"frida\",\"description\":\"Dynamic code instrumentation toolkit\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/frida/frida\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa1\",\"name\":\"FridaAndroidTracer\",\"slug\":\"fridaandroidtracer\",\"description\":\"Android application tracer powered by Frida.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/iGio90/FridaAndroidTracer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"frida\",\"mobile\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59813\",\"name\":\"FruityWiFi\",\"slug\":\"fruitywifi\",\"description\":\"W
99ireless network auditing tool controlled by a web interface\",\"category\":\"wireless\",\"source\":\"https://github.com/xtr4nge/FruityWifi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa2\",\"name\":\"FruityWifi\",\"slug\":\"fruitywifi\",\"description\":\"Wireless network auditing tool.\",\"category\":\"network\",\"source\":\"https://github.com/xtr4nge/FruityWifi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f1\",\"name\":\"Fuxi\",\"slug\":\"fuxi\",\"description\":\"Penetration testing platform, automate some scan \u0026 attack\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/jeffzh3ng/fuxi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa7\",\"name\":\"FuzzDB\",\"slug\":\"fuzzdb\",\"description\":\"Attack patterns and primitives for black-box application fault injection and resource discovery.\",\"category\":\"resources\",\"source\":\"https://github.com/fuzzdb-project/fuzzdb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"payloads\",\"resources\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f3\",\"name\":\"Fuzzapi\",\"slug\":\"fuzzapi\",\"description\":\"Web-UI for API-fuzzer\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Fuzzapi/API-fuzzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa6\",\"name\":\"Fuzzapi\",\"slug\":\"fuzzapi\",\"description\":\"Used for REST API pentesting and provide UI solution for gem.\",\"category\":\"development\",\"source\":\"https://github.com/Fuzzapi/fuzzapi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"fuzzing\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa8\",\"name\":\"Fuzzilli\",\"slug\":\"fuzzilli\",\"description\":\"A JavaScript Engine Fuzzer.\",\"category\":\"development\",\"source\":\"https://github.com/googleprojectzero/fuzzilli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"javascript\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aab\",\"name\":\"GAP\",\"slug\":\"gap\",\"description\":\"A Burp Suite extension to find potential endpoints and parameters.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/xnl-h4ck3r/GAP-Burp-Extension\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"endpoints\",\"parameters\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595dc\",\"name\":\"GAU\",\"slug\":\"gau\",\"description\":\"Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain\",\"category\":\"cracking\",\"source\":\"https://github.com/lc/gau\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab3\",\"name\":\"GCPBucketBrute\",\"slug\":\"gcpbucketbrute\",\"description\":\"Enumerate Google Storage buckets, check the access and if they can be privilege escalated.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/RhinoSecurityLabs/GCPBucketBrute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"buckets\",\"cloud\",\"google\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab4\",\"name\":\"GD-Thief\",\"slug\":\"gd-thief\",\"description\":\"Exfiltrate files from a target's Google Drive that you have access to, via Google's API.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/antman1p/GD-Thief\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"exfiltration\",\"google\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5968e\",\"name\":\"GDB\",\"slug\":\"gdb\",\"description\":\"GNU debugger\",\"category\":\"reverse-engineering\",\"source\":\"http://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59653\",\"name\":\"GEF\",\"slug\":\"gef\",\"description\":\"GDB Enhanced Features, multi-architecture\",\"category\":\"plugins\",\"source\":\"https://github.com/hugsy/gef\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab8\",\"name\":\"GET-ACQ\",\"slug\":\"get-acq\",\"description\":\"Gather all companies acquired by a given company domain name.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/HanibalAntePortas/get-acq\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59626\",\"name\":\"GH DLL Injector\",\"slug\":\"gh-dll-injector\",\"description\":\"DLL injection library supporting x86, WOW64 and x64 injections; 5 injection methods, 4 shellcode execution methods and various additional options; session separation can be bypassed with all methods\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/Broihon/GH-Injector-Library\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594fd\",\"name\":\"GHunt\",\"slug\":\"ghunt\",\"description\":\"Investigate Google accounts with emails and find name, usernames, Youtube Channel, probable location, Maps reviews, etc.\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/mxrch/GHunt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"emails\",\"google\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5971d\",\"name\":\"GOAD\",\"slug\":\"goad\",\"description\":\"Game Of Active Directory is a test environment lab that includes all the common vulnerabilities of an active directory\",\"category\":\"other\",\"source\":\"https://github.com/Orange-Cyberdefense/GOAD\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ansible\",\"vagrant\",\"ad\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053add\",\"name\":\"GOAD\",\"slug\":\"goad\",\"description\":\"Game of Active Directory.\",\"category\":\"resources\",\"source\":\"https://github.com/Orange-Cyberdefense/GOAD\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"resources\",\"training\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af0\",\"name\":\"GPT_Vuln-Analyzer\",\"slug\":\"gpt_vuln-analyzer\",\"description\":\"A powerful network scanner, DNS recon, subdomain enumeration and IP Geolocator tool powered by GPT.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/morpheuslord/GPT_Vuln-analyzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"geolocation\",\"gpt\",\"network\",\"recon\",\"scanner\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053afe\",\"name\":\"GRecon\",\"slug\":\"grecon\",\"description\":\"Run a Google based passive recon against your scope.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/TebbaaX/GRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"google\",\"subdomains\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b03\",\"name\":\"GSAN\",\"slug\":\"gsan\",\"description\":\"Extract subdomains from SSL certificates in HTTPS sites.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/franccesco/getaltname\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"dns\",\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b05\",\"name\":\"GSIL\",\"slug\":\"gsil\",\"description\":\"GitHub Sensitive Information Leakage.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/FeeiCN/GSIL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"scanner\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b06\",\"name\":\"GTFOArgs\",\"slug\":\"gtfoargs\",\"description\":\"Unix binaries that can be manipulated for argument injection.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/GTFOArgs
99/GTFOArgs.github.io\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"linux\",\"privesc\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59720\",\"name\":\"GTFOBLookup\",\"slug\":\"gtfoblookup\",\"description\":\"CLI for earching gtfobins and lolbas from the terminal; allows more advanced search than gtfo\",\"category\":\"other\",\"source\":\"https://github.com/nccgroup/GTFOBLookup\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b07\",\"name\":\"GTFOBins\",\"slug\":\"gtfobins.github.io\",\"description\":\"Unix binaries that can be used to bypass local security restrictions in misconfigured systems.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/GTFOBins/GTFOBins.github.io\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"linux\",\"privesc\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b08\",\"name\":\"GTFONow\",\"slug\":\"gtfonow\",\"description\":\"Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Frissi0n/GTFONow\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linux\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a2\",\"name\":\"GVM\",\"slug\":\"gvm\",\"description\":\"The Greenbone Vulnerability Management (GVM) is a framework of several services: gvmd is the central service that consolidates plain vulnerability scanning into a full vulnerability management solution. The Greenbone Security Assistant (GSA) is the web interface of GVM. The main scanner (OpenVAS) is a full-featured scan engine that executes a continuously updated and extended feed of Network Vulnerability Tests (NVTs). Complementary to the web interface, GVM-Tools allows batch processing / scripting via the Greenbone Management Protocol (GMP). Additional scanners can be integrated via the Open Scanner Protocol (OSP)\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/greenbone/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aaa\",\"name\":\"GadgetProbe\",\"slug\":\"gadgetprobe\",\"description\":\"Probe endpoints consuming Java serialized objects for fingerprinting.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/BishopFox/GadgetProbe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"deserialization\",\"endpoints\",\"fingerprint\",\"java\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5949c\",\"name\":\"Galah\",\"slug\":\"galah\",\"description\":\"LLM-powered web honeypot using the OpenAI API\",\"category\":\"honeypot-and-decoy\",\"source\":\"https://github.com/0x4D31/galah\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5976d\",\"name\":\"Garfield\",\"slug\":\"garfield\",\"description\":\"Attack framework for distributed systems\",\"category\":\"networking\",\"source\":\"https://github.com/torque59/Garfield\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aac\",\"name\":\"Gatekeeper\",\"slug\":\"gatekeeper\",\"description\":\"Policy controller for Kubernetes.\",\"category\":\"virtualization\",\"source\":\"https://github.com/open-policy-agent/gatekeeper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"kubernetes\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aaf\",\"name\":\"GatherContacts\",\"slug\":\"gathercontacts\",\"description\":\"Burp Suite extension to pull employee names from Google and Bing LinkedIn search results.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/clr2of8/GatherContacts\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"google\",\"linkedin\",\"osint\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a1b36ea84bce7ed4b14b105\",\"name\":\"Gau\",\"slug\":\"gau\",\"description\":\"Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/lc/gau\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"alienvault\",\"gau\",\"hacktoberfest\",\"security\",\"wayback-machine\",\"fetch\",\"known\",\"urls\",\"o
99pen\",\"threat\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab6\",\"name\":\"Genzai\",\"slug\":\"genzai\",\"description\":\"Helps to identify IoT related dashboards and scan them for default passwords.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/umair9747/Genzai\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"iot\",\"passwords\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab7\",\"name\":\"GeoWordlists\",\"slug\":\"geowordlists\",\"description\":\"Generate wordlists of passwords containing cities at a defined distance around the client city.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/p0dalirius/GeoWordlists\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"geolocation\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595dd\",\"name\":\"GeoWordlists\",\"slug\":\"geowordlists\",\"description\":\"Generate wordlists of passwords containing cities at a defined distance around the client city\",\"category\":\"cracking\",\"source\":\"https://github.com/p0dalirius/GeoWordlists\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594fc\",\"name\":\"Geolocation Estimation\",\"slug\":\"geolocation-estimation\",\"description\":\"Automatic GEOINT using deep learning\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053abd\",\"name\":\"Ghauri\",\"slug\":\"ghauri\",\"description\":\"Automates the process of detecting and exploiting SQL injection security flaws.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/r0oth3x49/ghauri\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"sqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f4\",\"name\":\"Ghauri\",\"slug\":\"ghauri\",\"description\":\"Automatic SQL injection and database takeover; inspired by SQLmap\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/r0oth3x49/ghauri\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5968f\",\"name\":\"Ghidra\",\"slug\":\"ghidra\",\"description\":\"Software reverse engineering (SRE) suite of tools: disassembly, assembly, decompilation, graphing, scripting, etc.\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/NationalSecurityAgency/ghidra\",\"review_youtube_id\":\"-RSxMWa2pCU\",\"sponsorship_level\":0,\"keywords\":[\"disassembler\",\"reverse-engineering\",\"software-analysis\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ac0\",\"name\":\"GhostTrack\",\"slug\":\"ghosttrack\",\"description\":\"Useful tool to track location or mobile number.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/HunxByts/GhostTrack\",\"review_youtube_id\":\"lowoB5qn9xQ\",\"sponsorship_level\":0,\"keywords\":[\"geolocation\",\"osint\",\"phones\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053abf\",\"name\":\"Ghostbuster\",\"slug\":\"ghostbuster\",\"description\":\"Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/assetnote/ghostbuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"dns\",\"ips\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5955a\",\"name\":\"Ghostwriter\",\"slug\":\"ghostwriter\",\"description\":\"Project management and reporting engine\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/GhostManager/Ghostwriter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5976e\",\"name\":\"Girsh\",\"slug\":\"girsh\",\"description\":\"Detect the OS and execute the correct commands to upgrade it to a full interactive reverse shell\",\"category\":\"networking\",\"source\":\"https://github.com/nodauf/Girsh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594fe\",\"name\":\"GitFive\",\"slug\":\"gitfive\",\"description\":\"Investigate GitHub profiles; features: username history, email address to GitHub account, finds potential secondary GitHub accounts, dumps SSH public keys, etc.\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/mxrch/GitFive\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ac7\",\"name\":\"GitFive\",\"slug\":\"gitfive\",\"description\":\"An OSINT tool to investigate GitHub profiles.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/mxrch/GitFive\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"github\",\"osint\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ac8\",\"name\":\"GitGot\",\"slug\":\"gitgot\",\"description\":\"Rapidly search through troves of public data on GitHub for sensitive secrets.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/BishopFox/GitGot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aca\",\"name\":\"GitHacker\",\"slug\":\"githacker\",\"description\":\"A Git source leak exploit tool that restores the entire Git repository, including data from stash.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/blackhatethicalhacking/githacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"exploits\",\"git\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053acb\",\"name\":\"GitHarvester\",\"slug\":\"githarvester\",\"description\":\"Tool used for harvesting information from GitHub.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/metac0rtex/GitHarvester\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59500\",\"name\":\"GitHound\",\"slug\":\"githound\",\"description\":\"Find sensitive information in git repositories\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/tillson/git-hound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053acf\",\"name\":\"GitHunter\",\"slug\":\"githunter\",\"description\":\"A tool for searching a Git repository for interesting content.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/digininja/GitHunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"git\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad3\",\"name\":\"GitMiner\",\"slug\":\"gitminer\",\"description\":\"Tool for advanced mining for content on Github.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/UnkL4b/GitMiner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad7\",\"name\":\"GitTools\",\"slug\":\"gittools\",\"description\":\"A repository with 3 tools for pwn'ing websites with .git repositories available.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/internetwache/GitTools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"git\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f7\",\"name\":\"GitTools\",\"slug\":\"gittools\",\"description\":\"3 tools: Finder (find websites with .git repository exposed), Dumper (dump exposed .git), Extractor (extract commits and their content from a broken repository)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/internetwache/GitTools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dvcs\",\"vcs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad5\",\"name\":\"Gitrob\",\"slug\":\"gitrob\",\"description\":\"Reconnaissance tool for GitHub organizations.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/michenriksen/gitrob\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"github\",\"osint\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5976f\",\"name\":\"Go-RouterSocks\",\"slug\":\"go-routersocks\",\"description\":\"Socks proxy router to handle multi-clients on the same port\",\"category\":\"networking\",\"source\":\"https://github.com/nodauf/Go-RouterSocks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"pivoting\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053adc\",\"name\":\"Go365\",\"slug\":\"go365\",\"description\":\"Go365 performs user enumeration and password guessing attacks on organizations that use Office365.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/optiv/Go365\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"enumeration\",\"o365\",\"office\",\"passwords\",\"users\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59590\",\"name\":\"Go365\",\"slug\":\"go365\",\"description\":\"User enumeration and password guessing for Office 365 / Microsoft365\",\"category\":\"red-teaming\",\"source\":\"https://github.com/optiv/Go365\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"outlook\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ade\",\"name\":\"GoAltdns\",\"slug\":\"goaltdns\",\"description\":\"A permutation generation tool written in golang.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/subfinder/goaltdns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae1\",\"name\":\"GoCloud\",\"slug\":\"gocloud\",\"description\":\"Checks whether a domain is hosted on a cloud service.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/MantisSTS/GoCloud\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"cloudflare\",\"
99ips\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595de\",\"name\":\"GoCrack\",\"slug\":\"gocrack\",\"description\":\"Management frontend for hash cracking tools, supporting hashcat\",\"category\":\"cracking\",\"source\":\"https://github.com/fireeye/gocrack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gui\",\"hashcat\",\"crack\",\"hash\",\"password\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae4\",\"name\":\"GoLinkFinder\",\"slug\":\"golinkfinder\",\"description\":\"A fast and minimal JS endpoint extractor.\",\"category\":\"development\",\"source\":\"https://github.com/0xsha/GoLinkFinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"javascript\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59772\",\"name\":\"GoMapEnum\",\"slug\":\"gomapenum\",\"description\":\"User enumeration and password bruteforce on Azure, ADFS, OWA, O365 and gather emails on Linkedin\",\"category\":\"networking\",\"source\":\"https://github.com/nodauf/GoMapEnum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae8\",\"name\":\"GoPhish\",\"slug\":\"gophish\",\"description\":\"Open-source phishing toolkit.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gophish/gophish\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"phishing\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59504\",\"name\":\"GoSeek\",\"slug\":\"goseek\",\"description\":\"Username lookup comparable to Maigret/Sherlock, IP Lookup, License Plate \u0026 VIN Lookup, Info Cull, and Fake Identity Generator\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/audioo/goseek\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a1b35bb4cbcd18374fc9fbf\",\"name\":\"Gobuster\",\"slug\":\"gobuster\",\"description\":\"Directory/File, DNS and VHost busting tool written in Go\",\"category\":\"reconnaissance\",\"source\":\"https://github.com/OJ/gobuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f8\",\"name\":\"Gobuster\",\"slug\":\"gobuster\",\"description\":\"Directory/File, DNS and VHost busting tool written in Go\",\"category\":\"reconnaissance\",\"source\":\"https://github.com/OJ/gobuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"go\",\"pentesting\",\"tool\",\"web\",\"gobuster\",\"directory\",\"file\",\"vhost\",\"busting\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053adf\",\"name\":\"Gobuster\",\"slug\":\"gobuster,endpoints\",\"description\":\"Directory/File, DNS and VHost busting tool written in Go.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/OJ/gobuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae0\",\"name\":\"Goby\",\"slug\":\"goby\",\"description\":\"Network security technology that achieves rapid security emergency.\",\"category\":\"auth-perms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"cves\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae3\",\"name\":\"GodPotato\",\"slug\":\"godpotato\",\"description\":\"Privilege escalation tool for Windows.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/BeichenDream/GodPotato\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5971e\",\"name\":\"Godehashed\",\"slug\":\"godehashed\",\"description\":\"Uses the dehashed.com API to search for compromised assets\",\"category\":\"other\",\"source\":\"https://github.com/an00byss/godehashed\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59771\",\"name\":\"GoldenCopy\",\"slug\":\"goldencopy\",\"description\":\"Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket\",\"category\":\"networking\",\"source\":\"https://github.com/Dramelac/Golde
99nCopy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"active directory\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59502\",\"name\":\"GooFuzz\",\"slug\":\"goofuzz\",\"description\":\"Passive reconaissance enumerating directories, files, subdomains or parameters using google dorks\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/m3n0sd0n4ld/GooFuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59628\",\"name\":\"GoodHound\",\"slug\":\"goodhound\",\"description\":\"Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/idnahacks/GoodHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ea\",\"name\":\"Google Gruyere\",\"slug\":\"google-gruyere\",\"description\":\"Codelab for white-box and black-box hacking\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"http://google-gruyere.appspot.com/code/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae5\",\"name\":\"Google Recaptcha Solver\",\"slug\":\"google-recaptcha-solver\",\"description\":\"Solve Google reCAPTCHA in less than 5 seconds!\",\"category\":\"cloud-services\",\"source\":\"https://github.com/sarperavci/GoogleRecaptchaBypass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"captcha\",\"google\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593fb\",\"name\":\"Gopherus\",\"slug\":\"gopherus\",\"description\":\"Generates gopher link for exploiting SSRF and gaining RCE access from unprotected services\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/tarunkant/Gopherus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae7\",\"name\":\"Gopherus\",\"slug\":\"gopherus\",\"description\":\"Generates gopher link for exploiting SSRF and gaining RCE in various servers.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/tarunkant/Gopherus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"rce\",\"shell\",\"ssrf\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5958f\",\"name\":\"Gophish\",\"slug\":\"gophish\",\"description\":\"Phishing toolkit providing the ability to setup and execute phishing engagements and security awareness training\",\"category\":\"red-teaming\",\"source\":\"https://github.com/gophish/gophish\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59503\",\"name\":\"Gorecon\",\"slug\":\"gorecon\",\"description\":\"Reconnaissance toolkit\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/devanshbatham/Gorecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aeb\",\"name\":\"Gorsair\",\"slug\":\"gorsair\",\"description\":\"Gives root access on remote docker containers that expose their APIs.\",\"category\":\"virtualization\",\"source\":\"https://github.com/Ullaakut/Gorsair\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"containers\",\"docker\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aee\",\"name\":\"Gowhois\",\"slug\":\"gowhois\",\"description\":\"Whois command implemented by golang with awesome whois servers list.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/famasoon/gowhois\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"osint\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593fd\",\"name\":\"GraphCrawler\",\"slug\":\"graphcrawler\",\"description\":\"GraphQL automated security testing\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/gsmith257-cyber/GraphCrawler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59401\",\"name\":\"GraphMan\",\"slug\":\"graphman\",\"description\":\"Scaffold a postman collection for a GraphQL API; compatible with Postman and Insomnia\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Escape-Technologies/graphman\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e6\",\"name\":\"GraphQL Armor\",\"slug\":\"graphql-armor\",\"description\":\"GraphQL security layer for Apollo and Yoga / Envelop servers\",\"category\":\"defensive\",\"source\":\"https://github.com/Escape-Technologies/graphql-armor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af5\",\"name\":\"GraphQL Beautifier\",\"slug\":\"graphql-beautifier\",\"description\":\"Burp Suite extension to help make Graphql request more readable.\",\"category\":\"databases\",\"source\":\"https://github.com/zidekmat/graphql_beautifier\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59402\",\"name\":\"GraphQL Cop\",\"slug\":\"graphql-cop\",\"description\":\"Run common security tests against GraphQL\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/dolevf/graphql-cop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af6\",\"name\":\"GraphQL Threat Matrix\",\"slug\":\"graphql-threat-matrix\",\"description\":\"Threat framework to research security gaps in GraphQL implementations.\",\"category\":\"databases\",\"source\":\"https://github.com/nicholasaleks/graphql-threat-matrix\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59400\",\"name\":\"GraphQL Voyager\",\"slug\":\"graphql-voyager\",\"description\":\"Represent any GraphQL API as an interactive graph\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/IvanGoncharov/graphql-voyager\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"69bdaffcfb04a2261820f8a8\",\"name\":\"GraphQLer\",\"slug\":\"graphqler\",\"description\":\"Context-aware GraphQL Fuzzer\",\"category\":\"fuzzing\",\"source\":\"https://github.com/omar2535/GraphQLer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053afb\",\"name\":\"GraphQLmap\",\"slug\":\"graphqlmap\",\"description\":\"Scripting engine to interact with a graphql endpoint for pentesting purposes.\",\"category\":\"databases\",\"source\":\"https://github.com/swisskyrepo/GraphQLmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59405\",\"name\":\"GraphQLmap\",\"slug\":\"graphqlmap\",\"description\":\"Scripting engine to interact with a graphql endpoint for pentesting purposes\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/swisskyrepo/GraphQLmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593fe\",\"name\":\"Graphicator\",\"slug\":\"graphicator\",\"description\":\"GraphQL enumeration and extraction\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/cybervelia/graphicator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af3\",\"name\":\"Graphicator\",\"slug\":\"graphicator\",\"description\":\"Enumerate and extract GraphQL APIs.\",\"category\":\"databases\",\"source\":\"https://github.com/cybervelia/graphicator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593ff\",\"name\":\"Graphinder\",\"slug\":\"graphinder\",\"description\":\"GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Escape-Technologies/graphinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af4\",\"name\":\"Graphpython\",\"slug\":\"graphpython\",\"description\":\"Modular cross-platform Microsoft Graph API enumeration and exploitation toolkit.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/mlcsec/Graphpython\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"enumeration\",\"microsoft\",\"o365\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053afd\",\"name\":\"GrayhatWarfare\",\"slug\":\"grayhatwarfare\",\"description\":\"Search for buckets and URL shorteners.\",\"category\":\"cloud-services\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"buckets\",\"cloud\",\"digitalocean\",\"endpoints\",\"google\",\"online\",\"shorteners\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aff\",\"name\":\"Grendel-Scan\",\"slug\":\"grendel-scan\",\"description\":\"A tool for automated security scanning of web applications.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/IFGHou/Grendel-Scan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b01\",\"name\":\"Ground control\",\"slug\":\"ground-control\",\"description\":\"A collection of scripts mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/jobertabma/ground-control\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"debug\",\"ssrf\",\"vulnerabilities\",\"xss\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59774\",\"name\":\"Group3r\",\"slug\":\"group3r\",\"description\":\"Enumerate relevant settings in AD Group Policy, identify exploitable misconfigurations\",\"category\":\"networking\",\"source\":\"https://github.com/Group3r/Group3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gpo\",\"dc\",\"sysvol\",\"acl\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b04\",\"name\":\"Gsec\",\"slug\":\"gsec\",\"description\":\"Web security scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gotr00t0day/Gsec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"dns\",\"ports\",\"scanner\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59407\",\"name\":\"Guppy Proxy\",\"slug\":\"guppy-proxy\",\"description\":\"GUI HTTP intercepting proxy based on Pappy Proxy\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/roglew/guppy-proxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b0a\",\"name\":\"GyoiThon\",\"slug\":\"gyoithon\",\"description\":\"Growing penetration test tool using Machine Learning.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/gyoisamurai/GyoiThon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"crawler\",\"dorks\",\"exploits\",\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b0b\",\"name\":\"H1 Report Finder\",\"slug\":\"h1-report-finder\",\"description\":\"A burpsuite extension to find security reports published on HackerOne based on the selected host.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/v1ll41n/H1-Report-Finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"hackerone\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b1a\",\"name\":\"HAITI\",\"slug\":\"haiti\",\"description\":\"Hash type identifier.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/noraj/haiti\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"encoding\",\"encryption\",\"hash\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b28\",\"name\":\"HARpwn\",\"slug\":\"harpwn\",\"description\":\"Designed to streamline the extraction and sanitization of HARTokens from HTTP archives.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/HCRitter/HARpwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"archives\",\"har\",\"http\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59775\",\"name\":\"HASSH\",\"slug\":\"hassh\",\"description\":\"Network fingerprinting standard which can be used to identify specific client and server SSH implementations\",\"category\":\"networking\",\"source\":\"https://github.com/salesforce/hassh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b33\",\"name\":\"HBSQLI\",\"slug\":\"hbsqli\",\"description\":\"Automated tool for testing header based blind SQL injection.\",\"category\":\"network\",\"source\":\"https://github.com/SAPT01/HBSQLI\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"headers\",\"payloads\",\"sqli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b37\",\"name\":\"HEKATOMB\",\"slug\":\"hekatomb\",\"description\":\"Connects to LDAP directory to retrieve all computers and users informations.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Processus-Thief/HEKATOMB\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"enumeration\",\"ldap\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59776\",\"name\":\"HEKATOMB\",\"slug\":\"hekatomb\",\"description\":\"Retrieve all computers and users informations from AD LDAP; download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them\",\"category\":\"networking\",\"source\":\"https://github.com/Processus-Thief/HEKATOMB\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b43\",\"name\":\"HTSHELLS\",\"slug\":\"htshells\",\"description\":\"Self contained web shells and other attacks via .htaccess files.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/wireghoul/htshells\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"apache\",\"exploits\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b44\",\"name\":\"HTTP Request Smuggler\",\"slug\":\"http-request-smuggler\",\"description\":\"Extension for Burp Suite designed to help you launch HTTP Request Smuggling attacks.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/PortSwigger/http-request-smuggler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"hrs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b46\",\"name\":\"HTTP-revshell\",\"slug\":\"http-revshell\",\"description\":\"Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware.\",\"category\":\"development\",\"source\":\"https://github.com/3v4si0n/http-revshell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"powershell\",\"shell\",\"windows\"],\"usedInR
99eports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b47\",\"name\":\"HTTP-traceroute\",\"slug\":\"http-traceroute\",\"description\":\"HTTP-traceroute in Go.\",\"category\":\"network\",\"source\":\"https://github.com/PaulSec/HTTP-traceroute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"network\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5977a\",\"name\":\"HTTPRebind\",\"slug\":\"httprebind\",\"description\":\"Automatic DNS rebinding-based SSRF attacks\",\"category\":\"networking\",\"source\":\"https://github.com/daeken/httprebind\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b48\",\"name\":\"HTTPoxy Scanner\",\"slug\":\"httpoxy-scanner\",\"description\":\"A Burp Suite extension that checks for the HTTPoxy vulnerability.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/httpoxy-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5940e\",\"name\":\"HUNT\",\"slug\":\"hunt\",\"description\":\"HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/bugcrowd/HUNT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b0f\",\"name\":\"Hack The Box\",\"slug\":\"hack-the-box\",\"description\":\"Massive hacking playground, and infosec community.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"online\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b11\",\"name\":\"HackBrowserData\",\"slug\":\"hackbrowserdata\",\"description\":\"Decrypt passwords/cookies/history/bookmarks from the browser.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/moonD4rk/HackBrowserData\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"cookies\",\"passwords\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59721\",\"name\":\"HackTools\",\"slug\":\"hacktools\",\"description\":\"Web browser extension (Chromium, Firefox, Safari) including common functions for web pentest\",\"category\":\"other\",\"source\":\"https://github.com/LasCC/Hack-Tools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b16\",\"name\":\"HackTools\",\"slug\":\"hacktools\",\"description\":\"The all-in-one browser extension for offensive security professionals.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/LasCC/HackTools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b17\",\"name\":\"HackTricks\",\"slug\":\"hacktricks\",\"description\":\"Find trick/technique/whatever learnt from CTFs, real life apps, reading researches, and news.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"online\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b10\",\"name\":\"Hackability\",\"slug\":\"hackability\",\"description\":\"Probe a rendering engine for vulnerabilities and other features.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/PortSwigger/hackability\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"fingerprint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596eb\",\"name\":\"Hackazon\",\"slug\":\"hackazon\",\"description\":\"Intentionally vulnerable web shopping application using modern technologies and containing configurable areas\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/rapid7/hackazon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b12\",\"name\":\"Hacker101\",\"slug\":\"hacker101\",\"description\":\"A free class for web security.\",\"category\":\"resources\",\"source\":\"https://github.com/Hacker0x01/hacker101\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hackerone\",\"learning\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b13\",\"name\":\"HackerSploit\",\"slug\":\"hackersploit\",\"description\":\"HackerSploit YouTube channel.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hackers\",\"learning\",\"training\",\"videos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594dd\",\"name\":\"Hackerone::Client\",\"slug\":\"hackeroneclient\",\"description\":\"A limited client library for interacting with HackerOne\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/oreoshake/hackerone-client\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"library\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b14\",\"name\":\"HackingHub\",\"slug\":\"hackinghub\",\"description\":\"Join the front line of the internet, learn applicable cyber security skills.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"online\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b15\",\"name\":\"Hackingtool\",\"slug\":\"hackingtool\",\"description\":\"ALL IN ONE Hacking Tool For Hackers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Z4nzu/hackingtool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"exploits\",\"framework\",\"network\",\"osint\",\"payloads\",\"secrets\",\"sqli\",\"subdomains\",\"wifi\",\"wordlists\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5955c\",\"name\":\"Hackuity\",\"slug\":\"hackuity\",\"description\":\"Risk Based Vulnerablity Management platform\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b18\",\"name\":\"Hackvertor\",\"slug\":\"hackvertor\",\"description\":\"Tag based conversion tool written in Java implemented as a Burp Suite extension.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/hackvertor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59592\",\"name\":\"Hades\",\"slug\":\"hades\",\"description\":\"Shellcode loader that c
99ombines multiple evasion techniques with the aim of bypassing the defensive mechanisms commonly used by modern AV/EDRs\",\"category\":\"red-teaming\",\"source\":\"https://github.com/f1zm0/hades\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"anti-virus\",\"bypass\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b19\",\"name\":\"Hades\",\"slug\":\"hades\",\"description\":\"Go shellcode loader that combines multiple evasion techniques.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/f1zm0/hades\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"evasion\",\"exploits\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59593\",\"name\":\"Hades C2\",\"slug\":\"hades-c2\",\"description\":\"Basic Command and Control server\",\"category\":\"red-teaming\",\"source\":\"https://github.com/Lavender-exe/Hades-C2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59805\",\"name\":\"Haiti\",\"slug\":\"haiti\",\"description\":\"Hash type identifier (CLI \u0026 lib)\",\"category\":\"cryptography\",\"source\":\"https://github.com/noraj/haiti\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b23\",\"name\":\"Hamburglar\",\"slug\":\"hamburglar\",\"description\":\"Collect useful information from urls, directories, and files.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/needmorecowbell/Hamburglar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"emails\",\"endpoints\",\"files\",\"git\",\"regexp\",\"secrets\",\"web3\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b26\",\"name\":\"HardHat C2\",\"slug\":\"hardhat-c2\",\"description\":\"A cross-platform, collaborative, Command \u0026 Control framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/DragoQCC/HardHatC2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"framework\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59594\",\"name\":\"HardHat C2\",\"slug\":\"hardhat-c2\",\"description\":\"Cross-platform, collaborative, Command \u0026 Control framework\",\"category\":\"red-teaming\",\"source\":\"https://github.com/DragoQCC/HardHatC2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b25\",\"name\":\"HardeningKitty\",\"slug\":\"hardeningkitty\",\"description\":\"Checks and hardens your Windows configuration.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/scipag/HardeningKitty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"reports\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59507\",\"name\":\"Harpoon\",\"slug\":\"harpoon\",\"description\":\"CLI tool; collect data and document actively or passively\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Te-k/harpoon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b2c\",\"name\":\"HasMySecretLeaked\",\"slug\":\"hasmysecretleaked\",\"description\":\"Search across 20 million exposed secrets in public GitHub repositories, gists, issues and comments.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"credentials\",\"github\",\"leaks\",\"passwords\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b29\",\"name\":\"Hash Buster\",\"slug\":\"hash-buster\",\"description\":\"Crack hashes in seconds.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/s0md3v/Hash-Buster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b2a\",\"name\":\"Hash Muncher\",\"slug\":\"hash-muncher\",\"description\":\"Grab NetNTLMv2 hashes using ETW with administrative rights on Windows.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/lkarlslund/hashmuncher\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ntlm\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e2\",\"name\":\"HashKitty\",\"slug\":\"hashkitty\",\"description\":\"Web interface for Hashcat\",\"category\":\"cracking\",\"source\":\"https://github.com/ScriptSathi/HashKitty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e0\",\"name\":\"Hashcat\",\"slug\":\"hashcat\",\"description\":\"Hash cracking tool and World's fastest and most advanced password recovery utility\",\"category\":\"cracking\",\"source\":\"https://github.com/hashcat/hashcat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"password\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e3\",\"name\":\"Hashpass\",\"slug\":\"hashpass\",\"description\":\"Hashcat WebUI; queuing, local authentication, SMS and email notifications, map integration\",\"category\":\"cracking\",\"source\":\"https://github.com/dj-zombie/hashpass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"password\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e4\",\"name\":\"Hashtopolis\",\"slug\":\"hashtopolis\",\"description\":\"Hashcat wrapper for distributed hashcracking\",\"category\":\"cracking\",\"source\":\"https://github.com/s3inlc/hashtopolis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gui\",\"hashcat\",\"crack\",\"hash\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e5\",\"name\":\"Hashview\",\"slug\":\"hashview\",\"description\":\"Web-UI for managing, organizing, automating Hashcat commands/tasks\",\"category\":\"cracking\",\"source\":\"https://github.com/hashview/hashview\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gui\",\"hashcat\",\"crack\",\"hash\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e7\",\"name\":\"Have I Been Squatted? - Twistr\",\"slug\":\"have-i-been-squatted-twistr\",\"description\":\"Generate all permutations of a domain which are enriched for typosquatting detection\",\"category\":\"defensive\",\"source\":\"https://github.com/haveibeensquatted/twistrs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59722\",\"name\":\"Have I been pwned?\",\"slug\":\"have-i-been-pwned\",\"description\":\"Service to check if an account has been compromised in a data breach, display the breaches not the password\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b2e\",\"name\":\"Have i been pwned?\",\"slug\":\"have-i-been-pwned\",\"description\":\"Check if your email or phone is in a data breach.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leaks\",\"online\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59595\",\"name\":\"Havoc\",\"slug\":\"havoc\",\"description\":\"Malleable post-exploitation command and control framework\",\"category\":\"red-teaming\",\"source\":\"https://github.com/HavocFramework/Havoc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b2f\",\"name\":\"Havoc\",\"slug\":\"havoc\",\"description\":\"Modern and malleable post-exploitation command and control framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/HavocFramework/Havoc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"framework\",\"postexploitation\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b30\",\"name\":\"Hawk\",\"slug\":\"hawk\",\"description\":\"Network, recon and offensive-security tool for Linux.\",\"category\":\"network\",\"source\":\"https://github.com/medpaf/hawk\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"spoofing\",\"tcp\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b31\",\"name\":\"Hawkeye\",\"slug\":\"hawkeye\",\"description\":\"Filesystem analysis tool/directory looking for interesting stuff.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Ice3man543/hawkeye\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backups\",\"exploits\",\"files\",\"logs\",\"privesc\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"687a64143573978c5280b624\",\"name\":\"HaxHQ\",\"slug\":\"haxhq\",\"description\":\"Do more with less effort\\nWhether you do pentesting, vulnerabillity scanning or a custom mix of the two, don't waste your time on repetitive work\",\"category\":\"collaboration-and-report\",\"source\":\"https://git.mitev.net/nik/haxhq\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b32\",\"name\":\"Haylxon\",\"slug\":\"haylxon\",\"description\":\"Blazing-fast tool to grab screenshots of your domain list right from terminal.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/pwnwriter/haylxon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"recon\",\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b36\",\"name\":\"Headless Burp\",\"slug\":\"headless-burp\",\"description\":\"Provides a suite of extensions and a maven plugin to automate security tests using Burp Suite.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/headless-burp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59777\",\"name\":\"HellRaiser\",\"slug\":\"hellraiser\",\"description\":\"Scan with nmap to correlate CPE's found with cve-search to enumerate vulnerabilities\",\"category\":\"networking\",\"source\":\"https://github.com/m0nad/HellRaiser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59409\",\"name\":\"Hetty\",\"slug\":\"hetty\",\"description\":\"HTTP toolkit for security research; alternative to BurpSuite\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/dstotijn/hetty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a71ffa173c20e34de7a6a5a\",\"name\":\"Hexstrike-ai\",\"slug\":\"hexstrike-ai\",\"description\":\"HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs
99with real-world offensive security capabilities.\",\"category\":\"ai-mcp-servers\",\"source\":\"https://github.com/0x4m4/hexstrike-ai\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"0x4m4\",\"ai\",\"ai-agents\",\"ai-cybersecurity\",\"ai-hacking\",\"ai-penetration-testing\",\"ai-security-tool\",\"artificial-intelligence\",\"ctf-tools\",\"generative-ai\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59723\",\"name\":\"HiddenWall\",\"slug\":\"hiddenwall\",\"description\":\"Linux kernel module generator for custom rules with netfilter\",\"category\":\"other\",\"source\":\"https://github.com/CoolerVoid/HiddenWall\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"firewall\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59690\",\"name\":\"Hiew\",\"slug\":\"hiew\",\"description\":\"x86_64 disassembler for multiple formats\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b39\",\"name\":\"Highlighter and Extractor\",\"slug\":\"highlighter-and-extractor\",\"description\":\"Collect, categorize and highlight requests and/or responses according to their content.\",\"category\":\"network\",\"source\":\"https://github.com/PortSwigger/highlighter-and-extractor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"regexp\",\"requests\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59814\",\"name\":\"Hijacker\",\"slug\":\"hijacker\",\"description\":\"Android GUI for Aircrack, Airodump, Aireplay, MDK3 and Reaver\",\"category\":\"wireless\",\"source\":\"https://github.com/chrisk44/Hijacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b3a\",\"name\":\"Hijacker\",\"slug\":\"hijacker\",\"description\":\"GUI for the penetration testing tools Aircrack-ng, Airodump-ng, MDK3 and Reaver.\",\"category\":\"network\",\"source\":\"https://github.com/chrisk44/Hijacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\",\"wpa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59778\",\"name\":\"HivExcavator\",\"slug\":\"hivexcavator\",\"description\":\"Extracting the contents of Microsoft Windows Registry (hive) and display it as a colorful tree but mainly focused on parsing BCD files to extract WIM files path for PXE attacks\",\"category\":\"networking\",\"source\":\"https://github.com/Acceis/hivexcavator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5955d\",\"name\":\"Hive\",\"slug\":\"hive\",\"description\":\"Collaborative penetration test and reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b3d\",\"name\":\"Hollows Hunter\",\"slug\":\"hollows_hunter\",\"description\":\"Scans processes to detect and dump potentially malicious implants.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/hasherezade/hollows_hunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"forensic\",\"malware\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59691\",\"name\":\"Honggfuzz\",\"slug\":\"honggfuzz\",\"description\":\"Security oriented software fuzzer; supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/google/honggfuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5940a\",\"name\":\"Hookbin\",\"slug\":\"hookbin\",\"description\":\"HTTP request collector and inspector\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/ssteveli/hookbin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59650\",\"name\":\"HopLa\",\"slug\":\"hopla\",\"description\":\"Adds autocompletion support and useful payloads in Burp Suite\",\"category\":\"plugins\",\"source\":\"https://github.com/synacktiv/HopLa\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59692\",\"name\":\"Hopper\",\"slug\":\"hopper\",\"description\":\"Disassembler, decompiler and debugger\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b3f\",\"name\":\"HostileSubBruteforcer\",\"slug\":\"hostilesubbruteforcer\",\"description\":\"Bruteforce existing subdomains and provide informations about them.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/nahamsec/HostileSubBruteforcer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"subdomains\",\"subto\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59725\",\"name\":\"HoundSploit\",\"slug\":\"houndsploit\",\"description\":\"Graphical search engine for Exploit-DB\",\"category\":\"other\",\"source\":\"https://github.com/nicolas-carolo/houndsploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b40\",\"name\":\"House\",\"slug\":\"house\",\"description\":\"A runtime mobile application analysis toolkit with a Web GUI.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/nccgroup/house\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"frida\",\"mobile\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59509\",\"name\":\"Hunt3r\",\"slug\":\"hunt3r\",\"description\":\"Automatic domain recognition (via amass) and vulnerability scan (via nuclei) platform with a WebUI\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/EasyRecon/Hunt3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b4e\",\"name\":\"Hydra\",\"slug\":\"hydra\",\"description\":\"Very fast password cracking tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/vanhauser-thc/thc-hydra\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"passwords\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5977b\",\"name\":\"Hydra\",\"slug\":\"hydra\",\"description\":\"Network login cracker\",\"category\":\"networking\",\"source\":\"https://github.com/vanhauser-thc/thc-hydra\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59652\",\"name\":\"Hyperpwn\",\"slug\":\"hy
99perpwn\",\"description\":\"Improve the display when debugging with GDB, needs GEF, pwndbg or peda to be loaded in GDB as a backend\",\"category\":\"plugins\",\"source\":\"https://github.com/bet4it/hyperpwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b4f\",\"name\":\"IAMagic\",\"slug\":\"iamagic\",\"description\":\"Advanced AWS access credentials scanner.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Pyr0sec/IAMagic\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"credentials\",\"iam\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59693\",\"name\":\"IDA Pro\",\"slug\":\"ida-pro\",\"description\":\"Disassembler and debugger\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b51\",\"name\":\"IDontSpeakSSL\",\"slug\":\"idontspeakssl\",\"description\":\"Simple tool to scan large scope and provide SSL/TLS vulnerabilities.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/BishopFox/IDontSpeakSSL-deprecated\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"ssl\",\"tls\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59654\",\"name\":\"IIS Tilde Enumeration Scanner\",\"slug\":\"iis-tilde-enumeration-scanner\",\"description\":\"Check for the IIS tilde enumeration / IIS 8.3 short filename disclosure vulnerability and to exploit it by enumerating all the short names in an IIS web server\",\"category\":\"plugins\",\"source\":\"https://github.com/cyberaz0r/Burp-IISTildeEnumerationScanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59694\",\"name\":\"ILSpy\",\"slug\":\"ilspy\",\"description\":\".NET assembly browser and decompiler to C#\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/icsharpcode/ILSpy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b54\",\"name\":\"ILSpy\",\"slug\":\"ilspy\",\"description\":\"NET Decompiler with support for PDB generation, ReadyToRun, Metadata (\u0026more) - cross-platform!.\",\"category\":\"development\",\"source\":\"https://github.com/icsharpcode/ILSpy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"decompiler\",\"dotnet\",\"metadata\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b6e\",\"name\":\"IPFuscator\",\"slug\":\"ipfuscator\",\"description\":\"A tool to automatically generate alternative IP representations.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/vysecurity/IPFuscator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"ips\",\"obfuscation\",\"ssrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b6f\",\"name\":\"IPRotate\",\"slug\":\"iprotate\",\"description\":\"Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/PortSwigger/ip-rotate\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"burpsuite\",\"firewall\",\"ips\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f7\",\"name\":\"IRIS\",\"slug\":\"iris\",\"description\":\"Collaborative platform aiming to help incident responders sharing technical details during investigations\",\"category\":\"incident-response\",\"source\":\"https://github.com/dfir-iris/iris-web\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b72\",\"name\":\"IVRE\",\"slug\":\"ivre\",\"description\":\"Network recon framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ivre/ivre\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"scanner\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5950b\",\"name\":\"IVRE\",\"slug\":\"ivre\",\"description\":\"IVRE (Instrument de veille sur les réseaux extérieurs) or DRUNK (Dynamic Recon of UNKnown networks); network recon framework including tools ofr passive and active recon\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/cea-sec/ivre\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5977c\",\"name\":\"Ica2Tcp\",\"slug\":\"ica2tcp\",\"description\":\"SOCKS proxy for Citrix\",\"category\":\"networking\",\"source\":\"https://github.com/synacktiv/ica2tcp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59726\",\"name\":\"Identity Leak Checker\",\"slug\":\"identity-leak-checker\",\"description\":\"Service to check if an account has been compromised in a data breach, send the breaches by email\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5950a\",\"name\":\"Ignorant\",\"slug\":\"ignorant\",\"description\":\"Check if a phone number is used on different sites like snapchat, instagram\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/megadose/ignorant\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59695\",\"name\":\"ImHex\",\"slug\":\"imhex\",\"description\":\"Hexadecimal editor tailored for reverse engineers; byte patching, data import / export, data inspector, huge file support, file hashing, disassembler for many architectures, data analyzer\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/WerWolv/ImHex\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sast\",\"pattern\",\"disassembler\",\"yara\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b55\",\"name\":\"ImHex\",\"slug\":\"imhex\",\"description\":\"Hex editor for reverse engineers, programmers and people who value their retinas when working at 3am.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/WerWolv/ImHex\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"disassembler\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59607\",\"name\":\"ImageMagick\",\"slug\":\"imagemagick\",\"description\":\"Software suite and library to create, edit, compose, or convert images\",\"category\":\"steganography\",\"source\":\"http://git.imagemagick.org/repos/ImageMagick\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e8\",\"name\":\"Imagemagick Security Policy Evaluator\",\"slug\":\"imagemagick-security-policy-evaluator\",\"description\":\"Allows developers and security experts to check if an Imagemagick XML Security Policy is hardened against a wide set of malicious attacks\",\"category\":\"defensive\",\"source\":\"https://github.com/doyensec/imagemagick-security-policy-evaluator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59696\",\"name\":\"ImmunityDbg\",\"slug\":\"immunitydbg\",\"description\":\"W
99indows debugger with Python scripting support\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5977d\",\"name\":\"ImproHound\",\"slug\":\"improhound\",\"description\":\"Identify the attack paths in BloodHound breaking AD tiering\",\"category\":\"networking\",\"source\":\"https://github.com/improsec/ImproHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5940f\",\"name\":\"InQL\",\"slug\":\"inql\",\"description\":\"GraphQL security audit\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/doyensec/inql\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b5d\",\"name\":\"InQL\",\"slug\":\"inql\",\"description\":\"Burp Extension for GraphQL Security Testing.\",\"category\":\"databases\",\"source\":\"https://github.com/doyensec/inql\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"graphql\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b57\",\"name\":\"Infection Monkey\",\"slug\":\"infection-monkey\",\"description\":\"Test a data center's resiliency to perimeter breaches and internal server infection.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/guardicore/monkey\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"passwords\",\"protocols\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d2\",\"name\":\"Infection Monkey\",\"slug\":\"infection-monkey\",\"description\":\"Adversary emulation platform; test a data center's resiliency to perimeter breaches and internal server infection\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/guardicore/monkey\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59815\",\"name\":\"Infernal-Wireless\",\"slug\":\"infernal-wireless\",\"description\":\"Automated wireless hacking tool \",\"category\":\"wireless\",\"source\":\"https://github.com/entropy1337/infernal-twin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b59\",\"name\":\"Infoga\",\"slug\":\"infoga\",\"description\":\"Email OSINT.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/m4ll0k/Infoga\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"enumeration\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f3\",\"name\":\"Iniscan\",\"slug\":\"iniscan\",\"description\":\"php.ini scanner for security best practices\",\"category\":\"configuration-audit\",\"source\":\"https://github.com/psecio/iniscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b5b\",\"name\":\"Injectify\",\"slug\":\"injectify\",\"description\":\"Perform advanced MiTM attacks on websites with ease.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/samdenty/injectify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"javascript\",\"mitm\",\"shell\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b5c\",\"name\":\"Injectus\",\"slug\":\"injectus\",\"description\":\"CRLF and open redirect fuzzer.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/dubs3c/Injectus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crlf\",\"fuzzing\",\"openredirect\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b5e\",\"name\":\"InsiderPhD\",\"slug\":\"insiderphd\",\"description\":\"InsiderPhD Youtube channel.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"hackers\",\"learning\",\"videos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b5f\",\"name\":\"Inspeckage\",\"slug\":\"inspeckage\",\"description\":\"Android package inspector.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/ac-pm/Inspeckage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"frida\",\"mobile\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f6\",\"name\":\"IntelMQ\",\"slug\":\"intelmq\",\"description\":\"Solution for collecting and processing security feeds using a message queuing protocol\",\"category\":\"incident-response\",\"source\":\"https://github.com/certtools/intelmq\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b60\",\"name\":\"IntelOwl\",\"slug\":\"intelowl\",\"description\":\"Manage your threat intelligence at scale.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/intelowlproject/IntelOwl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"framework\",\"ips\",\"malware\",\"osint\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b61\",\"name\":\"IntelSpy\",\"slug\":\"intelspy\",\"description\":\"Perform automated network reconnaissance scans to gather network intelligence.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/maldevel/intelspy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"ips\",\"ports\",\"probing\",\"recon\",\"reports\",\"scanner\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59411\",\"name\":\"Interactsh\",\"slug\":\"interactsh\",\"description\":\"HTTP request collector and inspector; OOB interaction gathering server and client library; DNS / HTTP / SMTP interaction support\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/projectdiscovery/interactsh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b63\",\"name\":\"Interlace\",\"slug\":\"interlace\",\"description\":\"Turn single threaded command line applications into a fast, multi-threaded application.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/codingo/Interlace\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59728\",\"name\":\"Interlace\",\"slug\":\"interlace\",\"description\":\"Turn single threaded command line applications into a multi-threaded application with CIDR and glob support\",\"category\":\"other\",\"source\":\"https://github.com/codingo/Interlace\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59410\",\"name\":\"Intrigue Core\",\"slug\":\"intrigue-core\",\"description\":\"Framework for discovering attack surface\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/intrigueio/intrigue-core\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b64\",\"name\":\"IntruderPayloads\",\"slug\":\"intruderpayloads\",\"description\":\"Payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.\",\"category\":\"resources\",\"source\":\"https://github.com/1N3/IntruderPayloads\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"fuzzing\",\"owasp\",\"resources\",\"
99wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b65\",\"name\":\"Invicti\",\"slug\":\"invicti\",\"description\":\"Web Application Security For Enterprise.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"monitoring\",\"reports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b66\",\"name\":\"Invoke-ACLPwn\",\"slug\":\"invoke-aclpwn\",\"description\":\"Automates the discovery and pwnage of ACLs in Active Directory that are unsafe configure.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/fox-it/Invoke-ACLPwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"permissions\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b67\",\"name\":\"Invoke-ADEnum\",\"slug\":\"invoke-adenum\",\"description\":\"Automate Active Directory Enumeration using PowerView.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Leo4j/Invoke-ADEnum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d3\",\"name\":\"Invoke-Apex\",\"slug\":\"invoke-apex\",\"description\":\"PowerShell-based toolkit consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/secmode/Invoke-Apex\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\",\"simulation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b68\",\"name\":\"Invoke-BSOD\",\"slug\":\"invoke-bsod\",\"description\":\"For when you want a computer to be done - without admin!.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/peewpw/Invoke-BSOD\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bsod\",\"exploits\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b6a\",\"name\":\"Invoke-PSImage\",\"slug\":\"invoke-psimage\",\"description\":\"Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/peewpw/Invoke-PSImage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"images\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b69\",\"name\":\"Invoke-PowerThIEf\",\"slug\":\"invoke-powerthief\",\"description\":\"An Internet Explorer post exploitation library.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/nettitude/Invoke-PowerThIEf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"postexploitation\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b6b\",\"name\":\"Invoke-SocksProxy\",\"slug\":\"invoke-socksproxy\",\"description\":\"Socks proxy, and reverse socks server using powershell.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/p3nt4/Invoke-SocksProxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"pivot\",\"privesc\",\"proxy\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b6c\",\"name\":\"Invoke-TmpDavFS\",\"slug\":\"invoke-tmpdavfs\",\"description\":\"Memory Backed Powershell WebDav Server.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/p3nt4/Invoke-TmpDavFS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"webdav\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b6d\",\"name\":\"Invoke-WCMDump\",\"slug\":\"invoke-wcmdump\",\"description\":\"PowerShell script to dump Windows credentials from the Credential Manager.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/peewpw/Invoke-WCMDump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59412\",\"name\":\"IronWASP\",\"slug\":\"ironwasp\",\"description\":\"Web security/vulnerability scanner (native for Windows only)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Lavakumar/IronWASP\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b73\",\"name\":\"J2EEScan\",\"slug\":\"j2eescan\",\"description\":\"Improve the test coverage during web application penetration tests on J2EE applications.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/j2ee-scan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"j2ee\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59414\",\"name\":\"JAST\",\"slug\":\"jast\",\"description\":\"Take screenshots of websites\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/mikehacksthings/jast\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59629\",\"name\":\"JAWS\",\"slug\":\"jaws\",\"description\":\"Just Another Windows (Enum) Script; quickly identify potential privilege escalation vectors on Windows systems\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/411Hall/JAWS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"eop\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b79\",\"name\":\"JD-GUI\",\"slug\":\"jd-gui\",\"description\":\"A standalone Java decompiler GUI.\",\"category\":\"development\",\"source\":\"https://github.com/java-decompiler/jd-gui\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"decompiler\",\"java\",\"reverse-engineering\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59699\",\"name\":\"JD-GUI\",\"slug\":\"jd-gui\",\"description\":\"GUI tool decompiling JAVA\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/java-decompiler/jd-gui\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5969a\",\"name\":\"JEB\",\"slug\":\"jeb\",\"description\":\"Disassembler, decompiler and debugger\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b7a\",\"name\":\"JEB Decompiler\",\"slug\":\"jeb-decompiler\",\"description\":\"Decompile and debug binary code and obfuscated apps, break down and analyze document files.\",\"category\":\"development\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"decompiler\",\"java\",\"reverse-engineering\",\"x86\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b7c\",\"name\":\"JNDI-Injection-Exploit\",\"slug\":\"jndi-injection-exploit\",\"description\":\"Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.\",\"category\":\"development\",\"source\":\"https://github.com/welk1n/J
99NDI-Injection-Exploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"java\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b81\",\"name\":\"JOSEPH\",\"slug\":\"joseph\",\"description\":\"JavaScript Object Signing and Encryption Pentesting Helper.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/PortSwigger/json-web-token-attacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"jwt\",\"passwords\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b82\",\"name\":\"JPEXS\",\"slug\":\"jpexs\",\"description\":\"Free Flash decompiler.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/jindrapetrik/jpexs-decompiler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"flash\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5969b\",\"name\":\"JPEXS Free Flash Decompiler\",\"slug\":\"jpexs-free-flash-decompiler\",\"description\":\"A.k.a ffdec, flash SWF decompiler\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/jindrapetrik/jpexs-decompiler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b84\",\"name\":\"JS-Scan\",\"slug\":\"js-scan\",\"description\":\"A .js scanner, built in PHP, designed to scrape urls and other info.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/zseano/JS-Scan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"javascript\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b85\",\"name\":\"JS-Tap\",\"slug\":\"js-tap\",\"description\":\"JavaScript payload and supporting software to be used as XSS payload or post exploitation implant.\",\"category\":\"development\",\"source\":\"https://github.com/hoodoer/JS-Tap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"javascript\",\"payloads\",\"postexploitation\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5969c\",\"name\":\"JSDetox\",\"slug\":\"jsdetox\",\"description\":\"Javascript deobfustcator\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/svent/jsdetox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b8b\",\"name\":\"JSONBeautifier\",\"slug\":\"jsonbeautifier\",\"description\":\"JSON Beautifier for Burp written in Java.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/json-beautifier\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"json\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59415\",\"name\":\"JSONBee\",\"slug\":\"jsonbee\",\"description\":\"JSONP endpoints/payloads to help bypass content security policy of different websites\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/zigoo0/JSONBee\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"csp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b8c\",\"name\":\"JSONBee\",\"slug\":\"jsonbee\",\"description\":\"A ready to use JSONP endpoints/payloads to help bypass Content Security Policy.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/zigoo0/JSONBee\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"csp\",\"endpoints\",\"jsonp\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b8d\",\"name\":\"JSParser\",\"slug\":\"jsparser\",\"description\":\"Python script to parse relative URLs from JavaScript files.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/nahamsec/JSParser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b90\",\"name\":\"JSShell\",\"slug\":\"jsshell\",\"description\":\"An interactive multi-user web JS shell.\",\"category\":\"development\",\"source\":\"https://github.com/Den1al/JSShell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"javascript\",\"shell\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b87\",\"name\":\"JSgen\",\"slug\":\"jsgen\",\"description\":\"Generate javascript code to be injected in case you find a Server Side Javascript Injection.\",\"category\":\"development\",\"source\":\"https://gitlab.com/0x4ndr3/blog/-/tree/master/JSgen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"javascript\",\"payloads\",\"shell\",\"ssji\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b8e\",\"name\":\"JSpector\",\"slug\":\"jspector\",\"description\":\"Burp Suite extension to crawl JS files in passive mode and display the results on the issues.\",\"category\":\"development\",\"source\":\"https://github.com/hisxo/JSpector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"endpoints\",\"javascript\",\"parser\",\"regexp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b94\",\"name\":\"JWT Key ID Injector\",\"slug\":\"jwt-key-id-injector\",\"description\":\"Simple python script to check against hypothetical JWT vulnerability.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/dariusztytko/jwt-key-id-injector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"jwt\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b95\",\"name\":\"JWT Tool\",\"slug\":\"jwt-tool\",\"description\":\"A toolkit for testing, tweaking and cracking JSON Web Tokens.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ticarpi/jwt_tool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"jwt\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b93\",\"name\":\"JWT cracker\",\"slug\":\"c-jwt-cracker\",\"description\":\"JWT brute force cracker written in C.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/brendan-rius/c-jwt-cracker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"bruteforce\",\"cracker\",\"jwt\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59416\",\"name\":\"JWT cracker\",\"slug\":\"jwt-cracker\",\"description\":\"Multi-threaded JWT brute-force cracker\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/brendan-rius/c-jwt-cracker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59808\",\"name\":\"JWT-Key-Recovery\",\"slug\":\"jwt-key-recovery\",\"description\":\"Recover the public key used to sign JWT tokens\",\"category\":\"cryptography\",\"source\":\"https://github.com/FlorianPicca/JWT-Key-Recovery\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b99\",\"name\":\"JWT4B\",\"slug\":\"jwt4b\",\"description\":\"JWT Support for Burp Suite.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/PortSwigger/json-web-tokens\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"jwt\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b9b\",\"name\":\"JWTweak\",\"slug\":\"jwtweak\",\"description\":\"Detects JWT algorithm and provides options to generate a new JWT based on another algorithm.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rishuranjanofficial/JWTweak\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"jwt\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b77\",\"name\":\"Jaeles\",\"slug\":\"jaeles\",\"description\":\"The Swiss Army knife for automated Web Application Testing\",\"category\":\"auth-perms\",\"source\":\"https://github.com/jaeles-project/jaeles\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59413\",\"name\":\"Jaeles\",\"slug\":\"jaeles\",\"description\":\"Framework for building your own Web Application Scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/jaeles-project/jaeles\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5977e\",\"name\":\"Jaqen\",\"slug\":\"jaqen\",\"description\":\"Abstracts away the complex steps required to perform a DNS rebind and exposes a HTML5 Fetch interface which transparently triggers a DNS rebind\",\"category\":\"networking\",\"source\":\"https://github.com/linkedin/jaqen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59698\",\"name\":\"Java Decompilers\",\"slug\":\"java-decompilers\",\"description\":\".JAR and .Class to Java decompiler\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b78\",\"name\":\"Java Deserialization Scanner\",\"slug\":\"java-deserialization-scanner\",\"description\":\"All-in-one plugin for the detection and exploitation of Java deserialization vulnerabilities.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/java-deserialization-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"deserialization\",\"java\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59596\",\"name\":\"JavaScript Obfuscator\",\"slug\":\"javascript-obfuscator\",\"description\":\"JavaScript obfuscator; features: variables renaming, strings extraction and encryption, dead code injection, control flow flattening, various code transformations, etc.\",\"category\":\"red-teaming\",\"source\":\"https://github.com/javascript-obfuscator/javascript-obfuscator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b7b\",\"name\":\"Jira-Lens\",\"slug\":\"jira-lens\",\"description\":\"Fast and customizable vulnerability scanner for Jira.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/MayankPandey01/Jira-Lens\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"jira\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"695c48ad79f31a25d7a866f5\",\"name\":\"Jiraffe\",\"slug\":\"jiraffe\",\"description\":\"$20\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/0x48piraj/jiraffe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"python\",\"reconnaissance\",\"exploitation\",\"json\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b3\",\"name\":\"Joern\",\"slug\":\"joern\",\"description\":\"Code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs\",\"category\":\"code-analysis\",\"source\":\"https://github.com/joernio/joern\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b7d\",\"name\":\"John Hammond\",\"slug\":\"john-hammond\",\"description\":\"John Hammond YouTube channel.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hackers\",\"learning\",\"videos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b7e\",\"name\":\"John The Ripper\",\"slug\":\"john-the-ripper\",\"description\":\"Password cracker tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/openwall/john\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e6\",\"name\":\"John The Ripper\",\"slug\":\"john-the-ripper\",\"description\":\"Hash cracking tool\",\"category\":\"cracking\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"password\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e7\",\"name\":\"John the Ripper, Jumbo version\",\"slug\":\"john-the-ripper-jumbo-version\",\"description\":\"Hash cracking tool, community-enhanced version of John The Ripper\",\"category\":\"cracking\",\"source\":\"https://github.com/openwall/john\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"password\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b80\",\"name\":\"JoomScan\",\"slug\":\"joomscan\",\"description\":\"OWASP Joomla Vulnerability Scanner Project.\",\"category\":\"cms\",\"source\":\"https://github.com/OWASP/joomscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"joomla\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b92\",\"name\":\"Juumla\",\"slug\":\"juumla\",\"description\":\"Identify Joomla version, scan for vulnerabilities and sensitive files.\",\"category\":\"cms\",\"source\":\"https://github.com/oppsec/juumla\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"joomla\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59417\",\"name\":\"Jwt-cracker\",\"slug\":\"jwt-cracker\",\"description\":\"Simple HS256, HS384 \u0026 HS512 JWT token brute force cracker.\",\"category\":\"cracking\",\"source\":\"https://github.com/lmammino/jwt-cracker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"alphabet\",\"brute-force\",\"brute-force-attacks\",\"bruteforce\",\"command\",\"command-line\",\"cracker\",\"javascript\",\"jwt\",\"jwt-cracker\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bad\",\"name\":\"KICS\",\"slug\":\"kics\",\"description\":\"Find vulnerabilities, compliance issues and infrastru
99cture misconfigurations in your IAC.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Checkmarx/kics\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"devsecops\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb5\",\"name\":\"KNOXSS\",\"slug\":\"knoxss\",\"description\":\"Online XSS tool with demonstration of vulnerability.\",\"category\":\"vulnerabilities\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"online\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59781\",\"name\":\"KRBJack\",\"slug\":\"krbjack\",\"description\":\"DNS dynamic update abuse in ADIDNS via DSPROPERTY_ZONE_ALLOW_UPDATE set to ZONE_UPDATE_UNSECURE combined with MitM attack using Kerberos AP-REQ hijacking\",\"category\":\"networking\",\"source\":\"https://github.com/almandin/krbjack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"active directory\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59423\",\"name\":\"Kadimus\",\"slug\":\"kadimus\",\"description\":\"LF
99I, RFI, RCE scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/P0cL4bs/Kadimus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b9c\",\"name\":\"Kadimus\",\"slug\":\"kadimus\",\"description\":\"Check for and exploit LFI vulnerabilities with a focus on PHP systems.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/P0cL4bs/kadimus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"lfi\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b9d\",\"name\":\"Kaeferjaeger\",\"slug\":\"kaeferjaeger\",\"description\":\"Lists of resources: cdn ranges, ips ranges, sni ip ranges...\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cdn\",\"cloud\",\"ips\",\"online\",\"resources\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59597\",\"name\":\"Kage\",\"slug\":\"kage\",\"description\":\"Graphical user interface for Metasploit Meterpreter and session handler\",\"category\":\"red-teaming\",\"source\":\"https://github.com/WayzDev/Kage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b9e\",\"name\":\"Kage\",\"slug\":\"kage\",\"description\":\"Graphical user interface for Metasploit Meterpreter and session handler.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/Zerx0r/Kage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"metasploit\",\"meterpreter\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5969f\",\"name\":\"Kaitai Struct\",\"slug\":\"kaitai-struct\",\"description\":\"Declarative language to generate binary data parsers in various languages\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/kaitai-io/kaitai_struct\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b9f\",\"name\":\"Kali Linux\",\"slug\":\"kali-linux\",\"description\":\"The most advanced penetration testing distribution.\",\"category\":\"network\",\"source\":\"https://gitlab.com/kalilinux\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mobile\",\"toolkit\",\"training\",\"vm\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5941b\",\"name\":\"Katana\",\"slug\":\"katana\",\"description\":\"Crawling and spidering framework, supporting headless mode, JavaScript, customizable automatic form filling and scope control\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/projectdiscovery/katana\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59655\",\"name\":\"KeePwn\",\"slug\":\"keepwn\",\"description\":\"Automate KeePass discovery and secret extraction\",\"category\":\"plugins\",\"source\":\"https://github.com/Orange-Cyberdefense/KeePwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ba3\",\"name\":\"KeePwn\",\"slug\":\"keepwn\",\"description\":\"A python script to help red teamers discover KeePass instances and extract secrets.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Orange-Cyberdefense/KeePwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"keepass\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ba4\",\"name\":\"Kekeo\",\"slug\":\"kekeo\",\"description\":\"A little toolbox to play with Microsoft Kerberos in C.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/gentilkiwi/kekeo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"kerberos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5969d\",\"name\":\"Kemon\",\"slug\":\"kemon\",\"description\":\"macOS kernel pre and post callback-based framework\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/didi/kemon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ba6\",\"name\":\"Kerbeus-BOF\",\"slug\":\"kerbeus-bof\",\"description\":\"Beacon Object Files for Kerberos abuse.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/RalfHacker/Kerbeus-BOF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"kerberos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59780\",\"name\":\"Kerbrute\",\"slug\":\"kerbrute\",\"description\":\"Bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication\",\"category\":\"networking\",\"source\":\"https://github.com/ropnop/kerbrute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bab\",\"name\":\"KeyTabExtract\",\"slug\":\"keytabextract\",\"description\":\"Extracts Key Values from .keytab files.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/sosdave/KeyTabExtract\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hash\",\"kerberos\",\"keytab\",\"ntlm\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ba9\",\"name\":\"Keyfinder\",\"slug\":\"keyfinder\",\"description\":\"Find and analyze private/public key files and Android APK files.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/CERTCC/keyfinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"certificates\",\"mobile\",\"ssl\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59598\",\"name\":\"King Phisher\",\"slug\":\"king-phisher\",\"description\":\"A tool for testing and promoting user awareness by simulating real world phishing attacks\",\"category\":\"red-teaming\",\"source\":\"https://github.com/rsmusllp/king-phisher\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053baf\",\"name\":\"KisMac\",\"slug\":\"kismac\",\"description\":\"A free, open source wireless stumbling and security tool for Mac OS X.\",\"category\":\"network\",\"source\":\"https://github.com/IGRSoft/KisMac2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bluetooth\",\"network\",\"sniffer\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59817\",\"name\":\"Kismet\",\"slug\":\"kismet\",\"description\":\"Sniffer, WIDS, and wardriving tool for Wi-Fi, Bluetooth, Zigbee, RF\",\"category\":\"wireless\",\"source\":\"https://github.com/kismetwireless/kismet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"802.11\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb0\",\"name\":\"Kismet\",\"slug\":\"kismet\",\"description\":\"Remote capture for all capture types over TCP sockets or websockets.\",\"category\":\"network\",\"source\":\"https://github.com/kismetwireless/kismet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bluetooth\",\"network\",\"sniffer\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb2\",\"name\":\"Klyda\",\"slug\":\"klyda\",\"description\":\"Highly configurable script for dictionary/spray attacks against online web applications.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Xeonrx/Klyda\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb3\",\"name\":\"Knockpy\",\"slug\":\"knockpy\",\"description\":\"Knock Subdomain Scan.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/guelfoweb/knock\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb4\",\"name\":\"Knoxnl\",\"slug\":\"knoxnl\",\"description\":\"This is a python wrapper around the amazing KNOXSS.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/xnl-h4ck3r/knoxnl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5950d\",\"name\":\"Kostebek\",\"slug\":\"kostebek\",\"description\":\"Tool to find f
99irms domains by searching their trademark information\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/esecuritylab/kostebek\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb7\",\"name\":\"Krakatau\",\"slug\":\"krakatau\",\"description\":\"Java decompiler, assembler, and disassembler.\",\"category\":\"development\",\"source\":\"https://github.com/Storyyeller/Krakatau\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"assembler\",\"decompiler\",\"disassembler\",\"java\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5969e\",\"name\":\"Krakatau\",\"slug\":\"krakatau\",\"description\":\"Java decompiler, assembler, and disassembler\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/Storyyeller/Krakatau\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ea\",\"name\":\"Kraken\",\"slug\":\"kraken\",\"description\":\"Hashcat-based distributed password cracking system with WebUI; has a desktop client in addition\",\"category\":\"cracking\",\"source\":\"https://github.com/arcaneiceman/kraken\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5941c\",\"name\":\"Kraken\",\"slug\":\"kraken\",\"description\":\"Modular multi-language webshell focused on web post-exploitation and defense evasion; supports PHP, JSP and ASPX\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/kraken-ng/Kraken\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb8\",\"name\":\"Kraken\",\"slug\":\"kraken\",\"description\":\"A modular multi-language webshell.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/kraken-ng/Kraken\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"rce\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595eb\",\"name\":\"Kraker\",\"slug\":\"kraker\",\"description\":\"Distributed password brute-force system, supports Hashcat\",\"category\":\"cracking\",\"source\":\"https://github.com/zzzteph/kraker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gui\",\"hashcat\",\"crack\",\"hash\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59782\",\"name\":\"Krbrelayx\",\"slug\":\"krbrelayx\",\"description\":\"Toolkit for abusing unconstrained delegation\",\"category\":\"networking\",\"source\":\"https://github.com/dirkjanm/krbrelayx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"kerberos\",\"dns\",\"ldap\",\"rpc\",\"spoolservice\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb9\",\"name\":\"Kscan\",\"slug\":\"kscan\",\"description\":\"Kscan is an all-round scanner developed purely in Go, with functions such as port scanning, protocol.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/lcvvvv/kscan/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\",\"ips\",\"protocols\",\"scanner\",\"tcp\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b4\",\"name\":\"Kube-hunter\",\"slug\":\"kube-hunter\",\"description\":\"Scanner for security weaknesses in Kubernetes clusters\",\"category\":\"code-analysis\",\"source\":\"https://github.com/aquasecurity/kube-hunter/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59783\",\"name\":\"KubeHound\",\"slug\":\"kubehound\",\"description\":\"Kubernetes attack graph tool allowing automated calculation of attack paths between assets in a cluster\",\"category\":\"networking\",\"source\":\"https://github.com/DataDog/KubeHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bbb\",\"name\":\"Kubernetes Goat\",\"slug\":\"kubernetes-goat\",\"description\":\"Vulnerable by design cluster environment to learn and practice Kubernetes security.\",\"category\":\"resources\",\"source\":\"https://github.com/madhuakula/kubernetes-goat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"kubernetes\",\"learning\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59599\",\"name\":\"Kubesploit\",\"slug\":\"kubesploit\",\"description\":\"Post-exploitation HTTP/2 Command \u0026 Control server and agent focused on containerized environments\",\"category\":\"red-teaming\",\"source\":\"https://github.com/cyberark/kubesploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bbc\",\"name\":\"Kubesploit\",\"slug\":\"kubesploit\",\"description\":\"Cross-platform command \u0026 control server and agent focused on containerized environments.\",\"category\":\"virtualization\",\"source\":\"https://github.com/cyberark/kubesploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"containers\",\"kubernetes\",\"postexploitation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bbd\",\"name\":\"Kubestroyer\",\"slug\":\"kubestroyer\",\"description\":\"Exploit Kubernetes clusters misconfigurations and be the swiss army knife of your pentests.\",\"category\":\"virtualization\",\"source\":\"https://github.com/Rolix44/Kubestroyer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"clusters\",\"kubernetes\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5955e\",\"name\":\"Kvasir\",\"slug\":\"kvasir\",\"description\":\"Pentest data management tool\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/KvasirSecurity/Kvasir\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bbe\",\"name\":\"Kwetza\",\"slug\":\"kwetza\",\"description\":\"Infect an existing Android application with a Meterpreter payload.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/sensepost/kwetza\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"exploits\",\"metasploit\",\"meterpreter\",\"mobile\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc5\",\"name\":\"LAZYPARIAH\",\"slug\":\"lazypariah\",\"description\":\"Generate reverse shell payloads on the fly.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/octetsplicer/LAZYPARIAH\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc7\",\"name\":\"LDAP Password Hunter\",\"slug\":\"ldap-password-hunter\",\"description\":\"Password Hunter in active directory.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/oldboy21/LDAP-Password-Hunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"ldap\",\"passwords\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc8\",\"name\":\"LDAP Relay Scan\",\"slug\":\"ldap-relay-scan\",\"description\":\"Check for LDAP protections regarding the relay of NTLM authentication.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/zyn3rgy/LdapRelayScan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"ldap\",\"ntlm\",\"users\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc9\",\"name\":\"LDAPNomNom\",\"slug\":\"ldapnomnom\",\"description\":\"Anonymously bruteforce Active Directory usernames by abusing LDAP Ping requests.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/lkarlslund/ldapnomnom\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"bruteforce\",\"ldap\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59784\",\"name\":\"LDAPmonitor\",\"slug\":\"ldapmonitor\",\"description\":\"Monitor creation, deleti
99on and changes to LDAP objects live during pentest or system administration\",\"category\":\"networking\",\"source\":\"https://github.com/p0dalirius/LDAPmonitor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bca\",\"name\":\"LEAKEY\",\"slug\":\"leakey\",\"description\":\"Bash script which checks and validates for leaked credentials.\",\"category\":\"development\",\"source\":\"https://github.com/rohsec/LEAKEY\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5941e\",\"name\":\"LFI Freak\",\"slug\":\"lfi-freak\",\"description\":\"LFI scan and exploit tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/OsandaMalith/LFiFreak/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd0\",\"name\":\"LFI Suite\",\"slug\":\"lfi-suite\",\"description\":\"Totally Automatic LFI Exploiter and Scanner.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/D35m0nd142/LFISuite\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"lfi\",\"shell\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5941f\",\"name\":\"LFI Suite\",\"slug\":\"lfi-suite\",\"description\":\"Automatic LFI scanner and exploiter\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/D35m0nd142/LFISuite\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd1\",\"name\":\"LFI-Enum\",\"slug\":\"lfi-enum\",\"description\":\"Scripts to execute enumeration via LFI\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/mthbernardes/LFI-Enum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"lfi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd2\",\"name\":\"LFIDump\",\"slug\":\"lfidump\",\"description\":\"Dump remote files through a local file read or Local File Inclusion web vulnerability.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/p0dalirius/LFIDump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"lfi\",\"linux\",\"scraper\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b5\",\"name\":\"LICMA\",\"slug\":\"licma\",\"description\":\"Language Independent Crypto-Misuse Analysis; multi-language analysis tool to identify incorrect initialization of crypto functions\",\"category\":\"code-analysis\",\"source\":\"https://github.com/stg-tud/licma\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5972b\",\"name\":\"LOAD\",\"slug\":\"load\",\"description\":\"Lord Of Active Directory is a test environment lab that includes all the common vulnerabilities of an active directory and deploys automatically on AWS; based on AWS-Redteam-Lab and GOAD\",\"category\":\"other\",\"source\":\"https://github.com/0xBallpoint/LOAD\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ad\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053beb\",\"name\":\"LOLBAS\",\"slug\":\"lolbas\",\"description\":\"Living Off The Land Binaries, Scripts and Libraries.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/LOLBAS-Project/LOLBAS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"privesc\",\"resources\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bec\",\"name\":\"LOOBins\",\"slug\":\"loobins\",\"description\":\"Living Off the Orchard: macOS Binaries.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/infosecB/LOOBins\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"macos\",\"privesc\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5959d\",\"name\":\"LP-DB\",\"slug\":\"lp-db\",\"description\":\"Login Pages Database forms a knowledge base on login pages related to malicious activities (C2 panels, phishing kits...)\",\"category\":\"red-teaming\",\"source\":\"https://github.com/lp-db/lp-db\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5962a\",\"name\":\"LaZagne\",\"slug\":\"lazagne\",\"description\":\"Password retriever\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/AlessandroZ/LaZagne\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc2\",\"name\":\"LaZagne\",\"slug\":\"lazagne\",\"description\":\"Credentials recovery project.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/AlessandroZ/LaZagne\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"git\",\"passwords\",\"wifi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5955f\",\"name\":\"Lair\",\"slug\":\"lair\",\"description\":\"Collaborative penetration test and vulnerability management framework\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/lair-framework/lair\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc1\",\"name\":\"LanGuard\",\"slug\":\"languard\",\"description\":\"Patch management, vulnerability scanning, and network auditing.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"network\",\"reports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc4\",\"name\":\"LazyHunter\",\"slug\":\"lazyhunter\",\"description\":\"A framework that provides a web UI to commonly used Bug Hunting/Pentesting tools.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rakeshmane/lazyhunter-UI\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"organizer\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5972a\",\"name\":\"Leak Lookup\",\"slug\":\"leak-lookup\",\"description\":\"Service to check if an account has been compromised in a data breach, requires an account\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5950e\",\"name\":\"LeakDB\",\"slug\":\"leakdb\",\"description\":\"Normalize, deduplicate, index, sort, and search leaked data sets on the multi-terabyte-scale\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/moloch--/leakdb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5950f\",\"name\":\"LeakIX\",\"slug\":\"leakix\",\"description\":\"Search engine for devices and services exposed on the Internet\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59510\",\"name\":\"LeakLooker\",\"slug\":\"leaklooker\",\"description\":\"Discover, browse and monitor database/source code leaks\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/woj-ciech/LeakLooker-X\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bcb\",\"name\":\"LeakLooker-X\",\"slug\":\"leaklooker-x\",\"description\":\"Discover, browse and monitor database/source code leaks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/woj-ciech/LeakLooker-X\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leaks\",\"osint\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59786\",\"name\":\"Legba\",\"slug\":\"legba\",\"description\":\"Multiprotocol credentials bruteforcer, password sprayer and enumerator\",\"category\":\"networking\",\"source\":\"https://github.com/evilsocket/legba\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bcd\",\"name\":\"Legion\",\"slug\":\"legion\",\"description\":\"Aids in discovery, reconnaissance and exploitation of information systems.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/GoVanguard/legion\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"directories\",\"framework\",\"network\",\"reports\",\"scanner\",\"ssl\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bce\",\"name\":\"Legitify\",\"slug\":\"legitify\",\"description\":\"Detect misconfigurations and security risks across GitHub and GitLab assets.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/Legit-Labs/legitify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"gitlab\",\"scm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bcf\",\"name\":\"Leonidas\",\"slug\":\"leonidas\",\"description\":\"Automated attack simulation in the cloud, complete with detection use cases.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/WithSecureLabs/leonidas\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"mitre\",\"redteam\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd3\",\"name\":\"LibAFL\",\"slug\":\"libafl\",\"description\":\"Advanced fuzzing librar. Slot your fuzzers together and extend their features using Rust.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/AFLplusplus/LibAFL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd4\",\"name\":\"Liffy\",\"slug\":\"liffy\",\"description\":\"Local file inclusion exploitation tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/mzfr/liffy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"lfi\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5941d\",\"name\":\"Liffy\",\"slug\":\"liffy\",\"description\":\"LF
99I exploitation tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/mzfr/liffy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59420\",\"name\":\"LightBulb\",\"slug\":\"lightbulb\",\"description\":\"Framework for auditing web application firewalls and filters\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/lightbulb-framework/lightbulb-framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5959b\",\"name\":\"LightsOut\",\"slug\":\"lightsout\",\"description\":\"Generate an obfuscated DLL that will disable AMSI \u0026 ETW\",\"category\":\"red-teaming\",\"source\":\"https://github.com/icyguider/LightsOut\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59787\",\"name\":\"Ligolo\",\"slug\":\"ligolo\",\"description\":\"Pivot / reverse tunneling tool with SOCKS5 and TCP tunnel support\",\"category\":\"networking\",\"source\":\"https://github.com/sysdream/ligolo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59788\",\"name\":\"Ligolo-ng\",\"slug\":\"ligolo-ng\",\"description\":\"Pivoting via TCP/TLS reverse tunneling with TUN interface\",\"category\":\"networking\",\"source\":\"https://github.com/nicocha30/ligolo-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd6\",\"name\":\"Ligolo-ng\",\"slug\":\"ligolo-ng\",\"description\":\"An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/nicocha30/ligolo-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"pivot\",\"tunneling\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5962b\",\"name\":\"LinEnum\",\"slug\":\"linenum\",\"description\":\"Linux enumeration and privilege escalation script\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/rebootuser/LinEnum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59512\",\"name\":\"LinEnum\",\"slug\":\"linenum\",\"description\":\"System script for local Linux enumeration and privilege escalation checks\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/rebootuser/LinEnum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd7\",\"name\":\"LinEnum\",\"slug\":\"linenum\",\"description\":\"Scripted Local Linux Enumeration \u0026 Privilege Escalation Checks.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rebootuser/LinEnum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linux\",\"privesc\",\"server\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59421\",\"name\":\"LinkFinder\",\"slug\":\"linkfinder\",\"description\":\"Find URL endpoints and their parameters in JavaScript files\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/GerbenJavado/LinkFinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd9\",\"name\":\"LinkFinder\",\"slug\":\"linkfinder\",\"description\":\"A python script that finds endpoints in JavaScript files.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/GerbenJavado/LinkFinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59513\",\"name\":\"LinkedInDumper\",\"slug\":\"linkedindumper\",\"description\":\"Dump company employees from LinkedIn API\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/l4rm4nd/LinkedInDumper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd8\",\"name\":\"LinkedInDumper\",\"slug\":\"linkedindumper\",\"description\":\"Script that dumps employee data from the LinkedIn social networking platform.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/l4rm4nd/LinkedInDumper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linkedin\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bda\",\"name\":\"Linpmem\",\"slug\":\"linpmem\",\"description\":\"The Linux memory acquisition tool.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/Velocidex/Linpmem\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linux\",\"memory\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bdb\",\"name\":\"Linux Exploit Suggester\",\"slug\":\"linux-exploit-suggester\",\"description\":\"Based on operating system release number.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/InteliSecureLabs/Linux_Exploit_Suggester\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"linux\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5962c\",\"name\":\"Linux Exploit Suggester 2\",\"slug\":\"linux-exploit-suggester-2\",\"description\":\"Linux kernel exploit suggester\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/jondonas/linux-exploit-suggester-2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59514\",\"name\":\"LittleBrother\",\"slug\":\"littlebrother\",\"description\":\"Information gathering (OSINT) on a person (EU), checks social networks and Pages Jaunes\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/lulz3xploit/littlebrother\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594cb\",\"name\":\"Live Forensicator\",\"slug\":\"live-forensicator\",\"description\":\"Assist forensic investigators and incidence responders in carrying out a quick live forensic investigation\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/Johnng007
99/Live-Forensicator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be2\",\"name\":\"LiveOverflow\",\"slug\":\"liveoverflow\",\"description\":\"LiveOverflow YouTube channel.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hackers\",\"learning\",\"videos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be3\",\"name\":\"LiveTargetsFinder\",\"slug\":\"livetargetsfinder\",\"description\":\"Generates lists of live hosts and URLs.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/allyomalley/LiveTargetsFinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"probing\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f4\",\"name\":\"Local PHP Security Checker\",\"slug\":\"local-php-security-checker\",\"description\":\"CLI tool that checks if your PHP application depends on PHP packages with known security vulnerabilities\",\"category\":\"configuration-audit\",\"source\":\"https://github.com/fabpot/local-php-security-checker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be7\",\"name\":\"LocalPotato\",\"slug\":\"localpotato\",\"description\":\"Another local Windows privilege escalation using a new potato technique.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/decoder-it/LocalPotato\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ntlm\",\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be8\",\"name\":\"Locksmith\",\"slug\":\"locksmith\",\"description\":\"Detect and fix common misconfigurations in Active Directory Certificate Services.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/TrimarcJake/Locksmith\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"adcs\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5978a\",\"name\":\"Locksmith\",\"slug\":\"locksmith\",\"description\":\"Find and fix common misconfigurations in AD CS\",\"category\":\"networking\",\"source\":\"https://github.com/TrimarcJake/Locksmith\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be9\",\"name\":\"Logger++\",\"slug\":\"logger-plus-plus\",\"description\":\"Log activities of all the tools in Burp Suite.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/logger-plus-plus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"logs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bea\",\"name\":\"LogonTracer\",\"slug\":\"logontracer\",\"description\":\"Investigate malicious Windows logon by visualizing and analyzing Windows event log.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/JPCERTCC/LogonTracer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"defense\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f8\",\"name\":\"Loki\",\"slug\":\"loki\",\"description\":\"IOC scanner\",\"category\":\"incident-response\",\"source\":\"https://github.com/Neo23x0/Loki/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bed\",\"name\":\"Lookyloo\",\"slug\":\"lookyloo\",\"description\":\"Allows users to capture a website page and then display a tree of domains that call each other.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Lookyloo/lookyloo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5972c\",\"name\":\"Lookyloo\",\"slug\":\"lookyloo\",\"description\":\"A web interface that allows you to capture a website page and display a tree of domains\",\"category\":\"other\",\"source\":\"https://github.com/Lookyloo/lookyloo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"rest api\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59422\",\"name\":\"Lulzbuster\",\"slug\":\"lulzbuster\",\"description\":\"Web directory and file scanner (wordlist bruteforce)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/noptrix/lulzbuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf0\",\"name\":\"Luyten\",\"slug\":\"luyten\",\"description\":\"An Open Source Java Decompiler GUI for Procyon.\",\"category\":\"development\",\"source\":\"https://github.com/deathmarine/Luyten\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"decompiler\",\"java\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f5\",\"name\":\"Lynis\",\"slug\":\"lynis\",\"description\":\"Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.\",\"category\":\"configuration-audit\",\"source\":\"https://github.com/CISOfy/Lynis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf3\",\"name\":\"M/o/Vfuscator\",\"slug\":\"movfuscator\",\"description\":\"The single instruction C compiler.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/xoreaxeaxeax/movfuscator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"compiler\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5978d\",\"name\":\"MAN-SPIDER\",\"slug\":\"man-spider\",\"description\":\"Crawl S
99MB shares for juicy information; supports file content searching and regex\",\"category\":\"networking\",\"source\":\"https://github.com/blacklanternsecurity/MANSPIDER\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bff\",\"name\":\"MANSPIDER\",\"slug\":\"manspider\",\"description\":\"Spider entire networks for juicy files sitting on SMB shares.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/blacklanternsecurity/MANSPIDER\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"samba\",\"secrets\",\"shares\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59818\",\"name\":\"MDK3-master\",\"slug\":\"mdk3-master\",\"description\":\"PoC tool to exploit common IEEE 802.11 protocol weaknesses\",\"category\":\"wireless\",\"source\":\"https://github.com/wi-fi-analyzer/mdk3-master\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59819\",\"name\":\"MDK4\",\"slug\":\"mdk4\",\"description\":\"PoC tool to exploit common IEEE 802.11 protocol weaknesses\",\"category\":\"wireless\",\"source\":\"https://github.com/aircrack-ng/mdk4\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a1\",\"name\":\"MFASweep\",\"slug\":\"mfasweep\",\"description\":\"Check if MFA is enabled on multiple Microsoft services\",\"category\":\"red-teaming\",\"source\":\"https://github.com/dafthack/MFASweep\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"azure\",\"o365\",\"exchange\",\"adfs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d9\",\"name\":\"MISP\",\"slug\":\"misp\",\"description\":\"Threat intelligence platform \u0026 open standards for threat information sharing (formerly known as Malware Information Sharing Platform)\",\"category\":\"threat-intelligence\",\"source\":\"https://github.com/MISP/MISP\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59560\",\"name\":\"MISP\",\"slug\":\"misp\",\"description\":\"Malware Information Sharing Platform, an Open Source threat intelligence platform and open standards for threat information sharing\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/MISP/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c1a\",\"name\":\"MITRE ATT\u0026CK\",\"slug\":\"mitre-att-ck\",\"description\":\"Knowledge base of adversary tactics and techniques based on real-world observations.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"mitre\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d5\",\"name\":\"MITRE ATT\u0026CK Defender\",\"slug\":\"mitre-attck-defender\",\"description\":\"ATT\u0026CK training and certification program produced by MITREâs own ATT\u0026CK subject matter experts\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/maddev-engenuity/AdversaryEmulation\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c25\",\"name\":\"MSDAT\",\"slug\":\"msdat\",\"description\":\"Microsoft SQL database attacking tool.\",\"category\":\"databases\",\"source\":\"https://github.com/quentinhardy/msdat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mssql\",\"sqli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c26\",\"name\":\"MSDNSScan\",\"slug\":\"msdnsscan\",\"description\":\"Identify DNS records, check for zone transfers and conduct subdomain enumeration.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/dievus/msdnsscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c27\",\"name\":\"MSDorkDump\",\"slug\":\"msdorkdump\",\"description\":\"Google Dork File Finder.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/dievus/msdorkdump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"domains\",\"google\",\"metadata\",\"osint\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c2b\",\"name\":\"MSOLSpray\",\"slug\":\"msolspray\",\"description\":\"A password spraying tool for Microsoft Online accounts (Azure/O365).\",\"category\":\"cloud-services\",\"source\":\"https://github.com/dafthack/MSOLSpray\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"azure\",\"cloud\",\"microsoft\",\"o365\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59792\",\"name\":\"MSSQLRelay\",\"slug\":\"mssqlrelay\",\"description\":\"MSSQL relay audit and abuse\",\"category\":\"networking\",\"source\":\"https://github.com/CompassSecurity/mssqlrelay\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c2c\",\"name\":\"MSSQLi-DUET\",\"slug\":\"mssqli-duet\",\"description\":\"SQL injection script for Microsoft SQL Server.\",\"category\":\"databases\",\"source\":\"https://github.com/Keramas/mssqli-duet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"firewall\",\"mssql\",\"sqli\",\"sqlserver\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594cc\",\"name\":\"MVT\",\"slug\":\"mvt\",\"description\":\"Mobile Verification Toolkit; collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/mvt-project/mvt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf5\",\"name\":\"MagicRecon\",\"slug\":\"magicrecon\",\"description\":\"A powerful shell script to maximize the recon and data collection process.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/robotshell/magicRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cloud\",\"emails\",\"recon\",\"screenshots\",\"subdomains\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf7\",\"name\":\"Maigret\",\"slug\":\"maigret\",\"description\":\"Collect a dossier on a person by username from thousands of sites.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/soxoj/maigret\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"osint\",\"socialnetworks\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59515\",\"name\":\"Maigret\",\"slug\":\"maigret\",\"description\":\"Collect a dossier on a person by username from a huge number of sites, and extract details from them\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/soxoj/maigret\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5978c\",\"name\":\"Mail.Rip V2\",\"slug\":\"mailrip-v2\",\"description\":\"SMTP credentials bruteforcer / checker\",\"category\":\"networking\",\"source\":\"https://github.com/DrPython3/MailRipV2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"socks4\",\"socks5\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf8\",\"name\":\"MalBuzz\",\"slug\":\"malbuzz\",\"description\":\"It's a handy tool to help you analyze malware.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/NomanProdhan/malbuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"antivirus\",\"hash\",\"malware\",\"signature\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59516\",\"name\":\"Malfrat's OSINT Map\",\"slug\":\"malfrats-osint-map\",\"description\":\"A web-based collection of tools and resources for OSINT; successor of OSINT Framework\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Malfrats/OSINT-Map\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d8\",\"name\":\"Maltego\",\"slug\":\"maltego\",\"description\":\"Interactive data mining tool that renders directed graphs for link analysis. The tool is used in online investigations for finding relationships between pieces of information from various sources located on the Internet (exists in Community Edition)\",\"category\":\"threat-intelligence\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bfa\",\"name\":\"Maltego\",\"slug\":\"maltego\",\"description\":\"Open source intelligence and forensics application.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bfc\",\"name\":\"MalwareBazaar\",\"slug\":\"malwarebazaar\",\"description\":\"Malware sample database.\",\"category\":\"auth-perms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"malware\",\"online\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bfd\",\"name\":\"MalwareSourceCode\",\"slug\":\"malwaresourcecode\",\"description\":\"Collection of malware source code for a variety of platforms in an array of different programming la.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/vxunderground/MalwareSourceCode\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"malware\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59424\",\"name\":\"Malzilla\",\"slug\":\"malzilla\",\"description\":\"Web oriented deobfuscating tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://sourceforge.net/projects/malzilla/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5959f\",\"name\":\"Mangle\",\"slug\":\"mangle\",\"description\":\"Manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs\",\"category\":\"red-teaming\",\"source\":\"https://github.com/optiv/Mangle\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"obfuscation\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d4\",\"name\":\"Manticore\",\"slug\":\"manticore\",\"description\":\"Adversary emulation command line tool is parsing complex scenarios from Manticore public-threats repository and run these scenarios\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/Manticore-Platform/manticore-cli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\",\"simulation\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c01\",\"name\":\"MapperPlus\",\"slug\":\"mapperplus\",\"description\":\"An advanced source map extractor based on headless browser.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/midoxnet/mapperplus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"javascript\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c02\",\"name\":\"Maryam\",\"slug\":\"maryam\",\"description\":\"Open-source Intelligence Framework.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/saeeddhqan/Maryam\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5962f\",\"name\":\"Masky\",\"slug\":\"masky\",\"description\":\"Library and CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/Z4kSec/Masky\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c04\",\"name\":\"Mass3\",\"slug\":\"mass3\",\"description\":\"Enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/smiegles/mass3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59518\",\"name\":\"MassDNS\",\"slug\":\"massdns\",\"description\":\"High-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/blechschmidt/massdns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c06\",\"name\":\"MassDNS\",\"slug\":\"massdns\",\"description\":\"A high-performance DNS stub resolver for bulk lookups and reconnaissance.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/blechschmidt/massdns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c05\",\"name\":\"Masscan\",\"slug\":\"masscan\",\"description\":\"TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/robertdavidgraham/masscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"network\",\"ports\",\"scanner\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5978e\",\"name\":\"Masscan\",\"slug\":\"masscan\",\"description\":\"Port scanner for massive networks\",\"category\":\"networking\",\"source\":\"https://github.com/robertdavidgraham/masscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f6\",\"name\":\"Master librarian\",\"slug\":\"master-librarian\",\"description\":\"Audit Unix/*BSD/Linux system libraries to find public security vulnerabilities\",\"category\":\"configuration-audit\",\"source\":\"https://github.com/CoolerVoid/master_librarian\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59656\",\"name\":\"Matro7sh loaders\",\"slug\":\"matro7sh-loaders\",\"description\":\"Encode Havoc shellcode (.bin) in XOR, chac
99ha20, AES; supports 2 loaders: Myph, 221b\",\"category\":\"plugins\",\"source\":\"https://github.com/matro7sh/matro7sh_loaders\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5978f\",\"name\":\"Medusa\",\"slug\":\"medusa\",\"description\":\"Network login cracker\",\"category\":\"networking\",\"source\":\"https://github.com/jmk-foofus/medusa\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c07\",\"name\":\"Medusa\",\"slug\":\"medusa\",\"description\":\"Medusa is a speedy, parallel, and modular, login brute-forcer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/jmk-foofus/medusa\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a2\",\"name\":\"Medusa\",\"slug\":\"medusa\",\"description\":\"Interactive multi-architecture and multi-formats disassembler running on Windows and Linux\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/wisk/medusa\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59790\",\"name\":\"Medusa-gui\",\"slug\":\"medusa-gui\",\"description\":\"GUI for Medusa\",\"category\":\"networking\",\"source\":\"https://github.com/Tak31337/medusa-gui\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ee\",\"name\":\"Mentalist\",\"slug\":\"mentalist\",\"description\":\"Graphical tool for custom wordlist generation, can output rules compatible with Hashcat and John the Ripper\",\"category\":\"cracking\",\"source\":\"https://github.com/sc0tfree/mentalist\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\",\"hashcat\",\"john\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ea\",\"name\":\"Mercator\",\"slug\":\"mercator\",\"description\":\"Web application to manage the mapping of an information system as de
99scribed in the Mapping The Information System Guide of the ANSSI\",\"category\":\"defensive\",\"source\":\"https://github.com/dbarzin/mercator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a0\",\"name\":\"Merlin\",\"slug\":\"merlin\",\"description\":\"Post-exploitation HTTP/2 Command \u0026 Control server and agent\",\"category\":\"red-teaming\",\"source\":\"https://github.com/Ne0nd0g/merlin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c0c\",\"name\":\"MetaDetective\",\"slug\":\"metadetective\",\"description\":\"Unleash metadata intelligence, bridging the chasm in metadata extraction and analysis.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/franckferman/MetaDetective\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"images\",\"metadata\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59519\",\"name\":\"Metabigor\",\"slug\":\"metabigor\",\"description\":\"Searching information about IP address, ASN and organization; doesn't require any API key\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/j3ssie/metabigor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c0b\",\"name\":\"Metabigor\",\"slug\":\"metabigor\",\"description\":\"Intelligence tool to do OSINT tasks and more but without any API key.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/j3ssie/metabigor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"asn\",\"osint\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688369b4e1b1f64f22d1e502\",\"name\":\"Metadata-Attacker\",\"slug\":\"metadata-attacker\",\"description\":\"This tools covers Cross-Site Scripting (XSS) security issues with media-files containing metadata. Such data is usually created by trusted devices like cameras. Therefore, there is the chance that providers handling this metadata, also trust them and that they thus use insufficient or no filter mechanisms.\\n\\nWe have developed an open source penetration testing tool called Metadata-Attacker. It consists of a suite of self-developed tools that allow to create malicious proof-of-concept image (.jpg), audio (.mp3), and video (.mp4) files.\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/RUB-NDS/Metadata-Attacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c0d\",\"name\":\"Metagoofil\",\"slug\":\"metagoofil\",\"description\":\"Search Google and download specific file types.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/opsdisk/metagoofil\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"google\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a1\",\"name\":\"Metasm\",\"slug\":\"metasm\",\"description\":\"Assembler, disassembler, compiler and debugger\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/jjyg/metasm\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c0f\",\"name\":\"Metasploit\",\"slug\":\"metasploit\",\"description\":\"The worldâs most used penetration testing framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rapid7/metasploit-framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"exploits\",\"framework\",\"network\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5972e\",\"name\":\"Metasploit\",\"slug\":\"metasploit\",\"description\":\"Tool and framework for pentesting system, web and many more, contains a lot a ready to use exploit, 4 versions: Pro (paid), Express (paid), Community (free with GUI but on request), Framework (free, open source, CLI)\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/rapid7/metasploit-framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ec\",\"name\":\"Metasploitable\",\"slug\":\"metasploitable\",\"description\":\"VM that is built from the ground up with a large amount of security vulnerabilities\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/rapid7/metasploitable3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c12\",\"name\":\"MicroBurst\",\"slug\":\"microburst\",\"description\":\"A collection of scripts for assessing Microsoft Azure security.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/NetSPI/MicroBurst\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"azure\",\"cloud\",\"postexploitation\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c13\",\"name\":\"Microsploit\",\"slug\":\"microsploit\",\"description\":\"Quickly and easily create backdoor Office exploitation using module Metasploit packet.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/screetsec/Microsploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"documents\",\"metasploit\",\"office\",\"overflow\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c14\",\"name\":\"Mimicry\",\"slug\":\"mimicry\",\"description\":\"A dynamic deception tool that actively deceives an attacker.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/chaitin/mimicry\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"honeypot\",\"postexploitation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b6\",\"name\":\"MobSF\",\"slug\":\"mobsf\",\"description\":\"Android APK vulnerability analyzer\",\"category\":\"code-analysis\",\"source\":\"https://github.com/MobSF/Mobile-Security-Framework-MobSF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c1c\",\"name\":\"MobSF\",\"slug\":\"mobsf\",\"description\":\"All-in-one mobile application pentesting, malware analysis and security assessment framework.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/MobSF/Mobile-Security-Framework-MobSF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"android\",\"ios\",\"malware\",\"mobile\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59426\",\"name\":\"Mockbin\",\"slug\":\"mockbin\",\"description\":\"HTTP request collector and inspector\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Kong/mockbin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a3\",\"name\":\"Modlishka\",\"slug\":\"modlishka\",\"description\":\"HTTP reverse proxy designed for phishing\",\"category\":\"red-teaming\",\"source\":\"https://github.com/drk1wi/Modlishka\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"2fa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c1d\",\"name\":\"Modlishka\",\"slug\":\"modlishka\",\"description\":\"A powerful and flexible HTTP reverse proxy.\",\"category\":\"network\",\"source\":\"https://github.com/drk1wi/Modlishka\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"mitm\",\"proxy\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5981a\",\"name\":\"Modmobjam\",\"slug\":\"modmobjam\",\"description\":\"Cellular networks jamming PoC for mobile equipments\",\"category\":\"wireless\",\"source\":\"https://github.com/Synacktiv/Modmobjam\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5981b\",\"name\":\"Modmobmap\",\"slug\":\"modmobmap\",\"description\":\"Tool to retrieve information of cellular networks\",\"category\":\"wireless\",\"source\":\"https://github.com/Synacktiv/Modmobmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59657\",\"name\":\"Mona\",\"slug\":\"mona\",\"description\":\"Set of commands for Immunity Debugger\",\"category\":\"plugins\",\"source\":\"https://github.com/corelan/mona\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c20\",\"name\":\"Moriarty\",\"slug\":\"moriarty\",\"description\":\"Designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/BC-SECURITY/Moriarty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c22\",\"name\":\"Mosca\",\"slug\":\"mosca\",\"description\":\"Manual search tool to find bugs like a grep unix command.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/CoolerVoid/Mosca\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"reports\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c23\",\"name\":\"Mosint\",\"slug\":\"mosint\",\"description\":\"An automated e-mail OSINT tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/alpkeskin/mosint\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c24\",\"name\":\"Mr.SIP\",\"slug\":\"mr.sip\",\"description\":\"SIP-based audit and attack tool.\",\"category\":\"network\",\"source\":\"https://github.com/meliht/Mr.SIP\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"scanner\",\"spoofing\",\"voip\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c2e\",\"name\":\"MultiDump\",\"slug\":\"multidump\",\"description\":\"Post-exploitation tool for dumping and extracting LSASS memory discreetly.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Xre0uS/MultiDump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"lsass\",\"memory\",\"postexploitation\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f9\",\"name\":\"Munin\",\"slug\":\"munin\",\"description\":\"Online hash checker for Virustotal and other services\",\"category\":\"incident-response\",\"source\":\"https://github.com/Neo23x0/munin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hybridanalysis\",\"any.run\",\"urlhaus\",\"misp\",\"cape\",\"malshare\",\"valhalla\",\"hashlookup\",\"malware\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59428\",\"name\":\"MyJWT\",\"slug\":\"myjwt\",\"description\":\"A toolkit for signing, forging and cracking JWT tokens\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/tyki6/MyJWT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c32\",\"name\":\"Mythic\",\"slug\":\"mythic\",\"description\":\"A collaborative, multi-platform, red teaming framework.\",\"category\":\"virtualization\",\"source\":\"https://github.com/its-a-feature/Mythic\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"docker\",\"framework\",\"redteam\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a5\",\"name\":\"Mythic\",\"slug\":\"mythic\",\"description\":\"Collaborative red teaming framework\",\"category\":\"red-teaming\",\"source\":\"https://github.com/its-a-feature/Mythic\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a2\",\"name\":\"MÃstica\",\"slug\":\"mstica\",\"description\":\"Allows to embed data into application layer protocol fields, with the goal of establishing a bi-directional channel for arbitrary communications; supports encapsulation into HTTP, HTTPS, DNS and ICMP protocols\",\"category\":\"red-teaming\",\"source\":\"https://github.com/IncideDigital/Mistica\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5951c\",\"name\":\"NExfil\",\"slug\":\"nexfil\",\"description\":\"Finding profiles by username over 350 websites\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/thewhiteh4t/nexfil\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5979f\",\"name\":\"NMapGUI\",\"slug\":\"nmapgui\",\"description\":\"Advanced GUI for Nmap\",\"category\":\"networking\",\"source\":\"https://github.com/danicuestasuarez/NMapGUI\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c54\",\"name\":\"NMapify\",\"slug\":\"nmapify\",\"description\":\"Quickly and accurately create a visual representation of their Nmap output.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Parimal-sh
99aw/NMapify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"images\",\"network\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c5c\",\"name\":\"NSBrute\",\"slug\":\"nsbrute\",\"description\":\"Python utility to takeover domains vulnerable to AWS NS Takeover.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/shivsahni/NSBrute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c5d\",\"name\":\"NSDetect\",\"slug\":\"nsdetect\",\"description\":\"Utility to detect AWS NS Takeover.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/shivsahni/NSDetect\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"dns\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f1\",\"name\":\"NTLM to password\",\"slug\":\"ntlm-to-password\",\"description\":\"NTLM hash lookup table, billions of passwords indexed\",\"category\":\"cracking\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c5e\",\"name\":\"NTLMRecon\",\"slug\":\"ntlmrecon\",\"description\":\"Enumerate information from NTLM authentication enabled web endpoints.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/pwnfoo/NTLMRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"ntlm\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59496\",\"name\":\"NTU Crysis\",\"slug\":\"ntu-crysis\",\"description\":\"Crisis management web application / project for software systems analysis and design\",\"category\":\"crisis-management\",\"source\":\"https://github.com/Temzasse/ntu-crysis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c34\",\"name\":\"Naabu\",\"slug\":\"naabu\",\"description\":\"A fast port scanner written in go with a focus on reliability and simplicity.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/naabu\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"network\",\"ports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c35\",\"name\":\"Nagios\",\"slug\":\"nagios\",\"description\":\"The industry standard in IT infrastructure monitoring.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"logs\",\"monitoring\",\"network\",\"reports\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c36\",\"name\":\"NahamSec\",\"slug\":\"nahamsec\",\"description\":\"NahamSec Twitch channel.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"hackers\",\"learning\",\"recon\",\"videos\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5972f\",\"name\":\"NameScan Email Compromised Check\",\"slug\":\"namescan-email-compromised-check\",\"description\":\"Service to check if an account has been compromised in a data breach, display the breaches not the password\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c37\",\"name\":\"Namechk\",\"slug\":\"namechk\",\"description\":\"Check usernames on more than 100 websites, forums and social networks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/GONZOsint/Namechk\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\",\"socialnetworks\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c38\",\"name\":\"NanoDump\",\"slug\":\"nanodump\",\"description\":\"A flexible tool that creates a minidump of the LSASS process.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/fortra/nanodump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"credentials\",\"lsass\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59632\",\"name\":\"NanoDump\",\"slug\":\"nanodump\",\"description\":\"Minimal LSASS dumper\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/helpsystems/nanodump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ef\",\"name\":\"Narthex\",\"slug\":\"narthex\",\"description\":\"Modular personalized dictionary generator\",\"category\":\"cracking\",\"source\":\"https://github.com/MichaelDim02/Narthex\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59795\",\"name\":\"Ncrack\",\"slug\":\"ncrack\",\"description\":\"Reliable and adaptative network login cracker supporting a large number of protocols\",\"category\":\"networking\",\"source\":\"https://github.com/nmap/ncrack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594de\",\"name\":\"Needle\",\"slug\":\"needle\",\"description\":\"Chrome extension for instant access to bug bounty submission dashboard of various platforms and publicly disclosed reports\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/humblelad/Needle\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"plugin\",\"extension\",\"addon\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c3c\",\"name\":\"Nessus\",\"slug\":\"nessus\",\"description\":\"The global gold standard in vulnerability assessment built for the modern attack surface.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"reports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c3d\",\"name\":\"Nessus database export\",\"slug\":\"nessus-database-export\",\"description\":\"Export Nessus results to a relational database for use in reports, analysis, or whatever else.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/eddiez9/nessus-database-export\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"nessus\",\"reports\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59797\",\"name\":\"NetExec\",\"slug\":\"netexec\",\"description\":\"W
99indows / Active Directory environments pentest; fork of CrackMapExec\",\"category\":\"networking\",\"source\":\"https://github.com/Pennyw0rth/NetExec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c40\",\"name\":\"NetExec\",\"slug\":\"netexec\",\"description\":\"Network service exploitation tool that helps automate assessing the security of large networks.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Pennyw0rth/NetExec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"exploits\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c42\",\"name\":\"NetProbe\",\"slug\":\"netprobe\",\"description\":\"A tool you can use to scan for devices on your network.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/HalilDeniz/NetProbe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"arp\",\"network\",\"probing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c43\",\"name\":\"NetWitness\",\"slug\":\"netwitness\",\"description\":\"Rapidly detect and respond to any threat, anywhere. See Everything. Fear Nothing.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"logs\",\"monitoring\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5951b\",\"name\":\"Netflip\",\"slug\":\"netflip\",\"description\":\"Scrape sensitive information from paste sites\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/maraudery/netflip\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59798\",\"name\":\"Netfort Free Cloud Based PCAP Analysis\",\"slug\":\"netfort-free-cloud-based-pcap-analysis\",\"description\":\"PCAP analyzer; needs registration\",\"category\":\"networking\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596da\",\"name\":\"Netglub\",\"slug\":\"netglub\",\"description\":\"Maltego alternative\",\"category\":\"threat-intelligence\",\"source\":\"http://redmine.lab.diateam.net/attachments/download/1/netglub-1.0.tar.gz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c41\",\"name\":\"Netlas.io\",\"slug\":\"netlas.io\",\"description\":\"Netlas.io is the network atlas of Internet. IP, DNS, Web, IoT devices, and etc.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"dns\",\"ips\",\"network\",\"online\",\"ports\",\"recon\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59429\",\"name\":\"Netsparker\",\"slug\":\"netsparker\",\"description\":\"Web application security scanner\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c44\",\"name\":\"NetworkChuck\",\"slug\":\"networkchuck\",\"description\":\"Network Chuck YouTube channel.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"videos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59799\",\"name\":\"NetworkMiner\",\"slug\":\"networkminer\",\"description\":\"Network sniffer/packet capturing tool\",\"category\":\"networking\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c45\",\"name\":\"NetworkMiner\",\"slug\":\"networkminer\",\"description\":\"Network forensic analysis tool for Windows.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"forensic\",\"network\",\"passwords\",\"sniffer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5979a\",\"name\":\"NetworkTotal\",\"slug\":\"networktotal\",\"description\":\"PCAP analyzer; using Suricata\",\"category\":\"networking\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c47\",\"name\":\"Nexpose\",\"slug\":\"nexpose\",\"description\":\"Vulnerability scanner which aims to
99support the entire vulnerability management lifecycle.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/rapid7/nexpose-resources\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"reports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c48\",\"name\":\"Nginxpwner\",\"slug\":\"nginxpwner\",\"description\":\"Simple tool to look for common Nginx misconfigurations and vulnerabilities.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/stark0de/nginxpwner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59561\",\"name\":\"NightWriter\",\"slug\":\"nightwriter\",\"description\":\"Modern real-time collaborative editing tool secured by end-to-end encryption\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/Titanexx/NightWriter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a6\",\"name\":\"Nighthawk\",\"slug\":\"nighthawk\",\"description\":\"Command \u0026 Control framework; multi-operator, API driven, malleable native implant\",\"category\":\"red-teaming\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c49\",\"name\":\"Nikto\",\"slug\":\"nikto\",\"description\":\"Nikto web server scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/sullo/nikto\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a8\",\"name\":\"NimPlant\",\"slug\":\"nimplant\",\"description\":\"Light-weight first-stage Command \u0026 Control implant\",\"category\":\"red-teaming\",\"source\":\"https://github.com/chvancooten/NimPlant\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c4c\",\"name\":\"NimPlant\",\"slug\":\"nimplant\",\"description\":\"A light-weight first-stage C2 implant written in Nim.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/chvancooten/NimPlant\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"c2c\",\"nim\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a7\",\"name\":\"Nimbo-C2\",\"slug\":\"nimbo-c2\",\"description\":\"Simple and lightweight Command \u0026 Control framework\",\"category\":\"red-teaming\",\"source\":\"https://github.com/itaymigdal/Nimbo-C2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c4a\",\"name\":\"Nimbo-C2\",\"slug\":\"nimbo-c2\",\"description\":\"Yet another (simple and lightweight) C2 framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/itaymigdal/Nimbo-C2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"framework\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c4b\",\"name\":\"Nimbostratus\",\"slug\":\"nimbostratus\",\"description\":\"Tool for fingerprinting and exploiting Amazon cloud infrastructures.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/andresriancho/nimbostratus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"fingerprint\",\"pivot\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5979c\",\"name\":\"Nipe\",\"slug\":\"nipe\",\"description\":\"Script to make TOR as default gateway\",\"category\":\"networking\",\"source\":\"https://github.com/GouveaHeitor/nipe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c4d\",\"name\":\"NipeJS\",\"slug\":\"nipejs\",\"description\":\"Simplify your life with leak detection in JavaScript, NipeJS streamlines the use of regex, making it.\",\"category\":\"development\",\"source\":\"https://github.com/i5nipe/nipejs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"javascript\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f7\",\"name\":\"Nipper Studio\",\"slug\":\"nipper-studio\",\"description\":\"Tool that parse router, switch, firewall configuration to discover vulnerabilities\",\"category\":\"configuration-audit\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f8\",\"name\":\"Nipper-ng\",\"slug\":\"nipper-ng\",\"description\":\"Tool that parse router, switch, firewall configuration to discover vulnerabilities\",\"category\":\"configuration-audit\",\"source\":\"https://github.com/arpitn30/nipper-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59633\",\"name\":\"Nishang\",\"slug\":\"nishang\",\"description\":\"Framework, collection of scripts and payloads in PowerShell for offensive security, penetration testing and red teaming\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/samratashok/nishang\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c4f\",\"name\":\"Nishang\",\"slug\":\"nishang\",\"description\":\"Offensive PowerShell for red team, penetration testing and offensive security.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/samratashok/nishang\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"exfiltration\",\"exploits\",\"mitm\",\"payloads\",\"privesc\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5979d\",\"name\":\"Nmap\",\"slug\":\"nmap\",\"description\":\"Tool for network discovery and security auditing\",\"category\":\"networking\",\"source\":\"https://github.com/nmap/nmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c50\",\"name\":\"Nmap\",\"slug\":\"nmap\",\"description\":\"The network mapper.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/nmap/nmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"ips\",\"network\",\"ports\",\"scanner\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c51\",\"name\":\"Nmap-API\",\"slug\":\"nmap-api\",\"description\":\"Create a Nmap API that can do scans with a good speed online and is easy to deploy.\",\"category\":\"development\",\"source\":\"https://github.com/morpheuslord/Nmap-API\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"nmap\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5951d\",\"name\":\"Nmmapper\",\"slug\":\"nmmapper\",\"description\":\"Cybersecurity tools offered as SaaS: nmap, subdomain finder (Sublist3r, DNScan, Anubis, Amass, Lepus, Findomain, Censys), theHarvester, etc.\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c58\",\"name\":\"NoSQL Injector\",\"slug\":\"nosql-injector\",\"description\":\"NoSql Injection CLI tool for finding vulnerable websites using MongoDB.\",\"category\":\"databases\",\"source\":\"https://github.com/Charlie-belmer/nosqli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mongodb\",\"nosqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c5a\",\"name\":\"NoSQLMap\",\"slug\":\"nosqlmap\",\"description\":\"Automated NoSQL database enumeration and web application exploitation tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/codingo/NoSQLMap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5942b\",\"name\":\"NoSQLMap\",\"slug\":\"nosqlmap\",\"description\":\"Automated NoSQL database enumeration and web application exploitation tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/codingo/NoSQLMap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c55\",\"name\":\"NodeGoat\",\"slug\":\"nodegoat\",\"description\":\"Learn how OWASP Top 10 security risks apply to web applications developed using Node.js.\",\"category\":\"development\",\"source\":\"https://github.com/OWASP/NodeGoat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"nodejs\",\"training\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b7\",\"name\":\"NodeJsScan\",\"slug\":\"nodejsscan\",\"description\":\"Static security code scanner for Node.js applications\",\"category\":\"code-analysis\",\"source\":\"https://github.com/ajinabraham/NodeJsScan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c57\",\"name\":\"Nosey Parker\",\"slug\":\"nosey-parker\",\"description\":\"Command-line tool that finds secrets and sensitive information in textual data and Git history.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/praetorian-inc/noseyparker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"git\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5942c\",\"name\":\"Nosql-Exploitation-Framework\",\"slug\":\"nosql-exploitation-framework\",\"description\":\"NoSQL scanning and exploitation framework\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/torque59/Nosql-Exploitation-Framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c59\",\"name\":\"Nosql-Exploitation-Framework\",\"slug\":\"nosql-exploitation-framework\",\"description\":\"A Python Framework For NoSQL Scanning and Exploitation.\",\"category\":\"databases\",\"source\":\"https://github.com/torque59/Nosql-Exploitation-Framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"couchdb\",\"framework\",\"mongodb\",\"nosql\",\"redis\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c5b\",\"name\":\"Nozaki\",\"slug\":\"nozaki\",\"description\":\"HTTP fuzzer engine security oriented.\",\"category\":\"development\",\"source\":\"https://github.com/htrgouvea/nozaki\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"http\",\"yaml\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a0\",\"name\":\"Nozzlr\",\"slug\":\"nozzlr\",\"description\":\"Multithreaded and modular bruteforce framework with network templates\",\"category\":\"networking\",\"source\":\"https://github.com/intrd/nozzlr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5942e\",\"name\":\"NtHiM\",\"slug\":\"nthim\",\"description\":\"Now, the Host is Mine!; sub-domain takeover detection\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/TheBinitGhimire/NtHiM\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5942d\",\"name\":\"Nuclei\",\"slug\":\"nuclei\",\"description\":\"Web application security scanner based on templates\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/projectdiscovery/nuclei\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c5f\",\"name\":\"Nuclei\",\"slug\":\"nuclei\",\"description\":\"Fast and customizable vulnerability scanner based on simple YAML based DSL.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/projectdiscovery/nuclei\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"fuzzing\",\"scanner\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c60\",\"name\":\"Nuclei templates\",\"slug\":\"nuclei-templates\",\"description\":\"Community curated list of templates for the Nuclei engine to find security vulnerabilities.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/nuclei-templates\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"fuzzing\",\"payloads\",\"resources\",\"scanner\",\"secrets\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59498\",\"name\":\"OASIS EMF\",\"slug\":\"oasis-emf\",\"description\":\"A reference implementation and toolkit for enabling standardized emergency information exchange using the OASIS Emergency Data Exchange Language (EDXL)\",\"category\":\"crisis-management\",\"source\":\"https://github.com/oasis-open/emergency-emf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c64\",\"name\":\"OAUTHScan\",\"slug\":\"oauthscan\",\"description\":\"Burp Suite Extension useful to verify OAUTHv2 and OpenID security.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/PortSwigger/oauth-scan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"burpsuite\",\"openid\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a4\",\"name\":\"ODA\",\"slug\":\"oda\",\"description\":\"Advanced multi-architecture online disassembler supporting a lot of architectures and object file formats\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59520\",\"name\":\"ODIN\",\"slug\":\"odin\",\"description\":\"Observe, Detect, and Investigate Networks, Automated reconnaissance tool\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/chrismaddalena/ODIN\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c6a\",\"name\":\"OFFAT\",\"slug\":\"offat\",\"description\":\"Autonomously assesses your API for prevalent vulnerabilities.\",\"category\":\"development\",\"source\":\"https://github.com/OWASP/OFFAT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"fuzzing\",\"owasp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a3\",\"name\":\"OOB-Server\",\"slug\":\"oob-server\",\"description\":\"Bind9 DNS server for pentesters to use for Out-of-Band vulnerabilities\",\"category\":\"networking\",\"source\":\"https://github.com/JuxhinDB/OOB-Server\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59562\",\"name\":\"OSCP Exam Report Template in Markdown\",\"slug\":\"oscp-exam-report-template-in-markdown\",\"description\":\"Markdown templates for OSCP exam report\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/noraj/OSCP-Exam-Report-Template-Markdown\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59524\",\"name\":\"OSINT Framework\",\"slug\":\"osint-framework\",\"description\":\"A web-based collection of tools and resources for OSINT\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/lockfale/OSINT-Framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"used
99InReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c7e\",\"name\":\"OSINT-Framework\",\"slug\":\"osint-framework\",\"description\":\"OSINT Framework.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/lockfale/OSINT-Framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c7f\",\"name\":\"OSINT-SPY\",\"slug\":\"osint-spy\",\"description\":\"Perform OSINT scan on email/domain/ip address/organization.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/SharadKumar97/OSINT-SPY\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"emails\",\"ips\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c82\",\"name\":\"OSINTui\",\"slug\":\"osintui\",\"description\":\"OSINT from your favorite services in a friendly terminal user interface.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/wssheldon/osintui\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"censys\",\"domains\",\"ips\",\"osint\",\"shodan\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c84\",\"name\":\"OSS-Fuzz\",\"slug\":\"oss-fuzz\",\"description\":\"Continuous Fuzzing for Open Source Software.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/google/oss-fuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c85\",\"name\":\"OSV\",\"slug\":\"osv\",\"description\":\"A distributed vulnerability database for Open Source.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/google/osv.dev\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c86\",\"name\":\"OSX Password Dumper\",\"slug\":\"osx-password-dumper\",\"description\":\"Dump users's .plist on a Mac OS system and to convert them into a crackable hash.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/JeanPeyreMesMots/osx-password-dumper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"macos\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c87\",\"name\":\"OSXAuditor\",\"slug\":\"osxauditor\",\"description\":\"Free Mac OS X computer forensics tool.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/jipegit/OSXAuditor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"forensic\",\"ios\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c88\",\"name\":\"OWASP\",\"slug\":\"owasp\",\"description\":\"A nonprofit foundation that works to improve the security of software.\",\"category\":\"resources\",\"source\":\"https://github.com/OWASP\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cheatsheets\",\"learning\",\"resources\",\"training\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59430\",\"name\":\"OWASP JoomScan\",\"slug\":\"owasp-joomscan\",\"description\":\"Joomla vulnerability scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/rezasp/joomscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ed\",\"name\":\"OWASP Juice Shop\",\"slug\":\"owasp-juice-shop\",\"description\":\"Insecure web application with \u003e85 challenges; supports CTFs, custom themes, tutorial mode etc.\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/bkimminich/juice-shop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c89\",\"name\":\"OWASP Juice Shop\",\"slug\":\"owasp-juice-shop\",\"description\":\"Probably the most modern and sophisticated insecure web application.\",\"category\":\"resources\",\"source\":\"https://github.com/juice-shop/juice-shop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"online\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ee\",\"name\":\"OWASP Mutillidae II\",\"slug\":\"owasp-mutillidae-ii\",\"description\":\"Intentionally vulnerable web-application containing some OWASP Top Ten vulnerabilities, with hints and switch for secure version of the code\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://sourceforge.net/projects/mutillidae/?source=navbar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59563\",\"name\":\"OWASP PenText\",\"slug\":\"owasp-pentext\",\"description\":\"Collection of XML templates, XML schemas and XSLT code, to generate IT security documents including test reports, offers and invoices\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/radicallyopensecurity/pentext\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ef\",\"name\":\"OWASP WebGoat\",\"slug\":\"owasp-webgoat\",\"description\":\"Deliberately insecure web application to teach web application security lessons\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/WebGoat/WebGoat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59431\",\"name\":\"OWASP ZAP\",\"slug\":\"owasp-zap\",\"description\":\"OWASP Zed Attack Proxy, intercepting proxy to replay, inject, scan and fuzz HTTP requests\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/zaproxy/zaproxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c8c\",\"name\":\"OWTF\",\"slug\":\"owtf\",\"description\":\"A framework which tries to unite great tools and make pentesting more efficient.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/owtf/owtf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5981c\",\"name\":\"Oasis\",\"slug\":\"oasis\",\"description\":\"Framework allowing to write, build and patch instrumentation modules for Bluetooth Low Energy (BLE) controllers\",\"category\":\"wireless\",\"source\":\"https://github.com/RCayre/oasis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5951f\",\"name\":\"Oblivion\",\"slug\":\"oblivion\",\"description\":\"Data leak checker and monitoring\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/loseys/Oblivion\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a9\",\"name\":\"Octopus\",\"slug\":\"octopus\",\"description\":\"Pre-operation C2 server\",\"category\":\"red-teaming\",\"source\":\"https://github.com/mhaskar/Octopus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c68\",\"name\":\"Oculus\",\"slug\":\"oculus\",\"description\":\"O
99SINT tool used to discover environments, directories, and subdomains of a particular domain.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/leddcode/Oculus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"directories\",\"emails\",\"firebase\",\"fuzzing\",\"osint\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c6b\",\"name\":\"Offensive Security\",\"slug\":\"offensive-security\",\"description\":\"Offensive Security Youtube channel.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"resources\",\"training\",\"videos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c6c\",\"name\":\"Offensive-Azure\",\"slug\":\"offensive-azure\",\"description\":\"Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/blacklanternsecurity/offensive-azure\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"azure\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c6d\",\"name\":\"Oh365UserFinder\",\"slug\":\"oh365userfinder\",\"description\":\"O365 user enumeration and password spraying tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/dievus/Oh365UserFinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"enumeration\",\"office\",\"osint\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a5\",\"name\":\"OllyDbg\",\"slug\":\"ollydbg\",\"description\":\"Windows debugger\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c6e\",\"name\":\"Ominis OSINT\",\"slug\":\"ominis-osint\",\"description\":\"Perform information gathering from Google for search results related to a user query.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/AnonCatalyst/Ominis-Osint\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"google\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59521\",\"name\":\"Omnibus\",\"slug\":\"omnibus\",\"description\":\"OSINT framework; collection of tools\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/InQuest/omnibus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c70\",\"name\":\"OneForAll\",\"slug\":\"oneforall\",\"description\":\"A powerful subdomain integration tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/shmilylty/OneForAll\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"bruteforce\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59522\",\"name\":\"OneForAll\",\"slug\":\"oneforall\",\"description\":\"Subdomain enumeration tool\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/shmilylty/OneForAll/blob/master/docs/en-us/README.md\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c71\",\"name\":\"OneFuzz\",\"slug\":\"onefuzz\",\"description\":\"A self-hosted fuzzing-as-a-service platform.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/microsoft/onefuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c72\",\"name\":\"Onex\",\"slug\":\"onex\",\"description\":\"Hacking tools installer and package manager for hackers.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/jackind424/onex\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linux\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59523\",\"name\":\"OnionSearch\",\"slug\":\"onionsearch\",\"description\":\"Script that scrapes urls on different .onion search engines\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/megadose/OnionSearch\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c74\",\"name\":\"OpenAPI\",\"slug\":\"openapi\",\"description\":\"Parse OpenAPI specifications into the BurpSuite for automating RESTful API testing.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/openapi-parser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"burpsuite\",\"swagger\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c75\",\"name\":\"OpenBuckets\",\"slug\":\"openbuckets.io\",\"description\":\"Online platform for finding open buckets in cloud storage systems effortlessly.\",\"category\":\"cloud-services\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"buckets\",\"cloud\",\"google\",\"online\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596db\",\"name\":\"OpenCTI\",\"slug\":\"opencti\",\"description\":\"Platform designed for managing and analyzing cyber threat intelligence knowledge, centralizing data using the STIX2 standard and offering visualization and integration capabilities\",\"category\":\"threat-intelligence\",\"source\":\"https://github.com/OpenCTI-Platform/opencti\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ttp\",\"misp\",\"thehive\",\"mitre att\u0026ck\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c77\",\"name\":\"OpenCTI\",\"slug\":\"opencti\",\"description\":\"Open Cyber Threat Intelligence Platform.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/OpenCTI-Platform/opencti\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allineone\",\"online\",\"osint\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c76\",\"name\":\"OpenCanary\",\"slug\":\"opencanary\",\"description\":\"Modular and decentralised honeypot.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/thinkst/opencanary\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"honeypot\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59497\",\"name\":\"OpenEx\",\"slug\":\"openex\",\"description\":\"Platform allowing organizations to plan, schedule and conduct crisis exercises\",\"category\":\"crisis-management\",\"source\":\"https://github.com/OpenEx-Platform/openex\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c78\",\"name\":\"OpenRedireX\",\"slug\":\"openredirex\",\"description\":\"A Fuzzer for OpenRedirect issues.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/devanshbatham/OpenRedireX\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"openredirect\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59731\",\"name\":\"OpenVAS\",\"slug\":\"openvas\",\"description\":\"Open Vulnerability Assessment Scanner\",\"category\":\"other\",\"source\":\"https://github.com/greenbone/openvas\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c79\",\"name\":\"OpenVAS\",\"slug\":\"openvas\",\"description\":\"This repository contains the scanner component for Greenbone Community Edition.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/greenbone/openvas-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c7a\",\"name\":\"Ophcrack\",\"slug\":\"ophcrack\",\"description\":\"W
99indows password cracker based on rainbow tables.\",\"category\":\"auth-perms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"cracker\",\"ntlm\",\"passwords\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f2\",\"name\":\"Ophcrack\",\"slug\":\"ophcrack\",\"description\":\"Windows hash cracker based on rainbow tables\",\"category\":\"cracking\",\"source\":\"https://sourceforge.net/projects/ophcrack/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"password\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c7b\",\"name\":\"Oralyzer\",\"slug\":\"oralyzer\",\"description\":\"Open Redirection Analyzer.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/r0075h3ll/Oralyzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"fuzzing\",\"openredirect\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c7c\",\"name\":\"OrbitalDump\",\"slug\":\"orbitaldump\",\"description\":\"A simple multi-threaded distributed SSH brute-forcing tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/k4yt3x/orbitaldump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"passwords\",\"ssh\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59525\",\"name\":\"Osintgram\",\"slug\":\"osintgram\",\"description\":\"Interactive shell to perform analysis on Instagram account of any users by their nickname\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Datalux/Osintgram\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c80\",\"name\":\"Osintgram\",\"slug\":\"osintgram\",\"description\":\"An interactive shell to perform analysis on Instagram account of any users by its nickname.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Datalux/Osintgram\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"instagram\",\"osint\",\"socialnetworks\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59526\",\"name\":\"Osmedeus\",\"slug\":\"osmedeus\",\"description\":\"Automated framework for reconnaissance and vulnerability scanning\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/j3ssie/Osmedeus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c83\",\"name\":\"Osmedeus\",\"slug\":\"osmedeus\",\"description\":\"A Workflow Engine for Offensive Security\",\"category\":\"auth-perms\",\"source\":\"https://github.com/j3ssie/osmedeus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596fa\",\"name\":\"Osquery\",\"slug\":\"osquery\",\"description\":\"Uses SQL queries to monitor and analyze operating systems, providing endpoint visibility for security\",\"category\":\"incident-response\",\"source\":\"https://github.com/osquery/osquery\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59608\",\"name\":\"Outguess\",\"slug\":\"outguess\",\"description\":\"Tool to hide messages in files (website down since 2004)\",\"category\":\"steganography\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595aa\",\"name\":\"Overlord\",\"slug\":\"overlord\",\"description\":\"CLI used to build Red Teaming infrastructure in an automated way, supports AWS and Digital Ocean\",\"category\":\"red-teaming\",\"source\":\"https://github.com/qsecure-labs/overlord\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c90\",\"name\":\"P4wnP1 A.L.O.A.\",\"slug\":\"p4wnp1-aloa\",\"description\":\"Turn a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming or PE.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/RoganDawes/P4wnP1_aloa\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"framework\",\"network\",\"usb\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f3\",\"name\":\"PACK\",\"slug\":\"pack\",\"description\":\"A collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other password characteristics\",\"category\":\"cracking\",\"source\":\"https://github.com/i
99phelix/pack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a6\",\"name\":\"PANDA\",\"slug\":\"panda\",\"description\":\"Platform for architecture-neutral dynamic analysis\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/panda-re/panda\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"qemu\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a7\",\"name\":\"PASTIS\",\"slug\":\"pastis\",\"description\":\"Fuzzing framework aiming at combining various software testing techniques within the same workflow to perform collaborative fuzzing also called ensemble fuzzing; supported engines are Honggfuzz, AFL++, TritonDSE\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/quarkslab/pastis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca0\",\"name\":\"PCAPdroid\",\"slug\":\"pcapdroid\",\"description\":\"No-root network monitor, firewall and PCAP dumper for Android.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/emanuele-f/PCAPdroid\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"mobile\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca2\",\"name\":\"PCredz\",\"slug\":\"pcredz\",\"description\":\"This tool extracts secrets from a pcap file or from a live interface.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/lgandx/PCredz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mitm\",\"network\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a9\",\"name\":\"PE Explorer Disassembler\",\"slug\":\"pe-explorer-disassembler\",\"description\":\"Windows disassembler\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596aa\",\"name\":\"PE Insider\",\"slug\":\"pe-insider\",\"description\":\"PE viewer, closed source and windows only\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59635\",\"name\":\"PEASS\",\"slug\":\"peass\",\"description\":\"Privilege Escalation Awesome Scripts SUITE; winPEAS and linPEAS are local privilege escalation scripts for Windows and Linux\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca3\",\"name\":\"PEASS-ng\",\"slug\":\"peass-ng\",\"description\":\"Privilege Escalation Awesome Scripts SUITE.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/carlospolop/PEASS-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linux\",\"macos\",\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59658\",\"name\":\"PEDA\",\"slug\":\"peda\",\"description\":\"Python Exploit Development Assistance, (only python2.7)\",\"category\":\"plugins\",\"source\":\"https://github.com/longld/peda\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ac\",\"name\":\"PEzor\",\"slug\":\"pezor\",\"description\":\"Shellcode \u0026 PE Packer\",\"category\":\"red-teaming\",\"source\":\"https://github.com/phra/PEzor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053caf\",\"name\":\"PHPGGC\",\"slug\":\"phpggc\",\"description\":\"PHP unserialize() payloads along with a tool to generate them.\",\"category\":\"development\",\"source\":\"https://github.com/ambionics/phpggc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"deserialization\",\"payloads\",\"php\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59439\",\"name\":\"PHPGGC\",\"slug\":\"phpggc\",\"description\":\"PHP Generic Gadget Chains, library of unserialize() payloads along with a tool to generate them, supporting various PHP frameworks\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/ambionics/phpggc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb2\",\"name\":\"PINCE\",\"slug\":\"pince\",\"description\":\"Reverse engineering tool for linux games.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/korcankaraokcu/PINCE\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"disassembler\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59528\",\"name\":\"PITT\",\"slug\":\"pitt\",\"description\":\"Web browser loaded with links and extensions for doing OSINT\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/TheCyberViking/PublicIntelligenceTool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a9\",\"name\":\"PKINIT tools\",\"slug\":\"pkinit-tools\",\"description\":\"Kerberos PKINIT and relaying to AD CS\",\"category\":\"networking\",\"source\":\"https://github.com/dirkjanm/PKINITtools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59609\",\"name\":\"PNGtools\",\"slug\":\"pngtools\",\"description\":\"Suite of tools to work with PNG images\",\"category\":\"steganography\",\"source\":\"http://www.stillhq.com/svn/trunk/pngtools/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cd9\",\"name\":\"PS2\",\"slug\":\"ps2\",\"description\":\"A port scanner written purely in PowerShell.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/nccgroup/PS2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ports\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cda\",\"name\":\"PSByPassCLM\",\"slug\":\"psbypassclm\",\"description\":\"Bypass for PowerShell Constrained Language Mode.\",\"category\":\"development\",\"source\":\"https://github.com/padovah4ck/PSByPassCLM\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"payloads\",\"powershell\",\"windows\"],\"usedInReports\":false,\"company\":\"\"}
99,{\"_id\":\"6692ff2cd9c7341a02b597ad\",\"name\":\"PSPKIAudit\",\"slug\":\"pspkiaudit\",\"description\":\"AD CS auditing based on the PSPKI toolkit\",\"category\":\"networking\",\"source\":\"https://github.com/GhostPack/PSPKIAudit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5956c\",\"name\":\"PTART\",\"slug\":\"ptart\",\"description\":\"PenTests, Audits, and Reporting Tool; Collaborative penetration test, vulnerability database and reporting platform; fork of Sh00t\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/certmichelin/PTART\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59736\",\"name\":\"PWDQUERY\",\"slug\":\"pwdquery\",\"description\":\"Service to check if an account has been compromised in a data breach, doesn't display breaches, partially display password\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a5\",\"name\":\"PacketFu\",\"slug\":\"packetfu\",\"description\":\"Packet manipulation library; forge, send, decode, capture packets of a wide number of protocols\",\"category\":\"networking\",\"source\":\"https://github.com/packetfu/packetfu\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a6\",\"name\":\"PacketTotal\",\"slug\":\"packettotal\",\"description\":\"PCAP analyzer; using Bro, Suricata and Elasticsearch\",\"category\":\"networking\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a7\",\"name\":\"PacketWhisper\",\"slug\":\"packetwhisper\",\"description\":\"Stealthy Data exfiltration via DNS, without the need for attacker-controlled Name Servers or domain\",\"category\":\"networking\",\"source\":\"https://github.com/TryCatchHCF/PacketWhisper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c91\",\"name\":\"Pacu\",\"slug\":\"pacu\",\"description\":\"The exploitation framework designed for testing the security of AWS environments.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/RhinoSecurityLabs/pacu\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596cc\",\"name\":\"Pacu\",\"slug\":\"pacu\",\"description\":\"AWS exploitation framework\",\"category\":\"cloud\",\"source\":\"https://github.com/RhinoSecurityLabs/pacu\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597eb\",\"name\":\"Pandora\",\"slug\":\"pandora\",\"description\":\"Analysis framework that discovers if a file is suspicious and conveniently show the results\",\"category\":\"defensive\",\"source\":\"https://github.com/pandora-analysis/pandora\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"antivirus\",\"scan\",\"antimalware\",\"detection\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ec\",\"name\":\"Pandora-box\",\"slug\":\"pandora-box\",\"description\":\"Detect and remove malware from USB disks (based on Pandora)\",\"category\":\"defensive\",\"source\":\"https://github.com/dbarzin/pandora-box\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"clamav\",\"comodo antivirus\",\"hashlookup\",\"yara\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59433\",\"name\":\"Panoptic\",\"slug\":\"panoptic\",\"description\":\"Automatic LFI and Path Traversal exploitation tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/lightos/Panoptic\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59434\",\"name\":\"Pappy Proxy\",\"slug\":\"pappy-proxy\",\"description\":\"Proxy Attack Proxy ProxY, HTTP intercepting proxy\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/roglew/pappy-proxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c96\",\"name\":\"ParamPamPam\",\"slug\":\"parampampam\",\"description\":\"This tool for brute discover GET and POST parameters.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Bo0oM/ParamPamPam\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c97\",\"name\":\"ParamSpider\",\"slug\":\"paramspider\",\"description\":\"Mining parameters from dark corners of Web Archives.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/devanshbatham/ParamSpider\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"parameters\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59436\",\"name\":\"ParamSpider\",\"slug\":\"paramspider\",\"description\":\"Finds parameters from web archives of the entered domain\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/devanshbatham/ParamSpider\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59437\",\"name\":\"Paros\",\"slug\":\"paros\",\"description\":\"Intercepting proxy to replay, inject, scan and fuzz HTTP requests\",\"category\":\"web-application-exploitation\",\"source\":\"https://sourceforge.net/projects/paros/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c98\",\"name\":\"Paros Proxy\",\"slug\":\"paros-proxy\",\"description\":\"HTTP(S) proxy for assessing web application vulnerability.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"proxy\",\"reports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c99\",\"name\":\"ParrotSec\",\"slug\":\"parrotsec\",\"description\":\"The ultimate framework for your cyber security operations.\",\"category\":\"network\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mobile\",\"toolkit\",\"training\",\"vm\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c9a\",\"name\":\"Parsero\",\"slug\":\"parsero\",\"description\":\"Robots.txt audit tool.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/behindthefirewalls/Parsero\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59732\",\"name\":\"Pass Station\",\"slug\":\"pass-station\",\"description\":\"CLI \u0026 library to search for default credentials among thousands of Products / Vendors\",\"category\":\"other\",\"source\":\"https://github.com/sec-it/pass-station\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a8\",\"name\":\"Patator\",\"slug\":\"patator\",\"description\":\"Multi-protocol bruteforce tool\",\"category\":\"networking\",\"source\":\"https://github.com/lanjelot/patator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053c9d\",\"name\":\"Patator\",\"slug\":\"patator\",\"description\":\"Multi-purpose brute-forcer, with a modular design and a flexible usage.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/lanjelot/patator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59564\",\"name\":\"PatrOwl\",\"slug\":\"patrowl\",\"description\":\"Security operations orchestration and continuous threat management platform\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/Patrowl/PatrowlManager\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596dc\",\"name\":\"PatrowlHears\",\"slug\":\"patrowlhears\",\"description\":\"Provides a unified source of vulnerability, exploit and threat Intelligence feeds; comprehensive and continuously updated vulnerability database scored and enriched with exploit and threat news information\",\"category\":\"threat-intelligence\",\"source\":\"https://github.com/Patrowl/PatrowlHears\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053c9e\",\"name\":\"PayGen\",\"slug\":\"paygen\",\"description\":\"Tool to generate stable undetected payload.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/youhacker55/PayGen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053c9f\",\"name\":\"Payloads All The Things\",\"slug\":\"payloads-all-the-things\",\"description\":\"A list of useful payloads and bypass for Web Application Security.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/swisskyrepo/PayloadsAllTheThings\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"exploits\",\"payloads\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca1\",\"name\":\"PcapXray\",\"slug\":\"pcapxray\",\"description\":\"Visualize a packet capture offline as a network diagram including device identification.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Srinivas11789/PcapXray\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"forensic\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a8\",\"name\":\"Pe-bear\",\"slug\":\"pe-bear\",\"description\":\"PE reverse tool: recognizes packers, fast disassembler, visualization of sections layout, selective comparing of two chosen PE files\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"683760476bb91c11b836a112\",\"name\":\"PeCoReT\",\"slug\":\"pecoret\",\"description\":\"Pentest Collaboration and Reporting Tool! PeCoReT is designed to be a fully open-source collaboration platform tailored for pentest projects.\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/PeCoReT/pecoret\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59565\",\"name\":\"PeTeReport\",\"slug\":\"petereport\",\"description\":\"Collaborative penetration test, vulnerability database and reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/1modm/petereport\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59438\",\"name\":\"PeepingTom\",\"slug\":\"peepingtom\",\"description\":\"Take screenshots of websites\",\"category\":\"web-application-exploitation\",\"source\":\"https://bitbucket.org/LaNMaSteR53/peepingtom/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59568\",\"name\":\"PenTest.WS\",\"slug\":\"pentestws\",\"description\":\"Collaborative penetration test, vulnerability database and reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"687a8ff43573978c5280b628\",\"name\":\"Pentest Collaboration Framework\",\"slug\":\"pentest collaboration framework\",\"description\":\"Pentest Collaboration Framework - an opensource, cross-platform and portable toolkit for automating routine processes\\nwhen carrying out various works for testing!\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca5\",\"name\":\"Pentest Mapper\",\"slug\":\"pentest-mapper\",\"description\":\"Burp Suite extension for application pentest to write test cases and map flows and vulnerabilities.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/Anof-cyber/Pentest-Mapper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"mapping\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59733\",\"name\":\"PentestBox\",\"slug\":\"pentestbox\",\"description\":\"Pre-configured portable penetration testing environment for Windows, all-in-one box\",\"category\":\"other\",\"source\":\"https://github.com/pentestbox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59567\",\"name\":\"PentestPad\",\"slug\":\"pentestpad\",\"description\":\"Collaborative penetration test between team members and end-clients, vulnerability database and reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a720074f939086d28ccea20\",\"name\":\"Pentestagent\",\"slug\":\"pentestagent\",\"description\":\"PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.\",\"category\":\"ai\",\"source\":\"https://github.com/GH05TCREW/pentestagent\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ai\",\"ai-agents\",\"ai-assistant\",\"ai-cybersecurity\",\"ai-hacking\",\"ai-security-tool\",\"blackbox-testing\",\"ctf-tools\",\"knowledge-graph\",\"llm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca6\",\"name\":\"PentesterLab\",\"slug\":\"pentesterlab\",\"description\":\"Learn Web Penetration Testing: The Right Way.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"challenges\",\"exercices\",\"learning\",\"online\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca7\",\"name\":\"PentesterLand\",\"slug\":\"pentesterland\",\"description\":\"Sharing knowledge that makes your life as bug hunters and pentesters easier.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/pentesterland/pentesterland.github.io\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"reports\",\"resources\",\"
99writeups\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca8\",\"name\":\"PersistenceSniper\",\"slug\":\"persistencesniper\",\"description\":\"Hunt persistences implanted in Windows machines.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/last-byte/PersistenceSniper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"postexploitation\",\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053caa\",\"name\":\"Phishery\",\"slug\":\"phishery\",\"description\":\"An SSL enabled basic auth credential harvester with a Word document template URL injector.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ryhanson/phishery\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"credentials\",\"documents\",\"exploits\",\"phishing\",\"word\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cab\",\"name\":\"Phishing Catcher\",\"slug\":\"phishing-catcher\",\"description\":\"Phishing catcher using Certstream.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/x0rz/phishing_catcher\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"domains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cac\",\"name\":\"PhoneInfoga\",\"slug\":\"phoneinfoga\",\"description\":\"Information gathering framework for phone numbers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/sundowndev/phoneinfoga\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"osint\",\"phones\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59734\",\"name\":\"PhoneSploit Pro\",\"slug\":\"phonesploit-pro\",\"description\":\"Remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session\",\"category\":\"mobile\",\"source\":\"hhttps://github.com/AzeemIdrisi/PhoneSploit-Pro\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cad\",\"name\":\"PhoneSploit-Pro\",\"slug\":\"phonesploit-pro\",\"description\":\"Remotely exploit Android devices using ADB and Metasploit.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/AzeemIdrisi/PhoneSploit-Pro\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"android\",\"metasploit\",\"mobile\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cae\",\"name\":\"Photon\",\"slug\":\"photon\",\"description\":\"Incredibly fast crawler designed for OSINT.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/s0md3v/Photon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\",\"files\",\"javascript\",\"osint\",\"secrets\",\"subdomains\",\"webarchives\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59527\",\"name\":\"Photon\",\"slug\":\"photon\",\"description\":\"Fast crawler designed for OSINT\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/s0md3v/Photon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb1\",\"name\":\"Phunter\",\"slug\":\"phunter\",\"description\":\"OSINT tool allowing you to find various information via a phone number.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/N0rz3/Phunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\",\"phones\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597fa\",\"name\":\"PingCastle\",\"slug\":\"pingcastle\",\"description\":\"Assess the Active Directory security level with a methodology based on risk assessment\",\"category\":\"configuration-audit\",\"source\":\"https://github.com/vletoux/pingcastle\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5943a\",\"name\":\"Pinkerton\",\"slug\":\"pinkerton\",\"description\":\"Crawl JavaScript file to find secret\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/oppsec/Pinkerton\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59735\",\"name\":\"Pipal\",\"slug\":\"pipal\",\"description\":\"Analyze password dump and return statistics about passwords' strength\",\"category\":\"other\",\"source\":\"https://github.com/digininja/pipal\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ae\",\"name\":\"PipeViewer\",\"slug\":\"pipeviewer\",\"description\":\"Shows detailed information about named pipes in Windows and searching for insecure permissions\",\"category\":\"red-teaming\",\"source\":\"https://github.com/cyberark/PipeViewer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb5\",\"name\":\"PipeViewer\",\"slug\":\"pipeviewer\",\"description\":\"A tool that shows detailed information about named pipes in Windows.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/cyberark/PipeViewer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"pipes\",\"utils\",\"
99windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59809\",\"name\":\"PkCrack\",\"slug\":\"pkcrack\",\"description\":\"Tool for breaking PkZip encryption\",\"category\":\"cryptography\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ab\",\"name\":\"Plasma\",\"slug\":\"plasma\",\"description\":\"x86/ARM/MIPS interactive disassembler\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/plasma-disassembler/plasma\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59569\",\"name\":\"PlexTrac\",\"slug\":\"plextrac\",\"description\":\"Collaborative penetration test reporting and vulnerability database platform\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59636\",\"name\":\"PlumHound\",\"slug\":\"plumhound\",\"description\":\"Creates reports for blue and purple teams by extracting data from BloodHound\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/PlumHound/PlumHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\",\"active directory\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cba\",\"name\":\"Poastal\",\"slug\":\"poastal\",\"description\":\"The Email OSINT tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/jakecreps/poastal\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"osint\",\"socialnetworks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5956a\",\"name\":\"Pollenisator\",\"slug\":\"pollenisator\",\"description\":\"Collaborative penetration test and reporting platform (DB + clients, no WebUI)\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/AlgoSecure/Pollenisator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ab\",\"name\":\"Polymorph\",\"slug\":\"polymorph\",\"description\":\"Real-time network packet manipulation framework\",\"category\":\"networking\",\"source\":\"https://github.com/shramos/polymorph\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cbb\",\"name\":\"Pop\",\"slug\":\"pop\",\"description\":\"Send emails from your terminal.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/charmbracelet/pop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"terminal\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cbc\",\"name\":\"Porch-Pirate\",\"slug\":\"porch-pirate\",\"description\":\"The most comprehensive Postman recon / OSINT client and framework.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/mandconsultinggroup/porch-pirate\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"endpoints\",\"osint\",\"postman\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cbd\",\"name\":\"PortBender\",\"slug\":\"portbender\",\"description\":\"A TCP port redirection utility that allows inbound traffic redirection.\",\"category\":\"network\",\"source\":\"https://github.com/praetorian-inc/PortBender\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"tcp\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cbe\",\"name\":\"PortSwigger Cross-Site Scripting cheatsheet data\",\"slug\":\"portswigger-cross-site-scripting-cheatsheet-data\",\"description\":\"All the XSS cheatsheet data to allow contributions from the community.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/PortSwigger/xss-cheatsheet-data\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"payloads\",\"resources\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cbf\",\"name\":\"PortSwigger WebSecurity Academy\",\"slug\":\"portswigger-websecurity-academy\",\"description\":\"Free, online web security training from the creators of Burp Suite.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"challenges\",\"exercices\",\"learning\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5943b\",\"name\":\"Portswigger Labs Inspector\",\"slug\":\"portswigger-labs-inspector\",\"description\":\"Javascript expression evaluator and inspector\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595af\",\"name\":\"PoshC2\",\"slug\":\"poshc2\",\"description\":\"Proxy aware Command \u0026 Control framework\",\"category\":\"red-teaming\",\"source\":\"https://github.com/nettitude/PoshC2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc0\",\"name\":\"PoshC2\",\"slug\":\"poshc2\",\"description\":\"A proxy aware C2 framework used to aid with post-exploitation and lateral movement.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/nettitude/PoshC2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"framework\",\"postexploitation\",\"privesc\",\"proxy\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc3\",\"name\":\"PostMessage_Fuzz_Tool\",\"slug\":\"postmessage_fuzz_tool\",\"description\":\"A PostMessage fuzzing extension for Chrome.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/kiranreddyrebel/PostMessage_Fuzz_Tool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"postmessage\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ac\",\"name\":\"PowerHuntShares\",\"slug\":\"powerhuntshares\",\"description\":\"Audit script to inventory, analyze, and report excessive privileges assigned to SMB shares on Active Directory domain joined computers\",\"category\":\"networking\",\"source\":\"https://github.com/NetSPI/PowerHu
99ntShares\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc6\",\"name\":\"PowerMayhem\",\"slug\":\"powermayhem\",\"description\":\"Powershell payload generator In Bash !\",\"category\":\"development\",\"source\":\"https://github.com/jungawagat/powermayhem\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"payloads\",\"powershell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc8\",\"name\":\"PowerMeUp\",\"slug\":\"powermeup\",\"description\":\"A small library of powershell scripts for post exploitation that you may need or use!\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ItsCyberAli/PowerMeUp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"postexploitation\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc7\",\"name\":\"PowerMeta\",\"slug\":\"powermeta\",\"description\":\"Searches for publicly available files hosted on various websites for a particular domain.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/dafthack/PowerMeta\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"metadata\",\"osint\",\"scraper\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b0\",\"name\":\"PowerShdll\",\"slug\":\"powershdll\",\"description\":\"Run PowerShell with dlls only to bypass software restrictions; it can be run with rundll32.exe, installutil.exe, regsvcs.exe, regasm.exe, regsvr32.exe or as a standalone executable\",\"category\":\"red-teaming\",\"source\":\"https://github.com/p3nt4/PowerShdll\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc9\",\"name\":\"PowerShdll\",\"slug\":\"powershdll\",\"description\":\"Run PowerShell with rundll32 in order to bypass software restrictions.\",\"category\":\"development\",\"source\":\"https://github.com/p3nt4/PowerShdll\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"payloads\",\"powershell\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f5\",\"name\":\"PowerSniper\",\"slug\":\"powersniper\",\"description\":\"Password spraying script and helper for creating password lists\",\"category\":\"cracking\",\"source\":\"https://github.com/codewatchorg/PowerSniper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cca\",\"name\":\"PowerSploit\",\"slug\":\"powersploit\",\"description\":\"A PowerShell Post-Exploitation Framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/PowerShellMafia/PowerSploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"privesc\",\"rce\",\"shell\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59638\",\"name\":\"PowerSploit\",\"slug\":\"powersploit\",\"description\":\"Powershell exploitation framework\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/PowerShellMafia/PowerSploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5943c\",\"name\":\"PowerUpSQL\",\"slug\":\"powerupsql\",\"description\":\"Toolkit for attacking MS SQL Server, discovery, configuration auditing, privilege escalation, post exploitation\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/NetSPI/PowerUpSQL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ccb\",\"name\":\"PowerUpSQL\",\"slug\":\"powerupsql\",\"description\":\"A PowerShell toolkit for attacking SQL Server.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/NetSPI/PowerUpSQL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"postexploitation\",\"privesc\",\"rce\",\"sqlserver\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59637\",\"name\":\"Powerless\",\"slug\":\"powerless\",\"description\":\"A Windows privilege escalation enumeration BAT script designed for legacy Windows machines without Powershell\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/M4ximuss/Powerless\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc5\",\"name\":\"Powermad\",\"slug\":\"powermad\",\"description\":\"PowerShell MachineAccountQuota and DNS exploit tools.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Kevin-Robertson/Powermad\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"dns\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cd0\",\"name\":\"Prenum\",\"slug\":\"prenum\",\"description\":\"The perils of the pre-Windows 2000 compatible access group in a Windows domain.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/4ndr34z/prenum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"kerberos\",\"ldap\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cd1\",\"name\":\"Print-My-Shell\",\"slug\":\"print-my-shell\",\"description\":\"Automate the process of generating various reverse shells.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/sameera-madushan/Print-My-Shell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"privesc\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5956b\",\"name\":\"Prithvi\",\"slug\":\"prithvi\",\"description\":\"Report generation tool for pentester with provided OWASP data\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/vegabird/prithvi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cd2\",\"name\":\"PrivacyNet\",\"slug\":\"privacynet\",\"description\":\"Allow users to route Internet traffic through Tor and hide their real IP address.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/HalilDeniz/PrivacyNet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"privacy\",\"proxy\",\"tor\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59529\",\"name\":\"ProjectDiscovery\",\"slug\":\"projectdiscovery\",\"description\":\"Monitor, collect and continuously query the assets data via a simple webUI\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/projectdiscovery\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b1\",\"name\":\"ProtectMyTooling\",\"slug\":\"protectmytooling\",\"description\":\"Multi-Packer wrapper allowing daisy-chaining various packers and obfuscators; featured with artifacts watermarking, IOCs collection \u0026 PE backdo
99oring\",\"category\":\"red-teaming\",\"source\":\"https://github.com/mgeeky/ProtectMyTooling\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cd4\",\"name\":\"Prowler\",\"slug\":\"prowler\",\"description\":\"Open Source Security tool to perform Cloud Security best practices\",\"category\":\"cloud-services\",\"source\":\"https://github.com/prowler-cloud/prowler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cdb\",\"name\":\"PsMapExec\",\"slug\":\"psmapexec\",\"description\":\"A PowerShell tool heavily inspired by the popular tool CrackMapExec/NetExec.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/The-Viper-One/PsMapExec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"credentials\",\"postexploitation\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cdc\",\"name\":\"Pspy\",\"slug\":\"pspy\",\"description\":\"Unprivileged Linux process snooping.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/DominicBreuker/pspy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linux\",\"privesc\",\"process\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596dd\",\"name\":\"Pulsedive\",\"slug\":\"pulsedive\",\"description\":\"CTI platform to search, scan, and enrich IPs, URLs, domains and other IOCs from OSINT feeds or submit your own\",\"category\":\"threat-intelligence\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cde\",\"name\":\"Puncia\",\"slug\":\"puncia\",\"description\":\"Official CLI utility for Subdomain Center \u0026 Exploit Observer.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ARPSyndicate/puncia\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b2\",\"name\":\"Pupy\",\"slug\":\"pupy\",\"description\":\"Cross-platform, multi function Command \u0026 Control and post-exploitation framework; fileless/all-in-memory execution, low footprint, multi-transport\",\"category\":\"red-teaming\",\"source\":\"https://github.com/n1nj4sec/pupy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ce1\",\"name\":\"PurpleOps\",\"slug\":\"purpleops\",\"description\":\"An open-source self-hosted purple team management web application.\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/CyberCX-STA/PurpleOps\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ctf\",\"framework\",\"online\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5956e\",\"name\":\"PwnDoc\",\"slug\":\"pwndoc\",\"description\":\"Collaborative penetration test reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/pwndoc/pwndoc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ce5\",\"name\":\"PwnDoc\",\"slug\":\"pwndoc\",\"description\":\"Pentest report generator.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/pwndoc/pwndoc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"reports\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5956f\",\"name\":\"PwnDoc-ng\",\"slug\":\"pwndoc-ng\",\"description\":\"Collaborative penetration test reporting platform; fork and improvement of PwnDoc\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/pwndoc-ng/pwndoc-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"}
99,{\"_id\":\"688d0d5d5bc8deef67053ce7\",\"name\":\"PwnFox\",\"slug\":\"pwnfox\",\"description\":\"A Firefox/Burp Suite extension that provide usefull tools for your security audit.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/yeswehack/PwnFox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"burpsuite\",\"firefox\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5965a\",\"name\":\"PwnFox\",\"slug\":\"pwnfox\",\"description\":\"Allow to have multiple identities in the same browser using firefox containers and hightlight the profile used with different colors\",\"category\":\"plugins\",\"source\":\"https://github.com/yeswehack/PwnFox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ce8\",\"name\":\"PwnShell\",\"slug\":\"pwnshell\",\"description\":\"Command execution exploiter with an auto connection handling.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/zAbuQasem/PwnShell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"postexploitation\",\"privesc\",\"rce\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59659\",\"name\":\"Pwndbg\",\"slug\":\"pwndbg\",\"description\":\"Enhance GDB, for exploit development and reverse engineering\",\"category\":\"plugins\",\"source\":\"https://github.com/pwndbg/pwndbg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ceb\",\"name\":\"PyCript\",\"slug\":\"pycript\",\"description\":\"Bypass client-side encryption using custom logic for testing with Python and NodeJS.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/Anof-cyber/PyCript\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"cryptography\",\"encryption\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ced\",\"name\":\"PyExfil\",\"slug\":\"pyexfil\",\"description\":\"Set as many exfiltration, techniques that CAN be used to bypass various.\",\"category\":\"network\",\"source\":\"https://github.com/ytisf/PyExfil\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"dns\",\"exfiltration\",\"http\",\"network\",\"steganography\",\"wifi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf3\",\"name\":\"PyShell\",\"slug\":\"pyshell\",\"description\":\"Multiplatform Python webshell.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/JoelGMSec/PyShell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"rce\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b4\",\"name\":\"PyWSUS\",\"slug\":\"pywsus\",\"description\":\"WSUS server designed to send malicious responses to clients\",\"category\":\"networking\",\"source\":\"https://github.com/GoSecure/pywsus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b3\",\"name\":\"PyWhisker\",\"slug\":\"pywhisker\",\"description\":\"Persistent and stealthy backdooring of user and computer Active Directory objects\",\"category\":\"networking\",\"source\":\"https://github.com/ShutdownRepo/pywhisker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"msds\",\"windows\",\"domain controller\",\"ad cs\",\"ntlm\",\"kerberos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cef\",\"name\":\"Pymeta\",\"slug\":\"pymeta\",\"description\":\"Search the web for files on a domain to download and extract metadata.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/m8sec/pymeta\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"metadata\",\"osint\",\"scraper\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf1\",\"name\":\"Pyrit\",\"slug\":\"pyrit\",\"description\":\"The famous WPA precomputed cracker.\",\"category\":\"network\",\"source\":\"https://github.com/JPaulMora/Pyrit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\",\"wpa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf2\",\"name\":\"Pyscan\",\"slug\":\"pyscan\",\"description\":\"A dependency vulnerability scanner for your python projects, straight from the terminal.\",\"category\":\"development\",\"source\":\"https://github.com/aswinnnn/pyscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"dependencies\",\"development\",\"pip\",\"python\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"697e86252ff80d29082ba14d\",\"name\":\"Python Code Audit\",\"slug\":\"python-code-audit\",\"description\":\"Python Code Audit - A modern Python source code analyzer based on distrust.\\n\\nPython Code Audit is a tool to find security weaknesses in Python code. This static application security testing (SAST) tool has great features to simplify the necessary security tasks and make it fun and easy.\\n\\nThis tool is designed for anyone who uses or creates Python programs and wants to understand and mitigate potential security risks.\\n\\nThis tool is created for:\\n\\n Python Users who want to assess the security risks in the Python code they use.\\n Python Developers: Anyone, from professionals to hobbyists, who wants to deliver secure Python code.\\n Security-Conscious Users: People seeking a simple, fast way to gain insight into potential security vulnerabilities within Python packages or files.\\n\\nCreating secure software can be challenging. This tool, with its comprehensive documentation, acts as your helpful security colleague, making it easier to identify and address vulnerabilities.\",\"category\":\"code-analysis\",\"source\":\"https://github.com/nocomplexity/codeaudit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b8\",\"name\":\"QARK\",\"slug\":\"qark\",\"description\":\"Android APK vulnerability analyzer\",\"category\":\"code-analysis\",\"source\":\"https://github.com/linkedin/qark\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf6\",\"name\":\"QBinDiff\",\"slug\":\"qbindiff\",\"description\":\"Experimental binary diffing tool addressing the diffing as a aetwork alignement quadratic problem.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/quarkslab/qbindiff\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5981d\",\"name\":\"QCSuper\",\"slug\":\"qcsuper\",\"description\":\"Communicate with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames\",\"category\":\"wireless\",\"source\":\"https://github.com/P1sec/QCSuper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"pcap\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ac\",\"name\":\"Qira\",\"slug\":\"qira\",\"description\":\"Timeless debugger (QIRA = QEMU Interactive Runtime Analyser)\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/BinaryAnalysisPlatform/qira\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cfd\",\"name\":\"QuadraInspect\",\"slug\":\"quadrainspect\",\"description\":\"A comprehensive approach to the vulnerability analysis of Android application.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/morpheuslord/QuadraInspect\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"codeanalysis\",\"mobile\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cfe\",\"name\":\"Qualys Cloud Platform\",\"slug\":\"qualys-cloud-platform\",\"description\":\"The revolutionary architecture that powers Qualys' IT, security, and compliance cloud apps.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/Qualys/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"reports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b3\",\"name\":\"Quasar\",\"slug\":\"quasar\",\"description\":\"Remote Administration Tool (RAT) for Windows\",\"category\":\"red-teaming\",\"source\":\"https://github.com/quasar/Quasar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cff\",\"name\":\"Quasar\",\"slug\":\"quasar\",\"description\":\"Remote administration tool for Windows.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/quasar/Quasar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"rat\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d00\",\"name\":\"Quickjack\",\"slug\":\"quickjack\",\"description\":\"Point-and-click tool for producing advanced clickjacking and frame-slicing attacks.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/samyk/quickjack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"clickjacking\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596cd\",\"name\":\"Quiet Riot\",\"slug\":\"quiet-riot\",\"description\":\"Unauthenticated enumeration of cloud principals\",\"category\":\"cloud\",\"source\":\"https://github.com/righteousgambit/quiet-riot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"gcp\",\"azure\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d01\",\"name\":\"R3C0Nizer\",\"slug\":\"r3c0nizer\",\"description\":\"The first ever CLI based menu-driven web application B-Tier recon framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Anon-Artist/R3C0Nizer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"recon\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ad\",\"name\":\"RABCDAsm\",\"slug\":\"rabcdasm\",\"description\":\"ActionScript disassembler\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/CyberShadow/RABCDAsm\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d05\",\"name\":\"RADAR\",\"slug\":\"radar\",\"description\":\"Identify technologies and services used by domains through their DNS footprints.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Elite-Security-Systems/radar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"fingerprint\",\"technologies\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d0c\",\"name\":\"RDP Scraper\",\"slug\":\"rdp-scraper\",\"description\":\"Enumerates users based off RDP Screenshots.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/x90skysn3k/rdpscraper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"rdp\",\"usernames\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d16\",\"name\":\"RED HAWK\",\"slug\":\"red-hawk\",\"description\":\"All in one tool for information gathering, vulnerability scanning and crawling.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Tuhinshubhra/RED_HAWK\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"crawler\",\"dns\",\"recon\",\"scanner\",\"sqli\",\"subdomains\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d2a\",\"name\":\"RESTler\",\"slug\":\"restler\",\"description\":\"A stateful fuzzing tool for automatically testing cloud services through their REST APIs.\",\"category\":\"development\",\"source\":\"https://github.com/microsoft/restler-fuzzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"fuzzing\",\"rest\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ba\",\"name\":\"RMIScout\",\"slug\":\"rmiscout\",\"description\":\"Enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities through wordlist and bruteforce strategies\",\"category\":\"networking\",\"source\":\"https://github.com/BishopFox/rmiscout\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59668\",\"name\":\"ROPgadget\",\"slug\":\"ropgadget\",\"description\":\"Framework for ROP exploitation\",\"category\":\"b
99inary-exploitation\",\"source\":\"https://github.com/JonathanSalwan/ROPgadget\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5980b\",\"name\":\"RSATool\",\"slug\":\"rsatool\",\"description\":\"Tool to calculate RSA parameters\",\"category\":\"cryptography\",\"source\":\"https://github.com/ius/rsatool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5980c\",\"name\":\"RSHack\",\"slug\":\"rshack\",\"description\":\"RSA attack and key manipulation tool\",\"category\":\"cryptography\",\"source\":\"https://github.com/zweisamkeit/RSHack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5943f\",\"name\":\"Rabid\",\"slug\":\"rabid\",\"description\":\"CLI tool and library allowing to simply decode all kind of BigIP cookies\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/noraj/rabid\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d02\",\"name\":\"Raccoon\",\"slug\":\"raccoon\",\"description\":\"A high performance offensive security tool for reconnaissance and vulnerability scanning.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/evyatarmeged/Raccoon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"endpoints\",\"fingerprint\",\"firewall\",\"fuzzing\",\"ips\",\"scanner\",\"ssl\",\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d03\",\"name\":\"Race The Web\",\"slug\":\"race-the-web\",\"description\":\"Tests for race conditions in web applications.\",\"category\":\"development\",\"source\":\"https://github.com/TheHackerDev/race-the-web\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"fuzzing\",\"racecondition\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d04\",\"name\":\"RacePWN\",\"slug\":\"racepwn\",\"description\":\"Race Condition framework.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/racepwn/racepwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"racecondition\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d07\",\"name\":\"RadareEye\",\"slug\":\"radareeye\",\"description\":\"Scan nearby devices and execute command when the target device comes in between range.\",\"category\":\"network\",\"source\":\"https://github.com/souravbaghz/RadareEye\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"iot\",\"network\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d08\",\"name\":\"RainbowCrack\",\"slug\":\"rainbowcrack\",\"description\":\"It crack hashes with rainbow tables.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d09\",\"name\":\"Rapidscan\",\"slug\":\"rapidscan\",\"description\":\"The multi tool web vulnerability scanner.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/skavngr/rapidscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"dns\",\"scanner\",\"sqli\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b1\",\"name\":\"ReFlutter\",\"slug\":\"reflutter\",\"description\":\"Flutter reverse engineering framework: allow traffic monitoring and interception, print classes and functions, display absolute code offset for functions, etc.\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/Impact-I/Reflutter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d0f\",\"name\":\"Reaver\",\"slug\":\"reaver\",\"description\":\"Implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/t6x/reaver-wps-fork-t6x\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"passwords\",\"wifi\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d10\",\"name\":\"Rebind\",\"slug\":\"rebind\",\"description\":\"Implement the multiple A record DNS rebinding attack.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"ips\",\"network\",\"router\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b9\",\"name\":\"Rebind\",\"slug\":\"rebind\",\"description\":\"Implements multiple A record DNS rebinding attack\",\"category\":\"networking\",\"source\":\"https://code.google.com/archive/p/rebind/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b0\",\"name\":\"Recaf\",\"slug\":\"recaf\",\"description\":\"Edit Java bytecode, insert single line Java statements into the bytecode, recompile decompiled code\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/Col-E/Recaf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5952c\",\"name\":\"Recon-ng\",\"slug\":\"recon-ng\",\"description\":\"Web-based reconnaissance tool\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/lanmaster53/recon-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d12\",\"name\":\"Recon-ng\",\"slug\":\"recon-ng\",\"description\":\"O
99SINT tool aimed at reducing the time spent harvesting information from open sources.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/lanmaster53/recon-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5952a\",\"name\":\"ReconDog\",\"slug\":\"recondog\",\"description\":\"Multi-purpose reconnaissance tool, CMS detection, reverse IP lookup, port scan, etc.\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/s0md3v/ReconDog\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d14\",\"name\":\"ReconNess\",\"slug\":\"reconness\",\"description\":\"Continuous recon and pipeline tools setup.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/reconness/reconness\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5952e\",\"name\":\"ReconScan\",\"slug\":\"reconscan\",\"description\":\"Network reconnaissance and vulnerability assessment tools\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/RoliSoft/ReconScan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59570\",\"name\":\"Reconmap\",\"slug\":\"reconmap\",\"description\":\"Reconmap is an open-source penetration testing and report generation tool for Infosec teams that uses templating, automation and machine learning to streamline the delivery of security projects. \",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/reconmap/reconmap\",\"review_youtube_id\":\"ZWIQk_Vd9k4\",\"sponsorship_level\":1,\"keywords\":[\"markdown\",\"2fa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5952d\",\"name\":\"Reconnoitre\",\"slug\":\"reconnoitre\",\"description\":\"Tool made to automate information gathering and service enumeration while storing results\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/codingo/Reconnoitre\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5952f\",\"name\":\"Recsech\",\"slug\":\"recsech\",\"description\":\"Web reconnaissance and vulnerability scanner tool\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/radenvodka/Recsech\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d15\",\"name\":\"RecurseBuster\",\"slug\":\"recursebuster\",\"description\":\"Rapid content discovery tool for recursively querying webservers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/C-Sto/recursebuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59531\",\"name\":\"Red Team Arsenal\",\"slug\":\"red-team-arsenal\",\"description\":\"Automated reconnaissance scanner and security checks\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/flipkart-incubator/RTA\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b5\",\"name\":\"RedELK\",\"slug\":\"redelk\",\"description\":\"Red Team's SIEM; used by Red Teams for tracking and alarming about Blue Team activities as well as better usability in long term operations\",\"category\":\"red-teaming\",\"source\":\"https://github.com/outflanknl/RedELK\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d18\",\"name\":\"RedELK\",\"slug\":\"redelk\",\"description\":\"Tool for Red Teams used for tracking and alarming about Blue Team activities.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/outflanknl/RedELK\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"blueteam\",\"monitoring\",\"redteam\",\"siem\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b6\",\"name\":\"RedEye\",\"slug\":\"redeye\",\"description\":\"Red team C2 log visualization\",\"category\":\"red-teaming\",\"source\":\"https://github.com/cisagov/RedEye\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d19\",\"name\":\"RedEye\",\"slug\":\"redeye\",\"description\":\"RedEye is a visual analytic tool supporting Red \u0026 Blue Team operations.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/cisagov/RedEye\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"blueteam\",\"logs\",\"redteam\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d1a\",\"name\":\"RedHunt-OS\",\"slug\":\"redhunt-os\",\"description\":\"Virtual machine for adversary emulation and threat hunting.\",\"category\":\"virtualization\",\"source\":\"https://github.com/redhuntlabs/RedHunt-OS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"toolkit\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5963b\",\"name\":\"RedSnarf\",\"slug\":\"redsnarf\",\"description\":\"Retrieves hashes and credentials from Windows workstations, servers and domain controllers using OpSec Safe Techniques\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/nccgroup/redsnarf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d1b\",\"name\":\"RedTeam_toolkit\",\"slug\":\"redteam_toolkit\",\"description\":\"Open source Django offensive webapp which is keeping the best tools used in the redteaming.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/signorrayan/RedTeam_toolkit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"directories\",\"reports\",\"scanner\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d17\",\"name\":\"Redacted Request\",\"slug\":\"redacted-request\",\"description\":\"Enhance the security and confidentiality of HTTP request handling within the Burp Suite.\",\"category\":\"network\",\"source\":\"https://github.com/omemishra/Redacted-Request\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"http\",\"reports\",\"requests\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b4\",\"name\":\"Redcloud\",\"slug\":\"redcloud\",\"description\":\"Automated Red Team Infrastru
99cture deployment using Docker\",\"category\":\"red-teaming\",\"source\":\"https://github.com/khast3x/Redcloud\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596de\",\"name\":\"Redirect Tracker\",\"slug\":\"redirect-tracker\",\"description\":\"Track the HTTP redirect chains; 301 and 302, JavaScript and Meta fresh redirects\",\"category\":\"threat-intelligence\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59530\",\"name\":\"Redscan\",\"slug\":\"redscan\",\"description\":\"Mix of a security operations orchestration, vulnerability management and reconnaissance platform\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/certmichelin/Redscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b7\",\"name\":\"ReelPhish\",\"slug\":\"reelphish\",\"description\":\"Real time phishing tool\",\"category\":\"red-teaming\",\"source\":\"https://github.com/mandiant/ReelPhish\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d1e\",\"name\":\"RegStrike\",\"slug\":\"regstrike\",\"description\":\"RegStrike is a .reg payload generator.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/itaymigdal/RegStrike\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"obfuscation\",\"payloads\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d21\",\"name\":\"Rekono\",\"slug\":\"rekono\",\"description\":\"Execute full pentesting processes combining multiple hacking tools automatically.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/pablosnt/rekono\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"automation\",\"organizer\",\"recon\",\"telegram\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b2\",\"name\":\"Relyze\",\"slug\":\"relyze\",\"description\":\"x86 and ARM graphical interactive disassembler with Ruby plugin framework\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d23\",\"name\":\"Rengine\",\"slug\":\"rengine\",\"description\":\"Automated reconnaissance framework for webapps, highly configurable streamlined recon process.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/yogeshojha/rengine\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"framework\",\"ips\",\"osint\",\"scanner\",\"screenshots\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d24\",\"name\":\"Replicator\",\"slug\":\"replicator\",\"description\":\"Burp Suite extension to help developers replicate findings from pentests.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/PortSwigger/replicator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59571\",\"name\":\"Reporter\",\"slug\":\"reporter\",\"description\":\"Collaborative penetration test reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d26\",\"name\":\"Request Highlighter\",\"slug\":\"request-highlighter\",\"description\":\"Burp Suite extension that automatically highlights different HTTP requests.\",\"category\":\"network\",\"source\":\"https://github.com/PortSwigger/request-highlighter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"requests\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59442\",\"name\":\"Request Inspector\",\"slug\":\"request-inspector\",\"description\":\"HTTP request collector and inspector\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59440\",\"name\":\"RequestBin\",\"slug\":\"requestbin\",\"description\":\"HTTP request collector and inspector\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Runscope/requestbin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59441\",\"name\":\"RequestCatcher\",\"slug\":\"requestcatcher\",\"description\":\"HTTP request collector and inspector\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/jbowens/request-catcher\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d27\",\"name\":\"Requests-Racer\",\"slug\":\"requests-racer\",\"description\":\"Exploit race conditions in web apps with Requests.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/nccgroup/requests-racer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"racecondition\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594cf\",\"name\":\"ResourcesExtract\",\"slug\":\"resourcesextract\",\"description\":\"Scans dll/ocx/exe files and extract all resources found, Windows only\",\"category\":\"digital-forensics\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d29\",\"name\":\"Responder\",\"slug\":\"responder\",\"description\":\"Responder is a LLMNR, NBT-NS and MDNS poisoner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/SpiderLabs/Responder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"exploits\",\"ftp\",\"hash\",\"ldap\",\"mssql\",\"passwords\",\"samba\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b8\",\"name\":\"Responder\",\"slug\":\"responder\",\"description\":\"LLMNR, NBT-NS and MDNS poisoner to intercept authentication requests/answers\",\"category\":\"networking\",\"source\":\"https://github.com/SpiderLabs/Responder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b3\",\"name\":\"RetDec\",\"slug\":\"retdec\",\"description\":\"Multi file formats and architectures machine-code decompiler\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/avast-tl/retdec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d2b\",\"name\":\"Retire.js\",\"slug\":\"retire.js\",\"description\":\"Detects the use of JavaScript libraries with known vulnerabilities.\",\"category\":\"development\",\"source\":\"https://github.com/RetireJS/retire.js\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"cves\",\"fingerprint\",\"javascript\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59444\",\"name\":\"Retire.js\",\"slug\":\"retirejs\",\"description\":\"Scanner detecting the use of JavaScript libraries with known vulnerabilities\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/retirejs/retire.js\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d2f\",\"name\":\"RevShells\",\"slug\":\"revshells\",\"description\":\"Hosted Reverse Shell generator with a ton of functionality.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/0dayCTF/reverse-shell-generator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"rce\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59738\",\"name\":\"Reverse Shell Generator\",\"slug\":\"reverse-shell-generator\",\"description\":\"Web-based reverse shell generator, includes features such as listener generation, raw mode, bind shell generation, msfvenom generation, payload encoding, many different languages, tools and shells supported\",\"category\":\"other\",\"source\":\"https://github.com/0dayCTF/reverse-shell-generator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d2c\",\"name\":\"Reverse Shell Generator\",\"slug\":\"rsg\",\"description\":\"A tool to generate various ways to do a reverse shell.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/mthbernardes/rsg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"rce\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d2e\",\"name\":\"ReverseKit\",\"slug\":\"reversekit\",\"description\":\"A dynamic reverse engineering toolkit.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/zer0condition/ReverseKit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"reverse-engineering\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d31\",\"name\":\"RidRelay\",\"slug\":\"ridrelay\",\"description\":\"Enumerate usernames on a domain where you have no creds by using SMB relay.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/skorov/ridrelay\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"domains\",\"ntlm\",\"samba\",\"usernames\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d33\",\"name\":\"Rock-ON\",\"slug\":\"rock-on\",\"description\":\"All in one recon tool that just get a single domain name and do all of the work alone.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/SilverPoision/Rock-ON\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"asn\",\"crawler\",\"directories\",\"domains\",\"ips\",\"ports\",\"recon\",\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59443\",\"name\":\"Rogue JNDI\",\"slug\":\"rogue-jndi\",\"description\":\"A malicious LDAP server for JNDI injection attacks\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/veracode-research/rogue-jndi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d34\",\"name\":\"Ronin\",\"slug\":\"ronin\",\"description\":\"A free and open source Ruby toolkit for security research and development.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ronin-rb/ronin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"asn\",\"dns\",\"exploits\",\"ips\",\"payloads\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59739\",\"name\":\"Ronin\",\"slug\":\"ronin\",\"description\":\"Toolkit for security research and development allowing for the rapid development and distribution of code, exploits, payloads, etc, via 3rd party git repositories\",\"category\":\"other\",\"source\":\"https://github.com/ronin-rb/ronin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d35\",\"name\":\"Rootkit Hunter\",\"slug\":\"rootkit-hunter\",\"description\":\"Scans for rootkits, backdoors and possible local exploits.\",\"category\":\"operating-systems\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"linux\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d36\",\"name\":\"RouterSploit\",\"slug\":\"routersploit\",\"description\":\"Exploitation framework for embedded devices.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/threat9/routersploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"framework\",\"passwords\",\"payloads\",\"router\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597bb\",\"name\":\"RouterSploit\",\"slug\":\"routersploit\",\"description\":\"Exploitation framework for embedded devices: exploits, default credentials, scanners, payloads\",\"category\":\"networking\",\"source\":\"https://github.com/threat9/routersploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5980a\",\"name\":\"RsaCtfTool\",\"slug\":\"rsactftool\",\"description\":\"Tool to conduct manual or automated attack on RSA\",\"category\":\"cryptography\",\"source\":\"https://github.com/Ganapati/RsaCtfTool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d37\",\"name\":\"RsaCtfTool\",\"slug\":\"rsactftool\",\"description\":\"RSA multi-attacks tool: uncypher data from a weak public key and try to recover a private key.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/RsaCtfTool/RsaCtfTool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cryptography\",\"rsa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597bc\",\"name\":\"Rubeus\",\"slug\":\"rubeus\",\"description\":\"Kerberos interaction and abuses\",\"category\":\"networking\",\"source\":\"https://github.com/GhostPack/Rubeus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"tgt\",\"pcks12\",\"ticket\",\"as-req\",\"s4u\",\"ldap\",\"golden\",\"silver\",\"diamond\",\"kerberoasting\",\"as-rep roasting\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d38\",\"name\":\"Rubeus\",\"slug\":\"rubeus\",\"description\":\"Rubeus is a toolkit for Kerberos interaction and abuses.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/GhostPack/Rubeus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"authentication\",\"exploits\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f7\",\"name\":\"RubyHashcat\",\"slug\":\"rubyhashcat\",\"description\":\"Command line wrapper, library, and REST API for oclHashcat\",\"category\":\"cracking\",\"source\":\"https://github.com/praetorian-inc/ruby_hashcat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b8\",\"name\":\"Ruler\",\"slug\":\"ruler\",\"description\":\"Interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP to abuse the client-side Outlook features and gain a shell\",\"category\":\"red-teaming\",\"source\":\"https://github.com/sensepost/ruler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d3a\",\"name\":\"Runtime Mobile Security\",\"slug\":\"runtime-mobile-security\",\"description\":\"A powerful web interface that helps you to manipulate Android and iOS Apps at Runtime.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"frida\",\"ios\",\"mobile\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d3c\",\"name\":\"RustHound\",\"slug\":\"rusthound\",\"description\":\"Active Directory data collector for BloodHound written in Rust.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/NH-RED-TEAM/RustHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"adcs\",\"bloodhound\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597bf\",\"name\":\"RustHound\",\"slug\":\"rusthound\",\"description\
99":\"Active Directory data collector for BloodHound\",\"category\":\"networking\",\"source\":\"https://github.com/OPENCYBER-FR/RustHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d3d\",\"name\":\"RustScan\",\"slug\":\"rustscan\",\"description\":\"The Modern Port Scanner. Fast, smart, effective.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/RustScan/RustScan\",\"review_youtube_id\":\"5EJENryC-o\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"ports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597be\",\"name\":\"Rustcat\",\"slug\":\"rustcat\",\"description\":\"Port and reverse shell listener; less features than ncat, pwncat, pwncat-caleb but has command history\",\"category\":\"networking\",\"source\":\"https://github.com/robiot/rustcat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d3e\",\"name\":\"Rusty Hog\",\"slug\":\"rusty-hog\",\"description\":\"A suite of secret scanners built in Rust for performance.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/newrelic/rusty-hog\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\",\"confluence\",\"git\",\"google\",\"jira\",\"secrets\",\"slack\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d3f\",\"name\":\"S3 Objects Check\",\"slug\":\"s3-objects-check\",\"description\":\"Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/nccgroup/s3_objects_check\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d41\",\"name\":\"S3BucketList\",\"slug\":\"s3bucketlist\",\"description\":\"Firefox plugin that lists Amazon S3 Buckets found in requests.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/AlecBlance/S3BucketList\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"browser\",\"buckets\",\"cloud\",\"firefox\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d43\",\"name\":\"S3Cruze\",\"slug\":\"s3cruze\",\"description\":\"All-in-one AWS S3 bucket tool.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/JR0ch17/S3Cruze\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\",\"cors\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d47\",\"name\":\"S3Scanner\",\"slug\":\"s3scanner\",\"description\":\"Scan for open S3 buckets and dump the contents.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/sa7mon/S3Scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d49\",\"name\":\"S3Viewer\",\"slug\":\"s3viewer\",\"description\":\"Publicly open storage viewer.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/SharonBrizinov/s3viewer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"buckets\",\"cloud\",\"directorylisting\",\"ftp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d52\",\"name\":\"SBOMb\",\"slug\":\"sbomb\",\"description\":\"SBOM parser that performs cursory vulnerability assessment.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/zeroday504/SBOMb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sbom\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c2\",\"name\":\"SCCMHunter\",\"slug\":\"sccmhunter\",\"description\":\"Streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain\",\"category\":\"networking\",\"source\":\"https://github.com/garrettfoster13/sccmhunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596fb\",\"name\":\"SCOT\",\"slug\":\"scot\",\"description\":\"Sandia Cyber Omni Tracker; cyber security incident response management system and knowledge base\",\"category\":\"incident-response\",\"source\":\"https://github.com/sandialabs/scot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5963e\",\"name\":\"SCShell\",\"slug\":\"scshell\",\"description\":\"Fileless lateral movement that relies on ChangeServiceConfigA to run commands\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/Mr-Un1k0d3r/SCShell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\",\"dcerpc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d66\",\"name\":\"SDBF\",\"slug\":\"sdbf\",\"description\":\"Smart DNS Brute Forcer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/jfrancois/SDBF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a4\",\"name\":\"SECMON\",\"slug\":\"secmon\",\"description\":\"Web-based platform for the automation of infosec watching and vulnerability management\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/Guezone/SECMON/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cve\",\"siem\",\"splunk\",\"graylog\",\"monitor\",\"cpe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ba\",\"name\":\"SHAD0W\",\"slug\":\"shad0w\",\"description\":\"Modular
99C2 framework designed to successfully operate covertly on heavily monitored environments\",\"category\":\"red-teaming\",\"source\":\"https://github.com/bats3c/shad0w\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5960a\",\"name\":\"SHIT\",\"slug\":\"shit\",\"description\":\"Stego Helper Identification Tool, multi-purpose image steganography tool\",\"category\":\"steganography\",\"source\":\"https://github.com/qll/shit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595bf\",\"name\":\"SILENTTRINITY\",\"slug\":\"silenttrinity\",\"description\":\"Asynchronous, multiplayer and multiserver Command \u0026 Control framework\",\"category\":\"red-teaming\",\"source\":\"https://github.com/byt3bl33d3r/SILENTTRINITY\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da0\",\"name\":\"SMBAT\",\"slug\":\"smbat\",\"description\":\"Find secrets in file and secret files among the SMB target shares.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/oldboy21/SMBAT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"discovery\",\"enumeration\",\"permissions\",\"samba\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da2\",\"name\":\"SMBeagle\",\"slug\":\"smbeagle\",\"description\":\"Fileshare auditing tool.\",\"category\":\"network\",\"source\":\"https://github.com/punk-security/smbeagle\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"samba\",\"shares\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da3\",\"name\":\"SMBetray\",\"slug\":\"smbetray\",\"description\":\"Attack clients through file content swapping and compromise any data passed in cleartext.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/quickbreach/SMBetray\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"mitm\",\"network\",\"samba\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da5\",\"name\":\"SMBploit\",\"slug\":\"smbploit\",\"description\":\"Offensive tool to scan \u0026 exploit vulnerabilities in Windows over SMB using Metasploit.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/d4t4s3c/SMBploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"metasploit\",\"samba\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c9\",\"name\":\"SNMP Brute\",\"slug\":\"snmp-brute\",\"description\":\"SNMP brute force, enumeration, CISCO config downloader and password cracking script\",\"category\":\"networking\",\"source\":\"https://github.com/SECFORCE/SNMP-Brute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053daf\",\"name\":\"SOAPHound\",\"slug\":\"soaphound\",\"description\":\"Enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/FalconForceTeam/SOAPHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"dotnet\",\"enumeration\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dcf\",\"name\":\"SQLMutant\",\"slug\":\"sqlmutant\",\"description\":\"Searches for automated subdomain enumeration and runs SQLi tests.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/blackhatethicalhacking/SQLMutant\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sqli\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd1\",\"name\":\"SQLRecon\",\"slug\":\"sqlrecon\",\"description\":\"A C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/skahwah/SQLRecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"azure\",\"mssql\",\"sqli\",\"vulnerabilities\",\"
99windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd2\",\"name\":\"SQLTruncSanner\",\"slug\":\"sqltruncsanner\",\"description\":\"Messy BurpSuite plugin for SQL Truncation vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/InitRoot/BurpSQLTruncSanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\",\"sqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc6\",\"name\":\"SQLi-Hunter\",\"slug\":\"sqli-hunter\",\"description\":\"Simple HTTP(S) proxy server and a SQLMAP API wrapper that makes digging SQLi easy.\",\"category\":\"development\",\"source\":\"https://github.com/zt2/sqli-hunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"sqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc8\",\"name\":\"SQLiDetector\",\"slug\":\"sqlidetector\",\"description\":\"Helps you to detect SQL injection \\\"Error based\\\" by sending multiple requests.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/eslam3kl/SQLiDetector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"payloads\",\"scanner\",\"sqli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dca\",\"name\":\"SQLiScanner\",\"slug\":\"sqliscanner\",\"description\":\"Automatic SQL injection with Charles and sqlmap API.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/0xbug/SQLiScanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"sqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59453\",\"name\":\"SQLiv\",\"slug\":\"sqliv\",\"description\":\"SQL injection scanner, find vulnerable entry points\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Hadesy2k/sqliv\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dcb\",\"name\":\"SQLiv\",\"slug\":\"sqliv\",\"description\":\"Massive SQL injection vulnerability scanner.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/the-robot/sqliv\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"sqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd0\",\"name\":\"SQLninja\",\"slug\":\"sqlninja\",\"description\":\"Exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server.\",\"category\":\"vulnerabilities\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd3\",\"name\":\"SSH PuTTY login bruteforcer\",\"slug\":\"ssh-putty-login-bruteforcer\",\"description\":\"A wrapper script which uses PuTTY to perform SSH login bruteforce attacks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/InfosecMatter/SSH-PuTTY-login-bruteforcer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"passwords\",\"ssh\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ddb\",\"name\":\"SSLyze\",\"slug\":\"sslyze\",\"description\":\"Fast and powerful SSL/TLS scanning library.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/nabla-c0d3/sslyze\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssl\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59458\",\"name\":\"SSLyze\",\"slug\":\"sslyze\",\"description\":\"SSL analysis library and a CLI tools\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/nabla-c0d3/sslyze\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssl\",\"tls\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ddc\",\"name\":\"SSRF Detector\",\"slug\":\"ssrf-detector\",\"description\":\"Server-side request forgery detector.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/JacobReynolds/ssrfDetector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59459\",\"name\":\"SSRF Proxy\",\"slug\":\"ssrf
99-proxy\",\"description\":\"Facilitates tunneling HTTP communications through servers vulnerable to SSRF\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/bcoles/ssrf_proxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5945b\",\"name\":\"SSRF Sheriff\",\"slug\":\"ssrf-sheriff\",\"description\":\"Genereate custom endpoint to test SSRF; support any HTTP method, content-specific responses, configurable secret token\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/teknogeek/ssrf-sheriff\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ddd\",\"name\":\"SSRF Sheriff\",\"slug\":\"ssrf-sheriff\",\"description\":\"A simple SSRF-testing sheriff written in Go.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/teknogeek/ssrf-sheriff\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssrf\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053de0\",\"name\":\"SSRFPwned\",\"slug\":\"ssrfpwned\",\"description\":\"Checks for SSRF using custom payloads after fetching URLs from sources \u0026 applying complex patterns.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/blackhatethicalhacking/SSRFPwned\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"payloads\",\"ssrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053de1\",\"name\":\"SSRFTest\",\"slug\":\"ssrftest\",\"description\":\"SSRF testing tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/daeken/SSRFTest\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssrf\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dde\",\"name\":\"SSRFire\",\"slug\":\"ssrfire\",\"description\":\"An automated SSRF finder. Just give the domain name and your server and chill!\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/ksharinarayanan/SSRFire\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"openredirect\",\"ssrf\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5945a\",\"name\":\"SSRFmap\",\"slug\":\"ssrfmap\",\"description\":\"Automatic SSRF fuzzer and exploitation tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/swisskyrepo/SSRFmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ddf\",\"name\":\"SSRFmap\",\"slug\":\"ssrfmap\",\"description\":\"Automatic SSRF fuzzer and exploitation tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/swisskyrepo/SSRFmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"fuzzing\",\"ssrf\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053de2\",\"name\":\"SSTImap\",\"slug\":\"sstimap\",\"description\":\"Automatic SSTI detection tool with interactive interface.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/vladko312/SSTImap\",\"review_youtube_id\":\"hb2xmqJeThU\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"ssti\",\"injection\",\"template\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5945c\",\"name\":\"STEWS\",\"slug\":\"stews\",\"description\":\"Security Testing and Enumeration of WebSockets; tool suite for security testing WebSockets: discover endpoints, fingerprint server, detect vulnerabilities\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/PalindromeLabs/STEWS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e01\",\"name\":\"SUDO_KILLER\",\"slug\":\"sudo_killer\",\"description\":\"A tool to identify and exploit sudo rules misconfigurations and vulnerabilities.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/TH3xACE/SUDO_KILLER\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"privesc\",\"rce\",\"sudo\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e03\",\"name\":\"SUID3NUM\",\"slug\":\"suid3num\",\"description\":\"Standalone script to enumerate SUID binaries, separate default binaries from customs.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/anon-exploiter/suid3num\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linux\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594bc\",\"name\":\"SUPER\",\"slug\":\"super\",\"description\":\"Android APK vulnerability analyzer\",\"category\":\"code-analysis\",\"source\":\"https://github.com/SUPERAndroidAnalyzer/super\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d4a\",\"name\":\"SaaS Sentinel\",\"slug\":\"saas-sentinel\",\"description\":\"Be notified when your favorite tool may be at risk.\",\"category\":\"cloud-services\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"bitbucket\",\"defense\",\"digitalocean\",\"github\",\"gitlab\",\"heroku\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d4c\",\"name\":\"SafeLine\",\"slug\":\"safeline\",\"description\":\"A self-hosted WAF to protect web applications from cyber attacks.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/chaitin/SafeLine\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"defense\",\"waf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d4d\",\"name\":\"Samurai WTF\",\"slug\":\"samurai-wtf\",\"description\":\"The best security training environment for developers and AppSec professionals.\",\"category\":\"resources\",\"source\":\"https://github.com/SamuraiWTF/samuraiwtf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"training\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d4e\",\"name\":\"Sandcastle\",\"slug\":\"sandcastle\",\"description\":\"A Python script for AWS S3 bucket enumeration.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/0xSearches/sandcastle\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ed\",\"name\":\"Santa\",\"slug\":\"santa\",\"description\":\"Binary authorization system for macOS\",\"category\":\"defensive\",\"source\":\"https://github.com/google/santa\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d50\",\"name\":\"SayCheese\",\"slug\":\"saycheese\",\"description\":\"Grab target's webcam shots by link.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hangetzzu/saycheese\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"phishing\",\"social-engineering\",\"webcam\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d51\",\"name\":\"SayHello\",\"slug\":\"sayhello\",\"description\":\"Improved version of SayCheese, designed to capture images via social engineering.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/100security/sayhello\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"phishing\",\"social-engineering\",\"webcam\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d54\",\"name\":\"ScanCannon\",\"slug\":\"scancannon\",\"description\":\"Combines the speed of masscan with the reliability and detailed enumeration of nmap.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/johnnyxmas/ScanCannon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"ports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c1\",\"name\":\"Scapy\",\"slug\":\"scapy\",\"description\":\"Packet manipulation library; forge, send, decode, capture packets of a wide number of protocols\",\"category\":\"networking\",\"source\":\"https://github.com/secdev/scapy/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d56\",\"name\":\"Scapy\",\"slug\":\"scapy\",\"description\":\"Powerful and interactive packet manipulation program and library.\",\"category\":\"network\",\"source\":\"https://github.com/secdev/scapy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"spoofing\",\"tcp\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595b9\",\"name\":\"ScareCrow\",\"slug\":\"scarecrow\",\"description\":\"Payload creation framework designed around EDR bypass\",\"category\":\"red-teaming\",\"source\":\"https://github.com/optiv/ScareCrow\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dll\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d57\",\"name\":\"ScareCrow\",\"slug\":\"scarecrow\",\"description\":\"Payload creation framework designed around EDR bypass.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/optiv/ScareCrow\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"dll\",\"edr\",\"framework\",\"memory\",\"payloads\",\"permissions\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5965b\",\"name\":\"Scavenger\",\"slug\":\"scavenger\",\"description\":\"Create target specific and tailored wordlist from burp history\",\"category\":\"plugins\",\"source\":\"https://github.com/0xDexter0us/Scavenger\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d58\",\"name\":\"Scavenger\",\"slug\":\"scavenger\",\"description\":\"Burp Suite extension to create target specific and tailored wordlist from burp history.\",\"category\":\"resources\",\"source\":\"https://github.com/0xDexter0us/Scavenger\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d59\",\"name\":\"Scilla\",\"slug\":\"scilla\",\"description\":\"Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/edoardottt/scilla\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"dns\",\"ports\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d5a\",\"name\":\"ScopeHunter\",\"slug\":\"scopehunter\",\"description\":\"Command-line tool for finding in-scope targets for bug bounty programs.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/blackhatethicalhacking/ScopeHunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"bugcrowd\",\"hackerone\",\"intigriti\",\"utils\",\"yeswehack\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d5b\",\"name\":\"Scopein\",\"slug\":\"scopein\",\"description\":\"A Go tool for scope management.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/ferreiraklet/scopein\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"organizer\",\"recon\",\"scope\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d5c\",\"name\":\"Scopify\",\"slug\":\"scopify\",\"description\":\"Netify.ai reconnaissance tool.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/Arcanum-Sec/Scopify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cdn\",\"netify\",\"recon\",\"saas\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d5d\",\"name\":\"Scout\",\"slug\":\"scout\",\"description\":\"Discover a web server's undisclosed files, directories and VHOSTs.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/liamg/scout\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"fuzzing\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59447\",\"name\":\"Scout\",\"slug\":\"scout\",\"description\":\"Web directory and file scanner (wordlist bruteforce)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/liamg/scout\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d5e\",\"name\":\"ScoutSuite\",\"slug\":\"scoutsuite\",\"description\":\"Multi-cloud security auditing tool.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/nccgroup/ScoutSuite\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"alibaba\",\"aws\",\"azure\",\"cloud\",\"google\",\"oracle\",\"reports\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d60\",\"name\":\"ScrapeIn\",\"slug\":\"scrapein\",\"description\":\"Harvest employee email addresses from a specific company through LinkedIn.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/landoncrabtree/ScrapeIn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"emails\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d5f\",\"name\":\"ScrapedIn\",\"slug\":\"scrapedin\",\"description\":\"Scrape LinkedIn without API restrictions for data reconnaissance.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/dchrastil/ScrapedIn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linkedin\",\"osint\",\"scraper\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d61\",\"name\":\"ScreenShooter\",\"slug\":\"screenshooter\",\"description\":\"Convert your masscan/subdomain-scan results into screenshots for better analysis.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/si9int/ScreenShooter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"ports\",\"recon\",\"screenshots\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d62\",\"name\":\"Screenshoteer\",\"slug\":\"screenshoteer\",\"description\":\"Makes web screenshots and mobile emulations from the command line.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/vladocar/screenshoteer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d63\",\"name\":\"ScriptSentry\",\"slug\":\"scriptsentry\",\"description\":\"ScriptSentry finds misconfigured and dangerous logon scripts.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/techspence/ScriptSentry\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5973c\",\"name\":\"Scrounger\",\"slug\":\"scrounger\",\"description\":\"Mobile application testing toolkit, the mobile metasploit-like framework\",\"category\":\"mobile\",\"source\":\"https://github.com/nettitude/scrounger\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d64\",\"name\":\"Scrying\",\"slug\":\"scrying\",\"description\":\"Collects RDP, web and VNC screenshots all in one place.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/nccgroup/scrying\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d65\",\"name\":\"Scumblr\",\"slug\":\"scumblr\",\"description\":\"Perform periodic syncs of data sources and performing analysis on the identified results.\",\"category\":\"informations-gathering\",\"source\":\"https://git
99hub.com/Netflix-Skunkworks/Scumblr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"dns\",\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59533\",\"name\":\"SearchDNS\",\"slug\":\"searchdns\",\"description\":\"Netcraft tool; Search and find information for domains and subdomains\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d67\",\"name\":\"SearchSploit\",\"slug\":\"searchsploit\",\"description\":\"Cli tool for Exploit-DB that also allows you to take a copy of Exploit Database with you.\",\"category\":\"auth-perms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5973d\",\"name\":\"SearchSploit\",\"slug\":\"searchsploit\",\"description\":\"CLI tool to search among Exploit-DB exploits\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/offensive-security/exploitdb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d68\",\"name\":\"Seatbelt\",\"slug\":\"seatbelt\",\"description\":\"Performs security oriented safety checks relevant from offensive/defensive security perspectives.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/GhostPack/Seatbelt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"enumeration\",\"privesc\",\"scanner\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d6a\",\"name\":\"SecGen\",\"slug\":\"secgen\",\"description\":\"Create randomly insecure VMs.\",\"category\":\"resources\",\"source\":\"https://github.com/cliffe/SecGen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"challenges\",\"ctf\",\"training\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d6b\",\"name\":\"SecLists\",\"slug\":\"seclists\",\"description\":\"Collection of multiple types of lists used during security assessments, collected in one place.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/danielmiessler/SecLists\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"passwords\",\"payloads\",\"resources\",\"wordlists\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5973e\",\"name\":\"Seccubus\",\"slug\":\"seccubus\",\"description\":\"Vulnerability scanning, reporting and analysis\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/seccubus/seccubus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d6c\",\"name\":\"Second Order\",\"slug\":\"second-order\",\"description\":\"Second-order subdomain takeover scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/mhmdiaa/second-order\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"subdomains\",\"subto\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d6e\",\"name\":\"SecretFinder\",\"slug\":\"secretfinder\",\"description\":\"SecretFinder is a script based on LinkFinder, written to find sensitive data in JavaScript files.\",\"category\":\"development\",\"source\":\"https://github.com/m4ll0k/SecretFinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"javascript\",\"parser\",\"regexp\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d6f\",\"name\":\"SecretMagpie\",\"slug\":\"secretmagpie\",\"description\":\"Secret Detection Tool.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/punk-security/secret-magpie-cli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bitbucket\",\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d70\",\"name\":\"SecretScanner\",\"slug\":\"secretscanner\",\"description\":\"Find secrets and passwords in container images and file systems.\",\"category\":\"virtualization\",\"source\":\"https://github.com/deepfence/SecretScanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"containers\",\"kubernetes\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d71\",\"name\":\"Security Monkey\",\"slug\":\"security_monkey\",\"description\":\"Monitor AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/Netflix/security_monkey\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"github\",\"google\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"69506849d74c4a4e7af0c08d\",\"name\":\"SecurityHeaders.com\",\"slug\":\"securityheaderscom\",\"description\":\"Security Headers is a part of Snyk, a leading cybersecurity company, and was originally created by Scott Helme! It is a free and easy to use tool designed to help you better deploy and understand modern security features that are available for your website.\\n\\nSnyk is a comprehensive developer security platform that enables developers to secure their code, open source dependencies, container images, cloud infrastru
99ctures, as well as web apps and APIs, all from a single unified platform.\\n\\nThere are services out there that will analyse the HTTP response headers of other sites, but we also have a grading system for results. The HTTP response headers that we analyse provide huge levels of protection, and it's important that sites deploy them. Hopefully, by providing an easy mechanism to assess them, and further information on how to deploy missing headers, we can drive up the usage of security based headers across the Web.\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"csp\",\"headers\",\"frame\",\"content-security-policy\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a71fc4e18121efce1f3f8d9\",\"name\":\"SecuritySkills\",\"slug\":\"securityskills\",\"description\":\"Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT\u0026CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.\",\"category\":\"ai-skills\",\"source\":\"https://github.com/UnitOneAI/SecuritySkills\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"agent-skills\",\"ai-security\",\"appsec\",\"cis\",\"claude\",\"claude-code\",\"cloud-security\",\"compliance\",\"devsecops\",\"llm-security\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d73\",\"name\":\"SecurityTrails\",\"slug\":\"securitytrails\",\"description\":\"Data for Security companies, researchers and teams.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"domains\",\"ips\",\"online\",\"subdomains\",\"webarchives\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d74\",\"name\":\"See-SURF\",\"slug\":\"see-surf\",\"description\":\"Detect Vulnerable SSRF parameters.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/In3tinct/See-SURF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"http\",\"parameters\",\"scanner\",\"ssrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59449\",\"name\":\"See-SURF\",\"slug\":\"see-surf\",\"description\":\"SSRF scanner to find entry points\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/In3tinct/See-SURF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d75\",\"name\":\"Seela\",\"slug\":\"seela\",\"description\":\"Boost the cybersecurity skills of your teams with the cyber knowledge library.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ctf\",\"learning\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594b9\",\"name\":\"Semgrep\",\"slug\":\"semgrep\",\"description\":\"Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.\",\"category\":\"code-analysis\",\"source\":\"https://github.com/semgrep/semgrep\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\",\"go\",\"java\",\"javascript\",\"python\",\"r2c\",\"ruby\",\"sast\",\"semgrep\",\"static-analysis\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59572\",\"name\":\"Serpico\",\"slug\":\"serpico\",\"description\":\"SimplE RePort wrIting and CollaboratiOn tool, penetration testing report generation and collaboration tool\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/SerpicoProject/Serpico\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59573\",\"name\":\"Serpico-NG\",\"slug\":\"serpico-ng\",\"description\":\"SimplE RePort wrIting and CollaboratiOn tool NEXT-GENERATION, penetration testing report generation and collaboration tool, fork of Serpico\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/dedins/Serpico-NG\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5944a\",\"name\":\"Session Hijacking Visual Exploitation\",\"slug\":\"session-hijacking-visual-exploitation\",\"description\":\"Hijack user sessions by injecting malicious JavaScript code\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/doyensec/Session-Hijacking-Visual-Exploitation/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d79\",\"name\":\"SessionProbe\",\"slug\":\"sessionprobe\",\"description\":\"Evaluate user privileges in web applications across a list of URLs.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/dub-flow/sessionprobe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"session\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c3\",\"name\":\"Seth\",\"slug\":\"seth\",\"description\":\"RDP MitM tool\",\"category\":\"networking\",\"source\":\"https://github.com/SySS-Research/Seth\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d7a\",\"name\":\"Sguil\",\"slug\":\"sguil\",\"description\":\"The analyst console for network security monitoring.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/bammv/sguil\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"monitoring\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59574\",\"name\":\"Sh00t\",\"slug\":\"sh00t\",\"description\":\"Pentesting platform with dynamic task manager, checklists, bug template \u0026 bug report\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/pavanw3b/sh00t\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d7c\",\"name\":\"Shadow Workers\",\"slug\":\"shadow-workers\",\"description\":\"C2 and proxy designed to help in the exploitation of XSS and malicious Service Workers.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/shadow-workers/shadow-workers\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d7d\",\"name\":\"ShadowSpray\",\"slug\":\"shadowspray\",\"description\":\"Spray shadow credentials across an entire domain.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Dec0ne/ShadowSpray\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"passwords\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5944b\",\"name\":\"ShapeShifter\",\"slug\":\"shapeshifter\",\"description\":\"GraphQL schema extraction to JSON file with introspection\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/szski/shapeshifter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d7e\",\"name\":\"ShapeShifter\",\"slug\":\"shapeshifter\",\"description\":\"GraphQL security testing tool.\",\"category\":\"databases\",\"source\":\"https://github.com/szski/shapeshifter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d81\",\"name\":\"SharPersist\",\"slug\":\"sharpersist\",\"description\":\"W
99indows persistence toolkit written in C#.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/mandiant/SharPersist\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"postexploitation\",\"toolkit\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595bb\",\"name\":\"SharpC2\",\"slug\":\"sharpc2\",\"description\":\"Command \u0026 Control framework\",\"category\":\"red-teaming\",\"source\":\"https://github.com/rasta-mouse/SharpC2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d7f\",\"name\":\"SharpC2\",\"slug\":\"sharpc2\",\"description\":\"Command and Control Framework written in C#.\",\"category\":\"development\",\"source\":\"https://github.com/rasta-mouse/SharpC2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"dotnet\",\"framework\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d80\",\"name\":\"SharpCookieMonster\",\"slug\":\"sharpcookiemonster\",\"description\":\"Extracts cookies from Chrome.\",\"category\":\"development\",\"source\":\"https://github.com/m0rv4i/SharpCookieMonster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"cookies\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595bc\",\"name\":\"SharpEDRChecker\",\"slug\":\"sharpedrchecker\",\"description\":\"Detect and identify the presence of known defensive products such as AV's, EDR's and logging tools\",\"category\":\"red-teaming\",\"source\":\"https://github.com/PwnDexter/SharpEDRChecker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d82\",\"name\":\"SharpHose\",\"slug\":\"sharphose\",\"description\":\"Asynchronous password spraying tool for Windows environments.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ustayready/SharpHose\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"passwords\",\"spraying\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d83\",\"name\":\"SharpImpersonation\",\"slug\":\"sharpimpersonation\",\"description\":\"A User Impersonation tool - via Token or Shellcode injection.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/S3cur3Th1sSh1t/SharpImpersonation\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d84\",\"name\":\"SharpSCCM\",\"slug\":\"sharpsccm\",\"description\":\"A post-exploitation tool designed to leverage Microsoft Endpoint Configuration Manager.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Mayyhem/SharpSCCM\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"microsoft\",\"postexploitation\",\"privesc\",\"sccm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5963f\",\"name\":\"SharpShooter\",\"slug\":\"sharpshooter\",\"description\":\"Payload Generation Framework for C# source code\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/mdsecactivebreach/SharpShooter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d85\",\"name\":\"Shazzer\",\"slug\":\"shazzer\",\"description\":\"Automatically create cheat sheets from all relevant vectors on the system.\",\"category\":\"vulnerabilities\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"online\",\"payloads\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59640\",\"name\":\"ShellPop\",\"slug\":\"shellpop\",\"description\":\"Tool to craft bind and reverse shells in several languages\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/0x00-0x00/ShellPop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d88\",\"name\":\"ShellPop\",\"slug\":\"shellpop\",\"description\":\"Pop shells like a master.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/0x00-0x00/ShellPop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"privesc\",\"rce\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d86\",\"name\":\"Shellcrypt\",\"slug\":\"shellcrypt\",\"description\":\"A QoL tool to obfuscate shellcode.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/iilegacyyii/Shellcrypt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"obfuscation\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595bd\",\"name\":\"Shellcrypt\",\"slug\":\"shellcrypt\",\"description\":\"Obfuscate shellcode using encoding, encryption, compression\",\"category\":\"red-teaming\",\"source\":\"https://github.com/iilegacyyii/Shellcrypt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d87\",\"name\":\"Shelling\",\"slug\":\"shelling\",\"description\":\"A comprehensive OS command injection payload generator.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/ewilded/shelling\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"fuzzing\",\"rce\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d89\",\"name\":\"Shells\",\"slug\":\"shells\",\"description\":\"A script for generating common revshells fast and easily.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/euriconicacio/shells\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"rce\",\"shell\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595be\",\"name\":\"Shelltropy\",\"slug\":\"shelltropy\",\"description\":\"A te
99chnique to hide malicious shellcode based on low-entropy via Shannon encoding\",\"category\":\"red-teaming\",\"source\":\"https://github.com/kleiton0x00/Shelltropy/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d8a\",\"name\":\"Sherlock\",\"slug\":\"sherlock\",\"description\":\"Hunt down social media accounts by username across social networks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/sherlock-project/sherlock\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\",\"usernames\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59534\",\"name\":\"Sherlock\",\"slug\":\"sherlock\",\"description\":\"Hunt down social media accounts by username across social networks\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/sherlock-project/sherlock\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d8c\",\"name\":\"Shodan\",\"slug\":\"shodan\",\"description\":\"Search engine for Internet-connected devices.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"dns\",\"ips\",\"network\",\"online\",\"ports\",\"recon\",\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59535\",\"name\":\"Shodan\",\"slug\":\"shodan\",\"description\":\"Search devices connected to the internet; helps find information about desktops, servers, IoT devices; including metadata such as the software running\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d8e\",\"name\":\"Shotlooter\",\"slug\":\"shotlooter\",\"description\":\"Find sensitive data inside the screenshots uploaded to prnt.sc.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/utkusen/shotlooter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"screenshots\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d8f\",\"name\":\"ShuckNT\",\"slug\":\"shucknt\",\"description\":\"Dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/yanncam/ShuckNT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"ntlm\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d91\",\"name\":\"SiCat\",\"slug\":\"sicat\",\"description\":\"Advanced exploit search tool designed to identify and gather information about exploits.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/justakazh/sicat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c5\",\"name\":\"SiLK\",\"slug\":\"silk\",\"description\":\"System for Internet-Level Knowledge; collection of traffic analysis tools developed to facilitate security analysis of large networks\",\"category\":\"networking\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596fc\",\"name\":\"Sigma\",\"slug\":\"sigma\",\"description\":\"Generic signature format for SIEM systems\",\"category\":\"incident-response\",\"source\":\"https://github.com/SigmaHQ/sigma\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"log\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c4\",\"name\":\"SilentHound\",\"slug\":\"silenthound\",\"description\":\"Quietly enumerates an Active Directory Domain via LDAP parsing users, admins, groups\",\"category\":\"networking\",\"source\":\"https://github.com/layer8secure/SilentHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d92\",\"name\":\"Simple Basic Malware Scanner\",\"slug\":\"simple-basic-malware-scanner\",\"description\":\"Simple Malware Scanner based on file hash scan.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/password123456/malwarescanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"malware\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5944c\",\"name\":\"Simple Local File Inclusion Exploiter\",\"slug\":\"simple-local-file-inclusion-exploiter\",\"description\":\"LF
99I exploit tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://packetstormsecurity.com/files/download/96056/lfi_sploiter.py.txt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d93\",\"name\":\"SimplyEmail\",\"slug\":\"simplyemail\",\"description\":\"Email recon made fast and easy, with a framework to build on.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/SimplySecurity/SimplyEmail\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"framework\",\"osint\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c6\",\"name\":\"Singularity\",\"slug\":\"singularity\",\"description\":\"DNS rebinding attack framework\",\"category\":\"networking\",\"source\":\"https://github.com/nccgroup/singularity\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d94\",\"name\":\"Sirius\",\"slug\":\"sirius\",\"description\":\"Truly open-source general purpose vulnerability scanner.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/SiriusScan/Sirius\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5944d\",\"name\":\"Sitadel\",\"slug\":\"sitadel\",\"description\":\"Web application security scanner, rewrite and newer version of WAScan\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/shenril/Sitadel\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59538\",\"name\":\"SiteBroker\",\"slug\":\"sitebroker\",\"description\":\"Tool for information gathering and penetration test automation\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Anon-Exploiter/SiteBroker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d95\",\"name\":\"SiteBroker\",\"slug\":\"sitebroker\",\"description\":\"Utility for information gathering and penetration testing automation.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/Anon-Exploiter/SiteBroker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloudflare\",\"crawler\",\"shell\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d96\",\"name\":\"Skanuvaty\",\"slug\":\"skanuvaty\",\"description\":\"Dangerously fast DNS/network/port scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Esc4iCEscEsc/skanuvaty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"ips\",\"ports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"697e852e2ff80d29082ba14c\",\"name\":\"Skill Scanner\",\"slug\":\"skill-scanner\",\"description\":\"A security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines pattern-based detection (YAML + YARA), LLM-as-a-judge, and behavioral dataflow analysis for c
99omprehensive threat detection.\\n\\nSupports OpenAI Codex Skills and Cursor Agent Skills formats following the Agent Skills specification.\",\"category\":\"ai-skills\",\"source\":\"https://github.com/cisco-ai-defense/skill-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a71fde00ee43e6965a85fb4\",\"name\":\"SkillSpector\",\"slug\":\"skillspector\",\"description\":\"Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.\",\"category\":\"ai-skills\",\"source\":\"https://github.com/NVIDIA/SkillSpector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"skillspector\",\"security\",\"scanner\",\"agent\",\"skills\",\"detect\",\"vulnerabilities\",\"malicious\",\"patterns\",\"risks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a71fd3e1a2fde4e85e9f7ca\",\"name\":\"Skills\",\"slug\":\"skills\",\"description\":\"Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows\",\"category\":\"ai-skills\",\"source\":\"https://github.com/trailofbits/skills\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"agent-skills\",\"skills\",\"trail\",\"bits\",\"claude\",\"code\",\"security\",\"research\",\"vulnerability\",\"detection\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d98\",\"name\":\"Slack Watchman\",\"slug\":\"slack-watchman\",\"description\":\"Monitoring your Slack workspaces for sensitive informations.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/PaperMtn/slack-watchman\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"files\",\"osint\",\"secrets\",\"slack\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d99\",\"name\":\"Sleepy Puppy\",\"slug\":\"sleepy-puppy\",\"description\":\"Sleepy Puppy XSS Payload Management Framework.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Netflix-Skunkworks/sleepy-puppy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"payloads\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5944f\",\"name\":\"SleuthQL\",\"slug\":\"sleuthql\",\"description\":\"Tool that parses Burp history to discover potential SQL injection points and prepare SQLmap request files\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/RhinoSecurityLabs/SleuthQL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d9a\",\"name\":\"SleuthQL\",\"slug\":\"sleuthql\",\"description\":\"Burp History parsing tool to discover potential SQL injection points.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/RhinoSecurityLabs/SleuthQL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"sqli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d6\",\"name\":\"Sliver\",\"slug\":\"sliver\",\"description\":\"Cross-platform adversary emulation/red team framework used by organizations of all sizes to perform security testing\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/BishopFox/sliver\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\",\"docker\",\"simulation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c0\",\"name\":\"Sliver\",\"slug\":\"sliver\",\"description\":\"Cross-platform implant framework that supports C2 over Mutual-TLS, HTTP(S), and DNS; remote access tool (RAT)\",\"category\":\"red-teaming\",\"source\":\"https://github.com/BishopFox/sliver\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d9d\",\"name\":\"Slurp\",\"slug\":\"slurp\",\"description\":\"A blazing fast \u0026 feature rich Amazon S3 bucket enumerator.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/0xbharath/slurp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5960b\",\"name\":\"SmartDeblur\",\"slug\":\"smartdeblur\",\"description\":\"To to restore defocused and blurred images (update binary only for Windows, Mac OS binary out of date)\",\"category\":\"steganography\",\"source\":\"https://github.com/Y-Vladimir/SmartDeblur\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59575\",\"name\":\"Smersh\",\"slug\":\"smersh\",\"description\":\"Pentest oriented collaborative tool used to track the progress of your company's engagements and generate reports\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/CMEPW/Smersh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59705\",\"name\":\"SmmBackdoorNg\",\"slug\":\"smmbackdoorng\",\"description\":\"System Management Mode (SMM) backdo
99or for UEFI based platforms\",\"category\":\"hardware\",\"source\":\"https://github.com/Cr4sh/SmmBackdoorNg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da6\",\"name\":\"Smogcloud\",\"slug\":\"smogcloud\",\"description\":\"Find cloud assets that no one wants exposed.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/BishopFox/smogcloud\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ce\",\"name\":\"Smogcloud\",\"slug\":\"smogcloud\",\"description\":\"Identify AWS cloud assets\",\"category\":\"cloud\",\"source\":\"https://github.com/BishopFox/smogcloud\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da7\",\"name\":\"SmuggleFuzz\",\"slug\":\"smugglefuzz\",\"description\":\"A rapid HTTP downgrade smuggling scanner written in Go.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Moopinger/smugglefuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"hrs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da8\",\"name\":\"Smuggler\",\"slug\":\"smuggler\",\"description\":\"An HTTP Request Smuggling / Desync testing tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/defparam/smuggler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hrs\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59450\",\"name\":\"Smuggler\",\"slug\":\"smuggler\",\"description\":\"HTTP request smuggling, desync testing\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/defparam/smuggler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59539\",\"name\":\"Sn1per\",\"slug\":\"sn1per\",\"description\":\"Automated reconnaissance scanner\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/1N3/Sn1per\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da9\",\"name\":\"Sn1per\",\"slug\":\"sn1per\",\"description\":\"Attack Surface Management Platform.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/1N3/Sn1per\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053daa\",\"name\":\"Snaffler\",\"slug\":\"snaffler\",\"description\":\"A tool to help at finding delicious candy needles in a bunch of horrible boring haystacks.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/SnaffCon/Snaffler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"exploits\",\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c8\",\"name\":\"Snaffler\",\"slug\":\"snaffler\",\"description\":\"Find credentials and valuable information from windows active directory environments (shares, files)\",\"category\":\"networking\",\"source\":\"https://github.com/SnaffCon/Snaffler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dac\",\"name\":\"Sniff-Paste\",\"slug\":\"sniff-paste\",\"description\":\"Pastebin OSINT harvester.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/needmorecowbell/sniff-paste\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"endpoints\",\"ips\",\"osint\",\"pastebin\",\"phones\",\"ports\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dad\",\"name\":\"SniffAir\",\"slug\":\"sniffair\",\"description\":\"A framework for wireless pentesting.\",\"category\":\"network\",\"source\":\"https://github.com/Tylous/SniffAir\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597cb\",\"name\":\"Snort\",\"slug\":\"snort\",\"description\":\"Intrusion detection system that monitors network traffic for suspicious activities and threats\",\"category\":\"networking\",\"source\":\"https://github.com/snort3/snort3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ids\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b5\",\"name\":\"Snowman\",\"slug\":\"snowman\",\"description\":\"Native code to C/C++ decompiler, supporting x86, AMD64, and ARM architectures, exists as standalone app or as a plug-in\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/yegord/snowman\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053db0\",\"name\":\"Social Mapper\",\"slug\":\"social-mapper\",\"description\":\"A social media enumeration \u0026 correlation tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Greenwolf/social_mapper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"companies\",\"emails\",\"osint\",\"socialnetworks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c1\",\"name\":\"SocialFish\",\"slug\":\"socialfish\",\"description\":\"Phishing targeting social media logins; supports Ngrok tunneling and a mobile controller\",\"category\":\"red-teaming\",\"source\":\"https://github.com/UndeadSec/SocialFish\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\",\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053db3\",\"name\":\"SocialPwned\",\"slug\":\"socialpwned\",\"description\":\"Allows to get the emails from a target published in social networks to find possible credentials.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/MrTuxx/SocialPwned\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"google\",\"instagram\",\"linkedin\",\"osint\",\"passwords\",\"socialnetworks\",\"twitter\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ba\",\"name\":\"SonarQube\",\"slug\":\"sonarqube\",\"description\":\"Automatic code review tool to detect bugs, vulnerabilities; continuous code inspection automated with static code analysis rules\",\"category\":\"code-analysis\",\"source\":\"https://github.com/SonarSource/sonarqube\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053db5\",\"name\":\"SonarSearch\",\"slug\":\"sonarsearch\",\"description\":\"A rapid API for the project Sonar dataset.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Cgboal/SonarSearch\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"domains\",\"ips\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5960c\",\"name\":\"Sonic Visualiser\",\"slug\":\"sonic-visualiser\",\"description\":\"Tool to edit and analyze audio tracks\",\"category\":\"steganography\",\"source\":\"https://sourceforge.net/projects/sv1/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053db7\",\"name\":\"Sort++\",\"slug\":\"sort\",\"description\":\"The next generation Snort Intrusion Prevention System.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/snort3/snort3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"firewall\",\"ips\",\"network\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053db8\",\"name\":\"Sourcegraph\",\"slug\":\"sourcegraph\",\"description\":\"Search millions of open source repositories.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"github\",\"online\",\"regexp\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dbc\",\"name\":\"SpiderFoot\",\"slug\":\"spiderfoot\",\"description\":\"Automates OSINT for threat intelligence and mapping your attack surface.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/smicallef/spiderfoot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"asn\",\"domains\",\"emails\",\"ips\",\"osint\",\"phones\",\"subdomains\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dbd\",\"name\":\"SpiderSuite\",\"slug\":\"spidersuite\",\"description\":\"Advanced web spider/crawler for cyber security professionals.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/3nock/SpiderSuite\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5965c\",\"name\":\"Sploitego\",\"slug\":\"sploitego\",\"description\":\"Maltego penetration testing Transforms\",\"category\":\"plugins\",\"source\":\"https://github.com/allfro/sploitego\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dbe\",\"name\":\"Sploitus\",\"slug\":\"sploitus\",\"description\":\"Exploits \u0026 tools search engine.\",\"category\":\"auth-perms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"online\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dbf\",\"name\":\"Splunk\",\"slug\":\"splunk\",\"description\":\"The unified security and observability platform.\",\"category\":\"cloud-services\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"logs\",\"monitoring\",\"reports\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc1\",\"name\":\"Spoofy\",\"slug\":\"spoofy\",\"description\":\"Checks if a list of domains can be spoofed based on SPF and DMARC records.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/MattKeeley/Spoofy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"spf\",\"spoofing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc2\",\"name\":\"SpoolSploit\",\"slug\":\"spoolsploit\",\"description\":\"Collection of Windows print spooler exploits and other utilities for practical exploitation.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/BeetleChunks/SpoolSploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"printer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc3\",\"name\":\"SprayCannon\",\"slug\":\"spraycannon\",\"description\":\"Fast multithreaded password spraying tool with backend database.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/CausticKirbyZ/SprayCannon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597cc\",\"name\":\"SprayHound\",\"slug\":\"sprayhound\",\"description\":\"Password spraying in Active Directory checking the default domain password policy and the badpwdcount LDAP attribute to avoid account locking, set pwned users as owned in Bloodhound and detect path to Domain Admins\",\"category\":\"networking\",\"source\":\"https://github.com/Hackndo/sprayhound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f9\",\"name\":\"Spraygen\",\"slug\":\"spraygen\",\"description\":\"Permutation-based password list generator\",\"category\":\"cracking\",\"source\":\"https://github.com/3ndG4me/spraygen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59740\",\"name\":\"SprayingToolkit\",\"slug\":\"sprayingtoolkit\",\"description\":\"Password spraying scripts for Lync/S4B and OWA\",\"category\":\"other\",\"source\":\"https://github.com/byt3bl33d3r/SprayingToolkit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc5\",\"name\":\"Spy Extension\",\"slug\":\"spy-extension\",\"description\":\"This Chrome extension will read literally everything it can.\",\"category\":\"development\",\"source\":\"https://github.com/msfrisbie/spy-extension\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"cookies\",\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59455\",\"name\":\"SqliSniper\",\"slug\":\"sqlisniper\",\"description\":\"Time-based blind SQL injection fuzzer for HTTP headers\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/danialhalo/SqliSniper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dcd\",\"name\":\"SqlmapDnsCollaborator\",\"slug\":\"sqlmapdnscollaborator\",\"description\":\"Lets you use Burp Collaborator as a DNS server for exfiltrating data via Sqlmap.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/sqlmap-dns-collaborator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"dns\",\"sqli\",\"sqlmap\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597cf\",\"name\":\"Sshimpanzee\",\"slug\":\"sshimpanzee\",\"description\":\"Builds a static reverse SSH server for pivoting; supports HTTP and SOCKS5 proxies, DNS and ICMP tunnelling, HTTP encapsulation\",\"category\":\"networking\",\"source\":\"https://github.com/lexfo/sshimpanzee\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd6\",\"name\":\"Sshimpanzee\",\"slug\":\"sshimpanzee\",\"description\":\"Reverse shell based on sshd supporting DNS and ICMP tunnelling as well as HTTP and Socks proxies.\",\"category\":\"network\",\"source\":\"https://github.com/lexfo/sshimpanzee\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"shell\",\"ssh\",\"tunnel\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053de3\",\"name\":\"StaCoAn\",\"slug\":\"stacoan\",\"description\":\"Crossplatform tool which help to perform static code analysis on mobile applications.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/vincentcox/StaCoAn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"codeanalysis\",\"endpoints\",\"mobile\",\"reports\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594bb\",\"name\":\"StaCoAn\",\"slug\":\"stacoan\",\"description\":\"Mobile applications static code analysis tool\",\"category\":\"code-analysis\",\"source\":\"https://github.com/vincentcox/StaCoAn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5953b\",\"name\":\"Stalker\",\"slug\":\"stalker\",\"description\":\"Automated scanning of social networks and other websites, using a single nickname\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://gitlab.com/Pxmme/stalker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c2\",\"name\":\"Starkiller\",\"slug\":\"starkiller\",\"description\":\"WebUI for Empire\",\"category\":\"red-teaming\",\"source\":\"https://github.com/BC-SECURITY/Starkiller\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053de4\",\"name\":\"Starkiller\",\"slug\":\"starkiller\",\"description\":\"Starkiller is a frontend for Em
99pire.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/BC-SECURITY/Starkiller\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"framework\",\"postexploitation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5960f\",\"name\":\"StegOnline\",\"slug\":\"stegonline\",\"description\":\"Stego image toolsuite in the browser\",\"category\":\"steganography\",\"source\":\"https://github.com/Ge0rg3/StegOnline\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59611\",\"name\":\"StegSolve\",\"slug\":\"stegsolve\",\"description\":\"Desktop application used to analyze images in different planes by taking off bits of the image.\",\"category\":\"steganography\",\"source\":\"https://github.com/Giotino/stegsolve\",\"review_youtube_id\":\"0gIJAW0mnSg\",\"sponsorship_level\":0,\"keywords\":[\"stenography\",\"image\",\"text\",\"rgb\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5960d\",\"name\":\"Steganabara\",\"slug\":\"steganabara\",\"description\":\"Steganography analysis tool\",\"category\":\"steganography\",\"source\":\"https://github.com/quangntenemy/Steganabara\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5960e\",\"name\":\"Steghide\",\"slug\":\"steghide\",\"description\":\"Tool to hide messages in images\",\"category\":\"steganography\",\"source\":\"https://sourceforge.net/projects/steghide/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59610\",\"name\":\"StegoVeritas\",\"slug\":\"stegoveritas\",\"description\":\"Automatic tool to bruteforce LSB, transform image, extract metadata or trailing data\",\"category\":\"steganography\",\"source\":\"https://github.com/Owlz/stegoVeritas\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5965d\",\"name\":\"Stepper\",\"slug\":\"stepper\",\"description\":\"Evolution of Burp Suite's Repeater tool, providing the ability to create sequences of steps and define regular expressions to extract values from responses\",\"category\":\"plugins\",\"source\":\"https://github.com/CoreyD97/Stepper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053de6\",\"name\":\"Stepper\",\"slug\":\"stepper\",\"description\":\"A natural evolution of Burp Suite's Repeater tool.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/stepper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"regexp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053de8\",\"name\":\"Storm breaker\",\"slug\":\"storm-breaker\",\"description\":\"Social engineering tool, access eebcam \u0026 microphone \u0026 location finder.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ultrasecurity/Storm-Breaker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"geolocation\",\"social-engineering\",\"webcam\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053de9\",\"name\":\"Stratus Red Team\",\"slug\":\"stratus-red-team\",\"description\":\"Granular, actionable adversary emulation for the cloud.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/DataDog/stratus-red-team\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"mitre\",\"redteam\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596d7\",\"name\":\"Stratus Red Team\",\"slug\":\"stratus-red-team\",\"description\":\"Stratus Red Team is 'Atomic Red Team' for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/DataDog/stratus-red-team\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\",\"docker\",\"simulation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dea\",\"name\":\"Striker\",\"slug\":\"striker\",\"description\":\"Offensive information and vulnerability scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/s0md3v/Striker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ports\",\"scanner\",\"subdomains\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dec\",\"name\":\"Sub-Drill\",\"slug\":\"sub-drill\",\"description\":\"A very (very) FAST and simple subdomain finder based on online \u
990026 free services.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Fadavvi/Sub-Drill\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ded\",\"name\":\"Sub3 Suite\",\"slug\":\"sub3-suite\",\"description\":\"A free, open source, cross platform Intelligence gathering tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/3nock/sub3suite\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"endpoints\",\"ips\",\"osint\",\"ports\",\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053def\",\"name\":\"SubBrute\",\"slug\":\"subbrute\",\"description\":\"A DNS meta-query spider that enumerates DNS records, and subdomains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/TheRook/subbrute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5953c\",\"name\":\"SubDomainizer\",\"slug\":\"subdomainizer\",\"description\":\"Find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/nsonaniya2010/SubDomainizer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df1\",\"name\":\"SubDomainizer\",\"slug\":\"subdomainizer\",\"description\":\"A tool to find subdomains and interesting things hidden inside.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/nsonaniya2010/SubDomainizer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"buckets\",\"cloud\",\"digitalocean\",\"endpoints\",\"github\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df3\",\"name\":\"SubGPT\",\"slug\":\"subgpt\",\"description\":\"Find subdomains with GPT, for free.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/s0md3v/SubGPT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gpt\",\"recon\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dfa\",\"name\":\"SubOver\",\"slug\":\"subover\",\"description\":\"A Powerful Subdomain Takeover Tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Ice3man543/SubOver\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\",\"subto\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dfc\",\"name\":\"SubScraper\",\"slug\":\"subscraper\",\"description\":\"Perform subdomain enumeration through various techniques and retrieve detailed output.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/m8sec/subscraper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scraper\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df0\",\"name\":\"SubdomainFinder\",\"slug\":\"subdomainfinder\",\"description\":\"Find subdomains by searching public certificate records.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/matthernet/SubdomainFinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df2\",\"name\":\"Subfinder\",\"slug\":\"subfinder\",\"description\":\"Discovery tool that discovers valid subdomains for websites.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/subfinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df5\",\"name\":\"Subjack\",\"slug\":\"subjack\",\"description\":\"Subdomain Takeover tool written in Go.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/haccer/subjack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subto\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df7\",\"name\":\"Sublert\",\"slug\":\"sublert\",\"description\":\"Monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/yassineaboukir/sublert\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df8\",\"name\":\"Sublist3r\",\"slug\":\"sublist3r\",\"description\":\"Fast subdomains enumeration tool for penetration tester
99s.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/aboul3la/Sublist3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5953e\",\"name\":\"Sublist3r\",\"slug\":\"sublist3r\",\"description\":\"Subdomains enumeration tool\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/aboul3la/Sublist3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dfb\",\"name\":\"Subra\",\"slug\":\"subra\",\"description\":\"A Web-UI for subdomain enumeration.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/si9int/Subra\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"recon\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dfd\",\"name\":\"Substr3am\",\"slug\":\"substr3am\",\"description\":\"Passive reconnaissance/enumeration of interesting targets by watching for SSL certificates.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/nexxai/Substr3am\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e02\",\"name\":\"Sudomy\",\"slug\":\"sudomy\",\"description\":\"Collects subdomains and analyzes domains performing automated reconnaissance.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/screetsec/Sudomy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"ips\",\"ports\",\"scanner\",\"screenshots\",\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59540\",\"name\":\"Sudomy\",\"slug\":\"sudomy\",\"description\":\"Subdomain enumeration tool \",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Screetsec/Sudomy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e05\",\"name\":\"Supernova\",\"slug\":\"supernova\",\"description\":\"Real fucking shellcode encryptor \u0026 obfuscator tool.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/nickvourd/Supernova\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5945d\",\"name\":\"Surf\",\"slug\":\"surf\",\"description\":\"Escalate SSRF vulnerabilities on modern cloud environments, enumerate reachable hosts\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/assetnote/surf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d0\",\"name\":\"Suricata Language Server\",\"slug\":\"suricata-language-server\",\"description\":\"Implementation of the Language Server Protocol for Suricata signatures; real-time rule syntax checking and auto-completion\",\"category\":\"networking\",\"source\":\"https://github.com/StamusNetworks/suricata-language-server\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e07\",\"name\":\"Swagger Jacker\",\"slug\":\"swagger-jacker\",\"description\":\"Designed to assist with auditing of exposed Swagger/OpenAPI) definition files.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/BishopFox/sj\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"endpoints\",\"swagger\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e09\",\"name\":\"SweetPotato\",\"slug\":\"sweetpotato\",\"description\":\"A collection of various Windows privilege escalation techniques from service accounts to SYSTEM.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/CCob/SweetPotato\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b7\",\"name\":\"Swftools\",\"slug\":\"swftools\",\"description\":\"Collection of utilities to work with SWF files\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/matthiaskramm/swftools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59576\",\"name\":\"SwiftnessX\",\"slug\":\"swiftnessx\",\"description\":\"Cross-platform note-taking and target-tracking app for penetration tester
99s\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/ehrishirajsharma/SwiftnessX\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e0a\",\"name\":\"SynapsInt\",\"slug\":\"synapsint\",\"description\":\"Consulting different intelligence services, search engines and datasets for OSINT.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"emails\",\"ips\",\"online\",\"osint\",\"phones\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c3\",\"name\":\"Synergy Httpx\",\"slug\":\"synergy-httpx\",\"description\":\"HTTP(S) server designed to assist in red teaming activities such as receiving intercepted data via POST requests and serving content dynamically\",\"category\":\"red-teaming\",\"source\":\"https://github.com/t3l3machus/Synergy-httpx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e0b\",\"name\":\"Synergy-httpx\",\"slug\":\"synergy-httpx\",\"description\":\"Http(s) server designed to host resources dynamically or act as a receiver for POST data intercepts.\",\"category\":\"network\",\"source\":\"https://github.com/t3l3machus/Synergy-httpx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"proxy\",\"requests\",\"usb\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59577\",\"name\":\"SysReptor\",\"slug\":\"sysreptor\",\"description\":\"Collaborative penetration test, vulnerability database and reporting platform; supports findings in markdown, customized reports in HTML and VueJS, rendering to PDF, MFA, note-taking, data encryption, SSO\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/syslifters/sysreptor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"organizer\",\"reports\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c4\",\"name\":\"SysWhisper3\",\"slug\":\"syswhisper3\",\"description\":\"SysWhispers on Steroid, AV/EDR evasion via direct system calls\",\"category\":\"red-teaming\",\"source\":\"https://github.com/klezVirus/SysWhispers3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e0d\",\"name\":\"SysWhispers\",\"slug\":\"syswhispers\",\"description\":\"AV/EDR evasion via direct system calls.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/jthuraisamy/SysWhispers\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"antivirus\",\"evasion\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e0e\",\"name\":\"T-Pot\",\"slug\":\"t-pot\",\"description\":\"The all in one multi honeypot platform.\",\"category\":\"virtualization\",\"source\":\"https://github.com/telekom-security/tpotce\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"docker\",\"honeypot\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e19\",\"name\":\"TEx\",\"slug\":\"tex\",\"description\":\"Telegram Explorer created to help researchers, investigators and law enforcement agent.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/guibacellar/TEx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"reports\",\"scanner\",\"telegram\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e28\",\"name\":\"TIDoS\",\"slug\":\"tidos\",\"description\":\"The offensive manual web application penetration testing framework.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/0xInfection/TIDoS-Framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"enumeration\",\"framework\",\"fuzzing\",\"osint\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5945f\",\"name\":\"TIDoS Framework\",\"slug\":\"tidos-framework\",\"description\":\"Comprehensive web-app audit framework\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/theInfectedDrake/TIDoS-Framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6883655611a72220adca9018\",\"name\":\"TInjA â the Template INJection Analyzer\",\"slug\":\"tinja-the-template-injection-analyzer\",\"description\":\"TInjA is a CLI tool for testing web pages for template injection vulnerabilities.\\n\\nIt supports 44 of the most relevant template engines (as of September 2023) for eight different programming languages.\\n\\nTInjA was developed by Hackmanit and Maximilian Hildebrand.\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Hackmanit/TInjA\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e2c\",\"name\":\"TLD Scanner\",\"slug\":\"tld-scanner\",\"description\":\"Scan all possible TLD's for a given domain name.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ozzi-/tld_scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"recon\",\"scanner\",\"tld\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e2d\",\"name\":\"TLDHunt\",\"slug\":\"domains,tld,recon\",\"description\":\"Domain availability checker.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/yuyudhn/TLDHunt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59460\",\"name\":\"TLS map\",\"slug\":\"tls-map\",\"description\":\"CLI \u0026 library for mapping TLS cipher algorithm names: IANA, OpenSSL, GnUTLS, NSS\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/sec-it/tls-map\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"68836b76a39bb6a7f2729b4f\",\"name\":\"TLS-Attacker\",\"slug\":\"tls-attacker\",\"description\":\"TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is able to send arbitrary protocol messages in an arbitrary order to the TLS peer, and define their modifications using a provided interface. This gives the developer an opportunity to easily define a custom TLS protocol flow and test it against his TLS library.\\n\\nPlease note: TLS-Attacker is a research tool intended for TLS developers and pentesters. There is no GUI and no green/red lights.\",\"category\":\"cryptography\",\"source\":\"https://github.com/tls-attacker/TLS-Attacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6883727fc14f58d0a7713a42\",\"name\":\"TLS-Scanner\",\"slug\":\"tls-scanner\",\"description\":\"TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations.\",\"category\":\"cryptography\",\"source\":\"https://github.com/tls-attacker/TLS-Scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59641\",\"name\":\"TPMEE\",\"slug\":\"tpmee\",\"description\":\"Help to exploit weak implementation of library or program that used TPM\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/quarkslab/tpmee\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596bb\",\"name\":\"TTD-Bindings\",\"slug\":\"ttd-bindings\",\"description\":\"Bindings for Microsoft WinDBG Time Travel Debugging (TTD)\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/commial/ttd-bindings\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595fa\",\"name\":\"TTPassGen\",\"slug\":\"ttpassgen\",\"description\":\"Flexible and scriptable password dictionary/wordlist generator\",\"category\":\"cracking\",\"source\":\"https://github.com/tp7309/TTPassGen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59548\",\"name\":\"TWINT\",\"slug\":\"twint\",\"description\":\"Twitter Intelligence Tool; Twitter scraping \u0026 OSINT tool that doesn't use Twitter's API, allowing one to scrape a user's followers, following, Tweets and more while evading most API limitations\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/twintproject/twint\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e12\",\"name\":\"Tamper Data\",\"slug\":\"tamper-data\",\"description\":\"View and modify HTTP requests before they are sent.\",\"category\":\"network\",\"source\":\"https://github.com/Pamblam/Tamper-Data-for-FF-Quantum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"firefox\",\"http\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e13\",\"name\":\"Tamper Dev\",\"slug\":\"tamper-dev\",\"description\":\"Allows you to intercept and edit HTTP/HTTPS requests and responses.\",\"category\":\"network\",\"source\":\"https://github.com/google/tamperchrome\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"http\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c5\",\"name\":\"TeamsImplant\",\"slug\":\"teamsimplant\",\"description\":\"MS Teams implant persistent backdoor\",\"category\":\"red-teaming\",\"source\":\"https://github.com/Allevon412/TeamsImplant\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e14\",\"name\":\"Teh S3 Bucketeers\",\"slug\":\"teh-s3-bucketeer
99s\",\"description\":\"Security tool to discover S3 buckets on Amazon's AWS platform.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/tomdev/teh_s3_bucketeers\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59541\",\"name\":\"Tempest\",\"slug\":\"tempest\",\"description\":\"Leverage paste sites as a medium for discovery of objectionable/infringing materials\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/ax-i-om/tempest\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e15\",\"name\":\"Template INJection Analyzer\",\"slug\":\"tinja\",\"description\":\"CLI tool for testing web pages for template injection vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Hackmanit/TInjA\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"payloads\",\"ssti\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688365d011a72220adca9019\",\"name\":\"Template Injection Playground\",\"slug\":\"template-injection-playground\",\"description\":\"With the Template Injection Playground a large number of the most relevant template engines (as of September 2023) can be tested for template injection possibilities. For this purpose, simple web pages are provided, each of which uses one of the template engines. Furthermore, various optional security measures such as sandboxes, encodings, and denylists can be activated.\\n\\nThe Template Injection Playground was developed by Hackmanit and Maximilian Hildebrand.\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/Hackmanit/template-injection-playground\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6883661c11a72220adca901a\",\"name\":\"Template Injection Table\",\"slug\":\"template-injection-table\",\"description\":\"The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities. It was developed by Hackmanit and Maximilian Hildebrand.\\n\\nThe table consists of so-called \\\"polyglots\\\" that can be used to detect template injection possibilities and identify which template engine is used by an application.\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Hackmanit/template-injection-table\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e16\",\"name\":\"TerminatorZ\",\"slug\":\"terminatorz\",\"description\":\"Scan for top potential vulnerabilities with known CVEs in your web applications.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/blackhatethicalhacking/TerminatorZ\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"csrf\",\"cves\",\"rce\",\"scanner\",\"sqli\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594bd\",\"name\":\"Tfsec\",\"slug\":\"tfsec\",\"description\":\"Misconfiguration scanner for terraform code\",\"category\":\"code-analysis\",\"source\":\"https://github.com/aquasecurity/tfsec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sast\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59542\",\"name\":\"Th3inspector\",\"slug\":\"th3inspector\",\"description\":\"Multi-purpose information gathering tool\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Moham3dRiahi/Th3inspector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e1b\",\"name\":\"Th3inspector\",\"slug\":\"th3inspector\",\"description\":\"All in one tool for Information Gathering.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Moham3dRiahi/Th3inspector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloudflare\",\"emails\",\"ips\",\"osint\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e1d\",\"name\":\"The Exploit Database\",\"slug\":\"the-exploit-d
99atabase\",\"description\":\"Archive of public exploits and corresponding vulnerable software.\",\"category\":\"auth-perms\",\"source\":\"https://gitlab.com/exploit-database/exploitdb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"resources\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e1e\",\"name\":\"The HTTP Garden\",\"slug\":\"the-http-garden\",\"description\":\"Differential testing and fuzzing of HTTP servers and proxies.\",\"category\":\"network\",\"source\":\"https://github.com/narfindustries/http-garden\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"http\",\"proxy\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e1f\",\"name\":\"The PenTesters Framework\",\"slug\":\"ptf\",\"description\":\"The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.\",\"category\":\"virtualization\",\"source\":\"https://github.com/trustedsec/ptf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"toolkit\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e20\",\"name\":\"The Social-Engineer Toolkit\",\"slug\":\"the-social-engineer-toolkit\",\"description\":\"Open-source penetration testing framework designed for social engineering.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/trustedsec/social-engineer-toolkit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"osint\",\"social-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e21\",\"name\":\"The Time Machine\",\"slug\":\"the-time-machine\",\"description\":\"Weaponizing WaybackUrls for recon, bug bounties, OSINT, sensitive endpoints and what not.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/anmolksachan/TheTimeMachine\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"fuzzing\",\"osint\",\"webarchives\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e22\",\"name\":\"The Wordlists\",\"slug\":\"the-wordlists\",\"description\":\"A collection of wordlists for many different usages.\",\"category\":\"resources\",\"source\":\"https://github.com/kkrypt0nn/wordlists\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"resources\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e23\",\"name\":\"The XSS rat\",\"slug\":\"the-xss-rat\",\"description\":\"The XSS rat YouTube channel.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"hackers\",\"learning\",\"recon\",\"videos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e1c\",\"name\":\"The art of command line\",\"slug\":\"the-art-of-command-line\",\"description\":\"Master the command line, in one page.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/jlevy/the-art-of-command-line\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bash\",\"linux\",\"shell\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e24\",\"name\":\"TheftFuzzer\",\"slug\":\"theftfuzzer\",\"description\":\"Fuzz Cross-Origin Resource Sharing implementations for common misconfigurations.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/lc/theftfuzzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cors\",\"fuzzing\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e26\",\"name\":\"ThievingFox\",\"slug\":\"thievingfox\",\"description\":\"Post-exploitation tools to gather credentials from various password managers and Windows utilities.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Slowerzs/ThievingFox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"credentials\",\"passwords\",\"postexploitation\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596fd\",\"name\":\"ThreatHound\",\"slug\":\"threathound\",\"description\":\"W
99indows event log file viewer and analyser\",\"category\":\"incident-response\",\"source\":\"https://github.com/MazX0p/ThreatHound\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e0\",\"name\":\"ThreatIngestor\",\"slug\":\"threatingestor\",\"description\":\"Extract and aggregate threat intelligence (IOCs from threat feeds)\",\"category\":\"threat-intelligence\",\"source\":\"https://github.com/InQuest/ThreatIngestor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"misp\",\"twitter\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e1\",\"name\":\"ThreatKB\",\"slug\":\"threatkb\",\"description\":\"Knowledge base workflow management for YARA rules and C2 artifacts\",\"category\":\"threat-intelligence\",\"source\":\"https://github.com/InQuest/ThreatKB\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ip\",\"dns\",\"ssl\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a5\",\"name\":\"ThreatMapper\",\"slug\":\"threatmapper\",\"description\":\"Identify vulnerabilities in running containers, images, hosts and repositories\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/deepfence/ThreatMapper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e27\",\"name\":\"ThreatMapper\",\"slug\":\"threatmapper\",\"description\":\"Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/deepfence/ThreatMapper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"kubernetes\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e2f\",\"name\":\"TokenTactics\",\"slug\":\"tokentactics\",\"description\":\"Azure JWT token manipulation toolset.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rvrsh3ll/TokenTactics\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"azure\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e30\",\"name\":\"Tool WPXStrike\",\"slug\":\"tool-wpxstrike\",\"description\":\"Escalate a Cross-Site Scripting vulnerability to Remote Code Execution in WordPress.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/nowak0x01/WPXStrike/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"privesc\",\"rce\",\"wordpress\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59741\",\"name\":\"Tool-X\",\"slug\":\"tool-x\",\"description\":\"Kali linux hacking tool installer\",\"category\":\"other\",\"source\":\"https://github.com/Rajkumrdusad/Tool-X\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59545\",\"name\":\"Totem\",\"slug\":\"totem\",\"description\":\"Retrieve information about ads of a facebook page, retrieve the number of people targeted, how much the ad cost and a lot of other information\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/megadose/facebook_totem\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e34\",\"name\":\"Tracy\",\"slug\":\"tracy\",\"description\":\"Assists with finding all sinks and sources of a webapp and display the results in a nice way.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/nccgroup/tracy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"firefox\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59462\",\"name\":\"Tracy\",\"slug\":\"tracy\",\"description\":\"Tool that help to manually find XSS\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/nccgroup/tracy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e35\",\"name\":\"TrafficWatch\",\"slug\":\"trafficwatch\",\"description\":\"A packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files.\",\"category\":\"network\",\"source\":\"https://github.com/HalilDeniz/TrafficWatch\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"protocols\",\"sniffer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e37\",\"name\":\"Transformations\",\"slug\":\"transformations\",\"description\":\"Understand how input is transformed on a system, which can help to craft payloads.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/jobertabma/transformations\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"encoding\",\"payloads\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59463\",\"name\":\"TrashCompactor\",\"slug\":\"trashcompactor\",\"description\":\"Remove URLs with duplicate funcionality based on script resources included\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/michael1026/trashcompactor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c6\",\"name\":\"TrevorC2\",\"slug\":\"trevorc2\",\"description\":\"Command and control framework masking the activity by emulating legitimate website\",\"category\":\"red-teaming\",\"source\":\"https://github.com/trustedsec/trevorc2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e39\",\"name\":\"TrevorC2\",\"slug\":\"trevorc2\",\"description\":\"A legitimate website that tunnels client/server communications for c
99overt command execution.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/trustedsec/trevorc2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"exploits\",\"tunnel\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e3a\",\"name\":\"Trishul\",\"slug\":\"trishul\",\"description\":\"Burp Suite Extension to hunt for common vulnerabilities found in websites.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/gauravnarwani97/Trishul\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e3b\",\"name\":\"Triton\",\"slug\":\"triton\",\"description\":\"A dynamic binary analysis library.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/JonathanSalwan/Triton\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"reverse-engineering\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b9\",\"name\":\"Triton\",\"slug\":\"triton\",\"description\":\"Dynamic binary analysis framework, automate reverse engineering\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/JonathanSalwan/Triton/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ba\",\"name\":\"TritonDSE\",\"slug\":\"tritondse\",\"description\":\"Triton-based DSE library with loading and exploration capabilities\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/quarkslab/tritondse\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594be\",\"name\":\"Trivy\",\"slug\":\"trivy\",\"description\":\"Vulnerability and misconfiguration scanner for containers (OS and language-specific packages)\",\"category\":\"code-analysis\",\"source\":\"https://github.com/aquasecurity/trivy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"containers\",\"cves\",\"docker\",\"git\",\"kubernetes\",\"scanner\",\"vm\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59547\",\"name\":\"TruffleHog\",\"slug\":\"trufflehog\",\"description\":\"Find secret information in git repositories\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/trufflesecurity/trufflehog\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"codeanalysis\",\"digitalocean\",\"github\",\"secrets\",\"s3\",\"gitlab\",\"syslog\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e3f\",\"name\":\"TryHackMe\",\"slug\":\"tryhackme\",\"description\":\"Hands-on cyber security training through real-world scenarios.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"online\",\"resources\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d1\",\"name\":\"Tsunami\",\"slug\":\"tsunami\",\"description\":\"Network security scanner with an extensible plugin system\",\"category\":\"networking\",\"source\":\"https://github.com/google/tsunami-security-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e41\",\"name\":\"TugaRecon\",\"slug\":\"tugarecon\",\"description\":\"Subdomains enumeration tool for penetration testers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/skynet0x01/tugarecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e43\",\"name\":\"Turbo Intruder\",\"slug\":\"turbo-intruder\",\"description\":\"Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.\",\"category\":\"network\",\"source\":\"https://github.com/PortSwigger/turbo-intruder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"http\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e44\",\"name\":\"Turbolist3r\",\"slug\":\"turbolist3r\",\"description\":\"Subdomain enumeration tool with analysis features for discovered domains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/fleetcaptain/Turbolist3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d2\",\"name\":\"Turner\",\"slug\":\"turner\",\"description\":\"Tunnels HTTP over a permissive/open TURN server; supports HTTP and SOCKS5 proxy\",\"category\":\"networking\",\"source\":\"https://github.com/staaldraad/turner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"stun\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596bc\",\"name\":\"Tweezer\",\"slug\":\"tweezer\",\"description\":\"Identifying function names in stripped binaries and un-named functions\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/user1342/Tweezer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59465\",\"name\":\"Typo3Scan\",\"slug\":\"typo3scan\",\"description\":\"Enumerate Typo3 version and extensions\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/whoot/Typo3Scan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c7\",\"name\":\"UBoat\",\"slug\":\"uboat\",\"description\":\"HTTP botnet PoC\",\"category\":\"red-teaming\",\"source\":\"https://github.com/Souhardya/UBoat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e46\",\"name\":\"UDPX\",\"slug\":\"udpx\",\"description\":\"Fast and lightweight U
99DP scanner that supports the discovery of many services.\",\"category\":\"network\",\"source\":\"https://github.com/nullt3r/udpx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"scanner\",\"udp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e48\",\"name\":\"UglifyJS\",\"slug\":\"uglifyjs\",\"description\":\"A JavaScript parser, minifier, compressor and beautifier toolkit.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/mishoo/UglifyJS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"javascript\",\"obfuscation\",\"toolkit\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596bd\",\"name\":\"UglifyJS2\",\"slug\":\"uglifyjs2\",\"description\":\"JavaScript obfuscator or beautifier toolkit\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/mishoo/UglifyJS2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e4c\",\"name\":\"Unforce\",\"slug\":\"unforce\",\"description\":\"Salesforce lightning recon and exploitation tool.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/felipecaon/unforce\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"recon\",\"salesforce\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e4f\",\"name\":\"Unicornscan\",\"slug\":\"unicornscan\",\"description\":\"An asynchronous TCP and UDP port scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://gitlab.com/kalilinux/packages/unicornscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"network\",\"ports\",\"scanner\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59466\",\"name\":\"Uniscan\",\"slug\":\"uniscan\",\"description\":\"RFI, LFi and RCE scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://sourceforge.net/projects/uniscan/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e51\",\"name\":\"Unredacter\",\"slug\":\"unredacter\",\"description\":\"Never ever ever use pixelation as a redaction technique.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/BishopFox/unredacter\",\"review_youtube_id\":\"a_F_jfcD6lQ\",\"sponsorship_level\":0,\"keywords\":[\"encryption\",\"images\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e52\",\"name\":\"Unshackle\",\"slug\":\"unshackle\",\"description\":\"Bypass Windows and Linux user passwords from a bootable USB based on Linux.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/Fadi002/unshackle\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"boot\",\"bypass\",\"linux\",\"passwords\",\"usb\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e53\",\"name\":\"Up HTTP Server\",\"slug\":\"up-http-server\",\"description\":\"Simple HTTP listener for security testing.\",\"category\":\"network\",\"source\":\"https://github.com/MuirlandOracle/up-http-tool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"requests\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e55\",\"name\":\"UploadScanner\",\"slug\":\"uploadscanner\",\"description\":\"HTTP file upload scanner for Burp Proxy.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/PortSwigger/upload-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"fileupload\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e5b\",\"name\":\"UserEnum\",\"slug\":\"userenum\",\"description\":\"Domain user enumeration tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/sensepost/UserEnum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"ldap\",\"usernames\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59467\",\"name\":\"V3n0M\",\"slug\":\"v3n0m\",\"description\":\"Web dork and vulnerability scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/v3n0m-Scanner/V3n0M-Scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f1\",\"name\":\"VAmPI\",\"slug\":\"vampi\",\"description\":\"Vulnerable REST API with OWASP top 10 vulnerabilities for security testing \",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/erev0s/VAmPI\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59745\",\"name\":\"VBSmin\",\"slug\":\"vbsmin\",\"description\":\"VBScript minifier\",\"category\":\"other\",\"source\":\"https://github.com/noraj/vbsmin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"vbs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e62\",\"name\":\"VBad\",\"slug\":\"vbad\",\"description\":\"VBA obfuscation tools combined with an MS Office document generator .\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/Pepitoh/VBad\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"exploits\",\"obfuscation\",\"office\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e69\",\"name\":\"VHostScan\",\"slug\":\"vhostscan\",\"description\":\"Virtual host scanner that performs reverse lookups.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/codingo/VHostScan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5946a\",\"name\":\"VOOKI\",\"slug\":\"vooki\",\"description\":\"W
99indows only web application and REST API vulnerability scanner\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a6\",\"name\":\"VRT Ruby Wrapper\",\"slug\":\"vrt-ruby-wrapper\",\"description\":\"Wrapper for the Vulnerability Rating Taxonomy\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/bugcrowd/vrt-ruby\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"library\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c0\",\"name\":\"Vais\",\"slug\":\"vais\",\"description\":\"SWF vulnerability and information scanner\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/hahwul/vais\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e5d\",\"name\":\"Vajra\",\"slug\":\"vajra\",\"description\":\"UI-based tool with multiple techniques for attacking and enumerating Azure and AWS environment.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/TROUBLE-1/Vajra\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"passwords\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e5e\",\"name\":\"Valid8Proxy\",\"slug\":\"valid8proxy\",\"description\":\"Tool designed for fetching, validating, and storing working proxies.\",\"category\":\"network\",\"source\":\"https://github.com/spyboy-productions/Valid8Proxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"proxy\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e5f\",\"name\":\"Vampi\",\"slug\":\"vampi\",\"description\":\"Vulnerable REST API with OWASP top 10 vulnerabilities for security testing.\",\"category\":\"resources\",\"source\":\"https://github.com/erev0s/VAmPI\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"owasp\",\"training\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59469\",\"name\":\"Vega\",\"slug\":\"vega\",\"description\":\"Multi-platform web scanner and intercepting proxy\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/subgraph/Vega\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e65\",\"name\":\"Vegile\",\"slug\":\"vegile\",\"description\":\"Post exploitation tool to maintain some level of acces.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/screetsec/Vegile\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"exploits\",\"postexploitation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d1\",\"name\":\"Velociraptor\",\"slug\":\"velociraptor\",\"description\":\"Endpoint visibility and collection tool\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/Velocidex/velociraptor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e66\",\"name\":\"Velociraptor\",\"slug\":\"velociraptor\",\"description\":\"Endpoint visibility and collection tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Velocidex/velociraptor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"forensic\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e67\",\"name\":\"Venom\",\"slug\":\"venom\",\"description\":\"Popular Pentesting scanner for SQLi/XSS/LFI/RFI and other Vulns.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/v3n0m-Scanner/V3n0M-Scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"lfi\",\"rfi\",\"scanner\",\"sqli\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"681fd0c0ca685d2926b8fd7d\",\"name\":\"Vicarius\",\"slug\":\"vicarius\",\"description\":\"vRx by Vicarius offers real-time and automated patching, patchless protection, and script-based remediation across apps, OS, and third-party software.\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6a12093f38649cf2e6b53c20\",\"name\":\"Vigolium - High-fidelity vulnerability scanner fusing agentic AI
99with native speed, modularity, and precision\",\"slug\":\"vigolium-high-fidelity-vulnerability-scanner-fusing-agentic-ai-with-native-speed-modularity-and-precision\",\"description\":\"Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision\\n\\nNative Scan (vigolium scan): Fast, powerful, and flexible. Deterministic, multi-phase scanning with 251 modules across content discovery, browser/SPA spidering, and active/passive audit, covering injection, access control, file/path, API/protocol, framework-specific, cloud/infra, and out-of-band (OAST) vulnerability classes.\\n\\nAgentic Scan (vigolium agent): Thoroughly audits your codebase. AI-driven scanning that autonomously plans attacks, selects modules, generates custom extensions, and triages results, combining deep source-code audit with autonomous and targeted vulnerability scanning.\",\"category\":\"adversary-simulation\",\"source\":\"Git\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c8\",\"name\":\"Villain\",\"slug\":\"villain\",\"description\":\"Distributed command and control framework\",\"category\":\"red-teaming\",\"source\":\"https://github.com/t3l3machus/Villain\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e6a\",\"name\":\"Villain\",\"slug\":\"villain\",\"description\":\"Backdoor generator and multi-session handler for sessions sharing among connected sibling servers.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/t3l3machus/Villain\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"c2c\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e6b\",\"name\":\"Virtual host scanner\",\"slug\":\"virtual-host-scanner\",\"description\":\"A script to enumerate virtual hosts on a server.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/jobertabma/virtual-host-discovery\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e6e\",\"name\":\"Vulmap\",\"slug\":\"vulmap\",\"description\":\"Online local vulnerability scanners project.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/vulmon/Vulmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e70\",\"name\":\"VulnHub\",\"slug\":\"vulnhub\",\"description\":\"Provide materials that allows anyone to gain practical 'hands-on' experience in security.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"resources\",\"training\",\"vm\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e71\",\"name\":\"Vulnmachines\",\"slug\":\"vulnmachines\",\"description\":\"A place to learn and improve penetration testing/ethical hacking skills for FREE.\",\"category\":\"vulnerabilities\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"buckets\",\"cloud\",\"cors\",\"online\",\"sqli\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a7\",\"name\":\"Vulnogram\",\"slug\":\"vulnogram\",\"description\":\"Create and edit CVE information in CVE JSON format\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/Vulnogram/Vulnogram\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5957b\",\"name\":\"Vulnreport\",\"slug\":\"vulnreport\",\"description\":\"Pentesting management and automation platform\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/salesforce/vulnreport\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e72\",\"name\":\"Vuls\",\"slug\":\"vuls\",\"description\":\"Agent-less vulnerability scanner.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/future-architect/vuls\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a8\",\"name\":\"Vuls\",\"slug\":\"vuls\",\"description\":\"Agentless system vulnerability scanner for Linux/FreeBSD with a dashboard (VulsRepo) for analyzing the scan results\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/future-architect/vuls\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e75\",\"name\":\"WADComs\",\"slug\":\"wadcoms\",\"description\":\"Interactive cheat sheet with a curated list of offensive security tools and their commands.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/WADComs/WADComs.github.io\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cheatsheets\",\"exploits\",\"linux\",\"privesc\",\"shell\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5946c\",\"name\":\"WAFNinja\",\"slug\":\"wafninja\",\"description\":\"WAF bypassing tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/khalilbijjou/WAFNinja\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5946f\",\"name\":\"WAScan\",\"slug\":\"wascan\",\"description\":\"Web application security scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/m4ll0k/WAScan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e95\",\"name\":\"WES-NG\",\"slug\":\"wes-ng\",\"description\":\"W
99indows Exploit Suggester - Next Generation.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/bitsadmin/wesng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"metasploit\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59643\",\"name\":\"WES-NG\",\"slug\":\"wes-ng\",\"description\":\"Windows Exploit Suggester - Next Generation; analyses Windows targets patch levels to find exploits and Metasploit modules; works well with newer system (eg Windows 10) thanks to MSRC support\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/bitsadmin/wesng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f0\",\"name\":\"WHIDS\",\"slug\":\"whids\",\"description\":\"EDR for Windows\",\"category\":\"defensive\",\"source\":\"https://github.com/0xrawsec/whids\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb3\",\"name\":\"WINspect\",\"slug\":\"winspect\",\"description\":\"Powershell-based Windows security auditing toolbox.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/A-mIn3/WINspect\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"enumeration\",\"scanner\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb7\",\"name\":\"WMEye\",\"slug\":\"wmeye\",\"description\":\"Post exploitation tool that uses WMI event filter and MSBuild execution for lateral movement.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/pwn1sher/WMEye\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"pivot\",\"privesc\",\"windows\",\"wmi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595fd\",\"name\":\"WOG\",\"slug\":\"wog\",\"description\":\"Weakpass rule-based online generator; generates a wordlist based on a set of words entered by the user\",\"category\":\"cracking\",\"source\":\"https://github.com/zzzteph/weakpass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ebf\",\"name\":\"WPRecon\",\"slug\":\"wprecon\",\"description\":\"Tool for the recognition of vulnerabilities and blackbox information for Wordpress.\",\"category\":\"cms\",\"source\":\"https://github.com/AngraTeam/wprecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59478\",\"name\":\"WPScan\",\"slug\":\"wpscan\",\"description\":\"WordPress CMS vulnerability scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/wpscanteam/wpscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ec0\",\"name\":\"WPScan\",\"slug\":\"wpscan\",\"description\":\"WPScan WordPress Security Scanner\",\"category\":\"cms\",\"source\":\"https://github.com/wpscanteam/wpscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"cves\",\"scanner\",\"wordpress\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ec1\",\"name\":\"WPSpider\",\"slug\":\"wpspider\",\"description\":\"A centralized dashboard for running and scheduling WordPress scans powered by WPScan utility.\",\"category\":\"cms\",\"source\":\"https://github.com/cyc10n3/WPSpider\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"organizer\",\"scanner\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688368f6252dda06f4098264\",\"name\":\"WS-Attacker\",\"slug\":\"ws-attacker\",\"description\":\"WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum (https://nds.rub.de/) and the Hackmanit GmbH (https://hackmanit.de/).\\n\\nThe basic
99idea behind WS-Attacker is to provide a functionality to load WSDL files and send SOAP messages to the Web Service endpoints (which is executed using the underlying SoapUI framework). This functionality can be extended using various plugins and libraries to build specific Web Services attacks. You can find more information on the WS-Attacker architecture and its extensibility in our paper: Penetration Testing Tool for Web Services Security (https://www.nds.rub.de/research/publications/ws-attacker-paper/)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/RUB-NDS/WS-Attacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"68836c14a39bb6a7f2729b50\",\"name\":\"WS-Attacker\",\"slug\":\"ws-attacker\",\"description\":\"WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum (https://nds.rub.de/) and the Hackmanit GmbH (https://hackmanit.de/).\\n\\nThe basic idea behind WS-Attacker is to provide a functionality to load WSDL files and send SOAP messages to the Web Service endpoints (which is executed using the underlying SoapUI framework). This functionality can be extended using various plugins and libraries to build specific Web Services attacks. You can find more information on the WS-Attacker architecture and its extensibility in our paper: Penetration Testing Tool for Web Services Security (https://www.nds.rub.de/research/publications/ws-attacker-paper/)\",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/RUB-NDS/WS-Attacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5947a\",\"name\":\"WS-Attacker\",\"slug\":\"ws-attacker\",\"description\":\"Modular framework for SOAP web services penetration testing\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/RUB-NDS/WS-Attacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ec3\",\"name\":\"WSDL Wizard\",\"slug\":\"wsdl-wizard\",\"description\":\"Burp Suite plugin to detect current and discover new WSDL files.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/wsdl-wizard\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"webservices\",\"wsdl\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5947b\",\"name\":\"WSFuzzer\",\"slug\":\"wsfuzzer\",\"description\":\"Fuzzing penetration testing tool for testing HTTP SOAP based web services\",\"category\":\"web-application-exploitation\",\"source\":\"https://sourceforge.net/projects/wsfuzzer/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5947d\",\"name\":\"WSSAT\",\"slug\":\"wssat\",\"description\":\"Web Service Security Assessment Tool; WS, REST API, SOAP API dynamic scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/YalcinYolalan/WSSAT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e78\",\"name\":\"Wapiti\",\"slug\":\"wapiti\",\"description\":\"The web-application vulnerability scanner.\",\"category\":\"auth-perms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"exploits\",\"fuzzing\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5946e\",\"name\":\"WappaGo\",\"slug\":\"wappago\",\"description\":\"Web technologies detection; assemble different features from HTTPX, Naabu, GoWitness and Wappalyzer\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/EasyRecon/wappaGo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e79\",\"name\":\"Wappalyzer\",\"slug\":\"wappalyzer\",\"description\":\"Identify technologies on websites.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/wappalyzer/wappalyzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"cms\",\"fingerprint\",\"framework\",\"technologies\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595c9\",\"name\":\"Warhorse\",\"slug\":\"warhorse\",\"description\":\"Ansible playbook to deploy infrastru
99cture in the cloud for conducting Red Team assessments\",\"category\":\"red-teaming\",\"source\":\"https://github.com/warhorse/warhorse\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e2\",\"name\":\"Watcher\",\"slug\":\"watcher\",\"description\":\"Automated platform for discovering new potentially cybersecurity threats targeting your assets (detects typosquatting domain names, monitor malicious domain names, detects data leaks...)\",\"category\":\"threat-intelligence\",\"source\":\"https://github.com/thalesgroup-cert/Watcher\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cert\",\"certificate transparency\",\"incident response\",\"osint\",\"soc\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e7a\",\"name\":\"Watson\",\"slug\":\"watson\",\"description\":\"Enumerate missing KBs and suggest exploits for useful privilege escalation vulnerabilities.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rasta-mouse/Watson\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"privesc\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595fb\",\"name\":\"Wavecrack\",\"slug\":\"wavecrack\",\"description\":\"Hashcat WebUI; asynchronous task, chain tasks, statistics, export, segregation, local and LDAP authentication\",\"category\":\"cracking\",\"source\":\"https://github.com/wavestone-cdt/wavecrack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e7b\",\"name\":\"Wayback Machine\",\"slug\":\"wayback-machine\",\"description\":\"Explore more than 778 billion web pages saved over time.\",\"category\":\"cloud-services\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"online\",\"webarchives\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e7e\",\"name\":\"Waymore\",\"slug\":\"waymore\",\"description\":\"Find way more from the Wayback Machine!\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/xnl-h4ck3r/waymore\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ef\",\"name\":\"Wazuh\",\"slug\":\"wazuh\",\"description\":\"Security monitoring solution for threat detection, integrity monitoring, incident response and compliance; unified XDR and SIEM protection for endpoints and cloud workloads\",\"category\":\"defensive\",\"source\":\"https://github.com/wazuh/wazuh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e80\",\"name\":\"WeakestLink\",\"slug\":\"weakestlink\",\"description\":\"Browser extension that extracts users from LinkedIn company pages.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/shellfarmer/WeakestLink\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linkedin\",\"osint\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e82\",\"name\":\"Weaponised XSS Payloads\",\"slug\":\"weaponised-xss-payloads\",\"description\":\"XSS payloads designed to turn alert(1) into P1.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/hakluke/weaponised-XSS-payloads\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"payloads\",\"privesc\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688364c211a72220adca9017\",\"name\":\"Web Cache Vulnerability Scanner (WCVS)\",\"slug\":\"web-cache-vulnerability-scanner-wcvs\",\"description\":\"Web Cache Vulnerability Scanner (WCVS) is a fast and versatile CLI scanner for web cache poisoning and web cache deception developed by Hackmanit and Maximilian Hildebrand.\\n\\nThe scanner supports many different web cache poisoning and web cache deception techniques, includes a crawler to identify further URLs to test, and can adapt to a specific web cache for more efficient testing. It is highly customizable and can be easily integrated into existing CI/CD pipelines.\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Hackmanit/Web-Cache-Vulnerability-Scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e83\",\"name\":\"Web Check\",\"slug\":\"web-check\",\"description\":\"All-in-one OSINT tool for analysing any website.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/lissy93/web-check\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"osint\",\"ports\",\"screenshots\",\"socialnetworks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e84\",\"name\":\"Web Crawler Security Tool\",\"slug\":\"web-crawler-security-tool\",\"description\":\"A web crawler oriented to infosec.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/verovaleros/webcrawler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e88\",\"name\":\"WebCopilot\",\"slug\":\"webcopilot\",\"description\":\"Automation tool designed to enumerate subdomains and detect bugs using different open-source tools.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/h4r5h1t/webcopilot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"rce\",\"scanner\",\"sqli\",\"ssrf\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e89\",\"name\":\"WebGoat\",\"slug\":\"webgoat\",\"description\":\"Deliberately insecure application.\",\"category\":\"resources\",\"source\":\"https://github.com/WebGoat/WebGoat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"resources\",\"training\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595fc\",\"name\":\"WebHashcat\",\"slug\":\"webhashcat\",\"description\":\"Hashcat WebUI with distributed cracking sessions and analytics\",\"category\":\"cracking\",\"source\":\"https://github.com/hegusung/WebHashcat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gui\",\"hashcat\",\"crack\",\"hash\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e8d\",\"name\":\"WebInspect\",\"slug\":\"webinspect\",\"description\":\"An automated dynamic testing solution that provides comprehensive vulnerability detection.\",\"category\":\"bug-bounty\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"reports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d3\",\"name\":\"WebMap v1\",\"slug\":\"webmap-v1\",\"description\":\"A web dashboard for nmap XML report\",\"category\":\"networking\",\"source\":\"https://github.com/PunitTailor55/WebMap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d4\",\"name\":\"WebMap v2\",\"slug\":\"webmap-v2\",\"description\":\"A web dashboard for nmap XML report\",\"category\":\"networking\",\"source\":\"https://github.com/Hamza-Mega
99hed/WebMap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e8f\",\"name\":\"WebScarab\",\"slug\":\"webscarab\",\"description\":\"Framework for analysing applications that communicate using the HTTP and HTTPS protocols.\",\"category\":\"network\",\"source\":\"https://github.com/OWASP/OWASP-WebScarab\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"proxy\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e90\",\"name\":\"WebScrape\",\"slug\":\"webscrape\",\"description\":\"A web scraper to scrape email's and phone numbers from websites.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/3xploitGuy/webscrape\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"osint\",\"phones\",\"scraper\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59471\",\"name\":\"Webhook Tester\",\"slug\":\"webhook-tester\",\"description\":\"HTTP request collector and inspector\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/fredsted/webhook.site\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59472\",\"name\":\"Weevely\",\"slug\":\"weevely\",\"description\":\"Web shell for post-exploitation working with a PHP agent\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/epinna/weevely3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"webshell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e94\",\"name\":\"WeirdAAL\",\"slug\":\"weirdaal\",\"description\":\"AWS Attack Library.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/carnal0wnage/weirdAAL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\",\"cloudfront\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e96\",\"name\":\"Wfuzz\",\"slug\":\"wfuzz\",\"description\":\"Web application fuzzer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/xmendez/wfuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\",\"fuzzing\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59473\",\"name\":\"Wfuzz\",\"slug\":\"wfuzz\",\"description\":\"Web directory and file scanner (wordlist bruteforce); but also a web fuzzer\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/xmendez/wfuzz/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59474\",\"name\":\"What CMS\",\"slug\":\"what-cms\",\"description\":\"Service able to detect more than 430 CMS, find version used for some CMS, has an API for batch detection\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e98\",\"name\":\"What CMS\",\"slug\":\"what-cms\",\"description\":\"Detect which CMS a site is using.\",\"category\":\"cms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"drupal\",\"joomla\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e99\",\"name\":\"WhatBreach\",\"slug\":\"whatbreach\",\"description\":\"OSINT tool to find breached emails, databases, pastes, and relevant information.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Ekultek/WhatBreach\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"leaks\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e9a\",\"name\":\"WhatRuns\",\"slug\":\"whatruns\",\"description\":\"Discover what runs a website.\",\"category\":\"well-known-products\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"firefox\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e9c\",\"name\":\"WhatWaf\",\"slug\":\"whatwaf\",\"description\":\"Detect and bypass web application firewalls and protection systems.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Ekultek/WhatWaf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"fingerprint\",\"firewall\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e9d\",\"name\":\"WhatWeb\",\"slug\":\"whatweb\",\"description\":\"Next generation web scanner.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/urbanadventurer/WhatWeb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59475\",\"name\":\"WhatWeb\",\"slug\":\"whatweb\",\"description\":\"Web scanner, recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices, also identifies version numbers, email addresses, account IDs, web framework modules, SQL errors, and more; more than 1800 plugins\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/urbanadventurer/WhatWeb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e9b\",\"name\":\"WhatsMyName\",\"slug\":\"whatsmyname\",\"description\":\"Enumerate usernames across many websites.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"online\",\"osint\",\"recon\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d9\",\"name\":\"Whisker\",\"slug\":\"whisker\",\"description\":\"Take over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding Shadow Credentials to the target account\",\"category\":\"networking\",\"source\":\"https://github.com/eladshamir/Whisker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e9e\",\"name\":\"Whispers\",\"slug\":\"whispers\",\"description\":\"Identify hardcoded secrets in static structured text.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Skyscanner/whispers\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e9f\",\"name\":\"WhoisXMLAPI\",\"slug\":\"whoisxmlapi\",\"description\":\"Domain \u0026 IP data intelligence for greater enterprise security.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"domains\",\"ips\",\"online\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d5\",\"name\":\"Whonow\",\"slug\":\"whonow\",\"description\":\"DNS Server for executing DNS Rebinding attacks\",\"category\":\"networking\",\"source\":\"https://github.com/brannondorsey
99/whonow\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea1\",\"name\":\"WiFi Exploitation Framework\",\"slug\":\"wifi-exploitation-framework\",\"description\":\"WiFi exploitation framework.\",\"category\":\"network\",\"source\":\"https://github.com/D3Ext/WEF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"mitm\",\"wifi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea3\",\"name\":\"WiFi-Pumpkin\",\"slug\":\"wifi-pumpkin\",\"description\":\"Framework for rogue Wi-Fi access point attack.\",\"category\":\"network\",\"source\":\"https://github.com/P0cL4bs/WiFi-Pumpkin-deprecated\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"mitm\",\"network\",\"sniffer\",\"spoofing\",\"wifi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59821\",\"name\":\"Wifi-Biter\",\"slug\":\"wifi-biter\",\"description\":\"Dictionary generator used to generate dictionaries/wordlist for Wireless Router Passwords\",\"category\":\"wireless\",\"source\":\"https://github.com/IxAmxZer0/Wifi-Biter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea5\",\"name\":\"WifiPass\",\"slug\":\"wifipass\",\"description\":\"A simple wireless networks penetration testing toolkit.\",\"category\":\"network\",\"source\":\"https://github.com/bhanugoudm041/wifipass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c1\",\"name\":\"WinDbg\",\"slug\":\"windbg\",\"description\":\"Windows debugger\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eaf\",\"name\":\"WinFiHack\",\"slug\":\"winfihack\",\"description\":\"Windows WiFi brute forcing utility without the requirement of external dependencies.\",\"category\":\"network\",\"source\":\"https://github.com/morpheuslord/WinFiHack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb0\",\"name\":\"WinPmem\",\"slug\":\"winpmem\",\"description\":\"The Windows memory acquisition tool.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/Velocidex/WinPmem\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"memory\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb1\",\"name\":\"WinPwn\",\"slug\":\"winpwn\",\"description\":\"Automation for internal Windows pentest / AD-Security.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/S3cur3Th1sSh1t/WinPwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"cves\",\"exploits\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb2\",\"name\":\"WinPwnage\",\"slug\":\"winpwnage\",\"description\":\"UAC bypass, Elevate, Persistence methods.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rootm0s/WinPwnage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"privesc\",\"uac\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eac\",\"name\":\"Windows Exploit Suggester\",\"slug\":\"windows-exploit-suggester\",\"description\":\"Compares target patch levels against the Microsoft vulnerability DB to detect missing patches.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/AonCyberLabs/Windows-Exploit-Suggester\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"metasploit\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59644\",\"name\":\"Windows-Exploit-Suggester\",\"slug\":\"windows-exploit-suggester\",\"description\":\"Analyses Windows targets patch levels to find exploits and Metasploit modules, works only for older systems (eg Windows XP, Vista, etc.) because it relies on MS Security KBs\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/GDSSecurity/Windows-Exploit-Suggester\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d8\",\"name\":\"WireSocks\",\"slug\":\"wiresocks\",\"description\":\"W
99ireGuard socks proxy for pentest pivoting\",\"category\":\"networking\",\"source\":\"https://github.com/sensepost/wiresocks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d7\",\"name\":\"Wireshark\",\"slug\":\"wireshark\",\"description\":\"Network protocol analyzer\",\"category\":\"networking\",\"source\":\"https://code.wireshark.org/review/gitweb?p=wireshark.git\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb4\",\"name\":\"Wireshark\",\"slug\":\"wireshark\",\"description\":\"Network sniffer that captures and analyzes packets off the wire.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/wireshark/wireshark\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mitm\",\"network\",\"scanner\",\"sniffer\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb5\",\"name\":\"WitnessMe\",\"slug\":\"witnessme\",\"description\":\"Web Inventory tool, takes screenshots and provides some extra bells\u0026whistles to make life easier.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/byt3bl33d3r/WitnessMe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"screenshots\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59477\",\"name\":\"WitnessMe\",\"slug\":\"witnessme\",\"description\":\"Take screenshots of websites, provide some server header info, and identify default credentials if possible\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/byt3bl33d3r/WitnessMe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ebc\",\"name\":\"Words Scraper\",\"slug\":\"words-scraper\",\"description\":\"Selenium based web scraper to generate passwords list.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/dariusztytko/words-scraper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"passwords\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ebd\",\"name\":\"Wordsmith\",\"slug\":\"wordsmith\",\"description\":\"Assist with creating tailored wordlists, mostly based on geolocation.\",\"category\":\"resources\",\"source\":\"https://github.com/skahwah/wordsmith\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"utils\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5957c\",\"name\":\"WriteHat\",\"slug\":\"writehat\",\"description\":\"Collaborative penetration test reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/blacklanternsecurity/writehat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ec7\",\"name\":\"X8\",\"slug\":\"x8\",\"description\":\"Hidden parameters discovery suite.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Sh1Yo/x8\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"parameters\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5947f\",\"name\":\"XCat\",\"slug\":\"xcat\",\"description\":\"Automate XPath injection/XXE attacks to retrieve documents\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/orf/xcat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ec9\",\"name\":\"XFFenum\",\"slug\":\"xffenum\",\"description\":\"X-Forwarded-For [403 forbidden] enumeration.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/vavkamil/XFFenum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"cloudflare\",\"firewall\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597db\",\"name\":\"XFLTReaT\",\"slug\":\"xfltreat\",\"description\":\"Tunnelling framework; supports TCP, UDP, ICMP, SOCKS, HTTP, SCTP, WebSocket, RDP\",\"category\":\"networking\",\"source\":\"https://github.com/earthquake/XFLTReaT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5980d\",\"name\":\"XORTool\",\"slug\":\"xortool\",\"description\":\"Tool to analyze multi-byte xor cipher\",\"category\":\"cryptography\",\"source\":\"https://github.com/hellman/xortool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ece\",\"name\":\"XSRFProbe\",\"slug\":\"xsrfprobe\",\"description\":\"The Prime Cross Site Request Forgery Audit and Exploitation Toolkit.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/0xInfection/XSRFProbe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"csrf\",\"exploits\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59485\",\"name\":\"XSRFProbe\",\"slug\":\"xsrfprobe\",\"description\":\"Advanced Cross Site Request Forgery (CSRF/XSRF) audit and exploitation toolkit\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/0xInfection/XSRFProbe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ecf\",\"name\":\"XSS Hunter\",\"slug\":\"xsshunter\",\"description\":\"The fastest way to set up XSS Hunter to test and find blind cross-site scripting vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/trufflesecurity/xsshunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"online\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59487\",\"name\":\"XSS Hunter Express\",\"slug\":\"xss-hunter-express\",\"description\":\"XSS probes host for finding blind XSS\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/mandatoryprogrammer/xsshunter-express\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed0\",\"name\":\"XSS Hunter Express\",\"slug\":\"xss-hunter-express\",\"description\":\"The fastest way to set up XSS Hunter to test and find blind XSS vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/mandatoryprogrammer/xsshunter-express\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"oob\",\"vm\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed1\",\"name\":\"XSS Radar\",\"slug\":\"xss-radar\",\"description\":\"A Chrome extension for fast and easy XSS fuzzing.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/bugbountyforum/XSS-Radar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"fuzzing\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59486\",\"name\":\"XSS hunter\",\"slug\":\"xss-hunter\",\"description\":\"XSS probes host for finding blind XSS\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed3\",\"name\":\"XSS'OR\",\"slug\":\"xss-or\",\"description\":\"Hack with JavaScript.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/evilcos/xssor2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"payloads\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59488\",\"name\":\"XSS'OR\",\"slug\":\"xssor\",\"description\":\"Multi-purpose tool for XSS or JavaScript analysis\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/evilcos/xssor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59489\",\"name\":\"XSS'OR 2\",\"slug\":\"xssor-2\",\"description\":\"Multi-purpose tool for XSS or JavaScript analysis\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/evilcos/xssor2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5948a\",\"name\":\"XSSCon\",\"slug\":\"xsscon\",\"description\":\"XSS automatic scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/menkrep1337/XSSCon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed5\",\"name\":\"XSSCon\",\"slug\":\"xsscon\",\"description\":\"Simple XSS Scanner tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/menkrep1337/XSSCon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed8\",\"name\":\"XSSMap\",\"slug\":\"xssmap\",\"description\":\"Detect XSS vulnerability in Web Applications.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Jewel591/xssmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eda\",\"name\":\"XSSRocket\",\"slug\":\"xssrocket\",\"description\":\"Written by Black Hat Ethical Hacking and #ChatGPT for offensive security and XSS attacks.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/blackhatethicalhacking/XSSROCKET\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"payloads\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed7\",\"name\":\"XSSer\",\"slug\":\"xsser\",\"description\":\"Automatic framework to detect, exploit and report XSS vulnerabilities in web-based applications.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/epsylon/xsser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"framework\",\"scanner\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5948b\",\"name\":\"XSSer\",\"slug\":\"xsser\",\"description\":\"XSS automatic scanner and exploiter\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/epsylon/xsser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59661\",\"name\":\"XSSor\",\"slug\":\"xssor\",\"description\":\"semi-automatic reflected and persistent XSS scanner\",\"category\":\"plugins\",\"source\":\"https://github.com/Quitten/XSSor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053edb\",\"name\":\"XSStrike\",\"slug\":\"xsstrike\",\"description\":\"Most advanced XSS scanner.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/s0md3v/XSStrike\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5948c\",\"name\":\"XSStrike\",\"slug\":\"xsstrike\",\"description\":\"XSS detection tool, parser, payload generator, fuzzing engine, crawler\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/s0md3v/XSStrike\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053edd\",\"name\":\"XSSwagger\",\"slug\":\"xsswagger\",\"description\":\"A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/vavkamil/XSSwagger\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"swagger\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59483\",\"name\":\"XSinator\",\"slug\":\"xsinator\",\"description\":\"XS-Leak browser test suite\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/RUB-NDS/xsinator.com\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ecd\",\"name\":\"XSpear\",\"slug\":\"xs
99pear\",\"description\":\"Powerfull XSS Scanning and Parameter analysis tool\u0026gem.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hahwul/XSpear\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"parameters\",\"scanner\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59484\",\"name\":\"XSpear\",\"slug\":\"xspear\",\"description\":\"XSS Scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/hahwul/XSpear\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f2\",\"name\":\"XVNA\",\"slug\":\"xvna\",\"description\":\"Extreme Vulnerable Node Application, insecure webapp for security trainings\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/vegabird/xvna\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053edf\",\"name\":\"XVWA\",\"slug\":\"xvwa\",\"description\":\"A badly coded web application that helps security enthusiasts to learn application security.\",\"category\":\"resources\",\"source\":\"https://github.com/s4n7h0/xvwa\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"php\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee0\",\"name\":\"XXE-FTP\",\"slug\":\"xxe-ftp\",\"description\":\"A mini webserver with FTP support for XXE payloads.\",\"category\":\"network\",\"source\":\"https://github.com/staaldraad/xxeserv\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ftp\",\"payloads\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5948d\",\"name\":\"XXEinjector\",\"slug\":\"xxeinjector\",\"description\":\"Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/enjoiz/XXEinjector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee1\",\"name\":\"XXEinjector\",\"slug\":\"xxeinjector\",\"description\":\"Exploitation of XXE vulnerability using direct and different out of band methods.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/enjoiz/XXEinjector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"oob\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee2\",\"name\":\"XXElixir\",\"slug\":\"xxelixir\",\"description\":\"This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/kljunowsky/XXElixir\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"documents\",\"fileupload\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5948f\",\"name\":\"XXExploiter\",\"slug\":\"xxexploiter\",\"description\":\"Generates XML payloads, and automatically starts a server to serve the needed DTD's or to do data exfiltration for XXE attacks\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/luisfontes19/xxexploiter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee4\",\"name\":\"XXExploiter\",\"slug\":\"xxexploiter\",\"description\":\"Tool to help exploit XXE vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/luisfontes19/xxexploiter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c3\",\"name\":\"XenoScan\",\"slug\":\"xenoscan\",\"description\":\"Processes memory scanner\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/nickcano/XenoScan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59480\",\"name\":\"Xenotix\",\"slug\":\"xenotix\",\"description\":\"XSS detection and exploit framework (Windows only)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/ajinabraham/OWASP-Xenotix-XSS-Exploit-Framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ec8\",\"name\":\"Xenotix\",\"slug\":\"xenotix\",\"description\":\"An advanced Cross Site Scripting vulnerability detection and exploitation framework.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/ajinabraham/OWASP-Xenotix-XSS-Exploit-Framework\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"framework\",\"payloads\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ecb\",\"name\":\"XnlReveal\",\"slug\":\"xnlreveal\",\"description\":\"A Chrome browser extension to show alerts for several hidden elements.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/xnl-h4ck3r/XnlReveal\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c4\",\"name\":\"Xori\",\"slug\":\"xori\",\"description\":\"Disassembly and static analysis library that provides triage analysis data\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/endgameinc/xori\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597dc\",\"name\":\"Xprobe2\",\"slug\":\"xprobe2\",\"description\":\"Remote active operating system fingerprinting\",\"category\":\"networking\",\"source\":\"https://github.com/binarytrails/xprobe2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59482\",\"name\":\"Xray\",\"slug\":\"xray\",\"description\":\"Web security scanner (XSS, SQLi, SSRF, XXE, etc.)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/chaitin/xray\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed2\",\"name\":\"Xss-Sql-Fuzz\",\"slug\":\"xss-sql-fuzz\",\"description\":\"Burp Suite plugin for XSS and SQLi which add our payload to all parameters with one click.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/jiangsir404/Xss-Sql-Fuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"payloads\",\"sqli\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ff\",\"name\":\"YARA\",\"slug\":\"yara\",\"description\":\"Pattern matching helping malware researchers to identify and classify malware samples\",\"category\":\"incident-response\",\"source\":\"https://github.com/virustotal/yara\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597fb\",\"name\":\"YASAT\",\"slug\":\"yasat\",\"description\":\"TYet Another Stupid Audit Tool; check general Linux system and common softwares configuration\",\"category\":\"configuration-audit\",\"source\":\"https://github.com/montjoie/yasat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59492\",\"name\":\"YASUO\",\"slug\":\"yasuo\",\"description\":\"Scans for vulnerable \u0026 exploitable 3rd-party web applications\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/0xsauby/yasuo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59703\",\"name\":\"YAYA\",\"slug\":\"yaya\",\"description\":\"Yet Another Yara Automaton; automatically curate open source yara rules and run scans\",\"category\":\"incident-response\",\"source\":\"https://github.com/EFForg/yaya\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee5\",\"name\":\"Yara\",\"slug\":\"yara\",\"description\":\"The pattern matching swiss knife for malware researchers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/virustotal/yara\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"defense\",\"malware\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59701\",\"name\":\"Yara Toolkit\",\"slug\":\"yara-toolkit\",\"description\":\"Yara rules editor, generator, scanner\",\"category\":\"incident-response\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59662\",\"name\":\"YesWeBurp\",\"slug\":\"yesweburp\",\"description\":\"Access to all bug bounty programs directly inside Burp\",\"category\":\"plugins\",\"source\":\"https://github.com/yeswehack/YesWeBurp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee7\",\"name\":\"Yet Another Robber\",\"slug\":\"yet-another-robber\",\"description\":\"Yar is a tool for plunderin' organizations, users and/or repositories...\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/nielsing/yar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"git\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee8\",\"name\":\"Yet Another Sniffer\",\"slug\":\"yet-another-sniffer\",\"description\":\"A network analyzer that make easy to extract informations about network traffic.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/redcode-labs/YAS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"http\",\"network\",\"sniffer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e3\",\"name\":\"Yeti\",\"slug\":\"yeti\",\"description\":\"Organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository\",\"category\":\"threat-intelligence\",\"source\":\"https://github.com/yeti-platform/yeti\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee9\",\"name\":\"Yoga\",\"slug\":\"yoga\",\"description\":\"Your OSINT Graphical Analyzer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/WebBreacher/yoga\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"online\",\"osint\",\"resources\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59493\",\"name\":\"Yoga\",\"slug\":\"yoga\",\"description\":\"Your OSINT Graphical Analyzer;
99 project to help people understand different courses of action to take based upon the data\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/WebBreacher/yoga\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eee\",\"name\":\"Zed Attack Proxy\",\"slug\":\"zed-attack-proxy\",\"description\":\"The world's most widely used web app scanner.\",\"category\":\"network\",\"source\":\"https://github.com/zaproxy/zaproxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"fuzzing\",\"owasp\",\"proxy\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597de\",\"name\":\"Zenmap\",\"slug\":\"zenmap\",\"description\":\"GUI for Nmap\",\"category\":\"networking\",\"source\":\"https://github.com/nmap/nmap/tree/master/zenmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5957d\",\"name\":\"ZinnoX Reporting Tool\",\"slug\":\"zinnox-reporting-tool\",\"description\":\"ZRT; project management, vulnerability management and pentest report creation application\",\"category\":\"collaboration-and-report\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597df\",\"name\":\"Zmap\",\"slug\":\"zmap\",\"description\":\"Collection of tools to scan and study massive networks\",\"category\":\"networking\",\"source\":\"https://github.com/zmap/zmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ca\",\"name\":\"Zphisher\",\"slug\":\"zphisher\",\"description\":\"Automated phishing tool with multiple tunneling options; fork of Shellphish\",\"category\":\"red-teaming\",\"source\":\"https://github.com/htr-tech/zphisher\",\"review_youtube_id\":\"44O3Yxjry-4\",\"sponsorship_level\":0,\"keywords\":[\"phishing\",\"templates\",\"instagram\",\"roblox\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538b8\",\"name\":\"a2sv\",\"slug\":\"a2sv\",\"description\":\"Auto Scanning to SSL Vulnerability.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/hahwul/a2sv\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"ssl\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59613\",\"name\":\"abuseACL\",\"slug\":\"abuseacl\",\"description\":\"Automatically list vulnerable Windows ACEs/ACLs using DC's LDAP to list users/groups/computers/OU/certificate templates and their nTSecurityDescriptor to check for vulnerable rights\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/AetherBlack/abuseACL\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"active directory\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59614\",\"name\":\"aclpwn\",\"slug\":\"aclpwn\",\"description\":\"Interacts with BloodHound to identify and exploit ACL based privilege escalation paths\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/fox-it/aclpwn.py\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5974a\",\"name\":\"ad-ldap-enum\",\"slug\":\"ad-ldap-enum\",\"description\":\"LDAP based Active Directory user and group enumeration tool\",\"category\":\"networking\",\"source\":\"https://github.com/CroweCybersecurity/ad-ldap-enum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c0\",\"name\":\"adPEAS\",\"slug\":\"adpeas\",\"description\":\"Powershell tool to automate Active Directory enumeration.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/61106960/adpeas\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"enumeration\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538be\",\"name\":\"additional-scanner-checks\",\"slug\":\"additional-scanner-checks\",\"description\":\"Collection of scanner checks missing in Burp.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/additional-scanner-checks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5974d\",\"name\":\"adfsbrute\",\"slug\":\"adfsbrute\",\"description\":\"Test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks\",\"category\":\"networking\",\"source\":\"https://github.com/ricardojoserf/adfsbrute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5974e\",\"name\":\"adidnsdump\",\"slug\":\"adidnsdump\",\"description\":\"Enumeration and exporting of all DNS records in ADIDNS domain or forest DNS zones\",\"category\":\"networking\",\"source\":\"https://github.com/dirkjanm/adidnsdump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"active directory\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c5\",\"name\":\"aem-detector\",\"slug\":\"aem-detector\",\"description\":\"Discover Adobe Experience Manager (AEM) Content Management System (CMS) websites.\",\"category\":\"cms\",\"source\":\"https://github.com/akshaysharma016/aem-detector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"adobe\",\"aem\",\"cms\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c6\",\"name\":\"afrog\",\"slug\":\"afrog\",\"description\":\"A vulnerability scanning tools for penetration testing.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/zan8in/afrog\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"fingerprint\",\"passwords\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538c9\",\"name\":\"airbash\",\"slug\":\"airbash\",\"description\":\"Fully automated WPA PSK PMKID and handshake capture script.\",\"category\":\"network\",\"source\":\"https://github.com/tehw0lf/airbash\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"network\",\"passwords\",\"wifi\",\"wpa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538ca\",\"name\":\"aircrack-ng\",\"slug\":\"aircrack-ng\",\"description\":\"Complete suite of tools to assess WiFi network security.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"passwords\",\"wifi\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5980f\",\"name\":\"airgeddon\",\"slug\":\"airgeddon\",\"description\":\"W
99ireless network audit script\",\"category\":\"wireless\",\"source\":\"https://github.com/v1s1t0r1sh3r3/airgeddon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538cb\",\"name\":\"airgeddon\",\"slug\":\"airgeddon\",\"description\":\"This is a multi-use bash script for Linux systems to audit wireless networks.\",\"category\":\"network\",\"source\":\"https://github.com/v1s1t0r1sh3r3/airgeddon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538cc\",\"name\":\"al-khaser\",\"slug\":\"al-khaser\",\"description\":\"Public malware techniques used in the wild: virtual machine, emulation, debuggers.\",\"category\":\"virtualization\",\"source\":\"https://github.com/LordNoteworthy/al-khaser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"disassembler\",\"malware\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593ba\",\"name\":\"altair\",\"slug\":\"altair\",\"description\":\"Modular web vulnerability scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/evilsocket/altair\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538cf\",\"name\":\"alterx\",\"slug\":\"alterx\",\"description\":\"Fast and customizable subdomain wordlist generator using DSL.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/alterx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594df\",\"name\":\"alterx\",\"slug\":\"alterx\",\"description\":\"Customizable subdomain wordlist generator using DSL\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/projectdiscovery/alterx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d0\",\"name\":\"amap\",\"slug\":\"amap\",\"description\":\"Identify applications even if they are running on a different port than normal.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/BlackArch/amap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\",\"ports\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d3\",\"name\":\"andor\",\"slug\":\"andor\",\"description\":\"Blind SQL Injection Tool with Golang.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/sadicann/andor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59669\",\"name\":\"androguard\",\"slug\":\"androguard\",\"description\":\"Tool for reverse engineering and malware analysis of Android applications\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/androguard/androguard\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d4\",\"name\":\"androguard\",\"slug\":\"androguard\",\"description\":\"Reverse engineering and pentesting for Android applications.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/androguard/androguard\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"mobile\",\"reverse-engineering\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d6\",\"name\":\"angr\",\"slug\":\"angr\",\"description\":\"A powerful and user-friendly binary analysis platform.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/angr/angr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"codeanalysis\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5966a\",\"name\":\"angr\",\"slug\":\"angr\",\"description\":\"Platform-agnostic binary analysis framework\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/angr/angr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538d8\",\"name\":\"angularjs-csti-scanner\",\"slug\":\"angularjs-csti-scanner\",\"description\":\"Automated client-side template injection detection for AngularJS.\",\"category\":\"development\",\"source\":\"https://github.com/tijme/angularjs-csti-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"angular\",\"csti\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538dc\",\"name\":\"apk-mitm\",\"slug\":\"apk-mitm\",\"description\":\"A CLI application that automatically prepares Android APK files for HTTPS inspection.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/shroudedcode/apk-mitm\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"mitm\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e1\",\"name\":\"apkurlgrep\",\"slug\":\"apkurlgrep\",\"description\":\"Extract endpoints from APK files.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/ndelphit/apkurlgrep\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"endpoints\",\"mobile\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e2\",\"name\":\"appmon\",\"slug\":\"appmon\",\"description\":\"Framework for monitoring and tampering system API calls of native macOS, iOS and android apps.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/dpnishant/appmon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"frida\",\"ios\",\"mobile\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e7\",\"name\":\"archaeologit\",\"slug\":\"archaeologit\",\"description\":\"Scans the history of GitHub repositories to find sensitive things.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/peterjaric/archaeologit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538e8\",\"name\":\"archerysec\",\"slug\":\"archerysec\",\"description\":\"Automate your application security orchestration and correlation (ASOC).\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/archerysec/archerysec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"automation\",\"devsecops\",\"reports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59751\",\"name\":\"archtorify\",\"slug\":\"archtorify\",\"description\":\"Script for Arch Linux which use iptables settings to create a transparent proxy through Tor Network\",\"category\":\"networking\",\"source\":\"https://github.com/brainfucksec/archtorify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5966e\",\"name\":\"arm_now\",\"slug\":\"arm_now\",\"description\":\"Tool that allows instant setup of virtual machines on various architectures for reverse, exploit, fuzzing and programming purpose\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/nongiach/arm_now\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59753\",\"name\":\"arp-scan\",\"slug\":\"arp-scan\",\"description\":\"Discover hosts on your network using ARP requests\",\"category\":\"networking\",\"source\":\"https://github.com/royhills/arp-scan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538ef\",\"name\":\"assetfinder\",\"slug\":\"assetfinder\",\"description\":\"Find domains and subdomains related to a given domain.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/tomnomnom/assetfinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538f5\",\"name\":\"attack_range\",\"slug\":\"attack_range\",\"description\":\"Create vulnerable instrumented local or cloud environments to simulate attacks.\",\"category\":\"virtualization\",\"source\":\"https://github.com/splunk/attack_range\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"splunk\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538fb\",\"name\":\"authz\",\"slug\":\"authz\",\"description\":\"Burp Suite plugin to test for authorization flaws.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/PortSwigger/authz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authorization\",\"burpsuite\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053902\",\"name\":\"autoSSRF\",\"slug\":\"autossrf\",\"description\":\"Smart context-based SSRF vulnerability scanner.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Th0h0/autossrf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"ssrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053903\",\"name\":\"autoSubTakeover\",\"slug\":\"autosubtakeover\",\"description\":\"A tool used to check if a CNAME resolves to the scope address.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/JordyZomer/autoSubTakeover\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538fc\",\"name\":\"autochrome\",\"slug\":\"autochrome\",\"description\":\"A shiny new copy of Chromium that will bring colors in your hunt.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/nccgroup/autochrome\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670538fd\",\"name\":\"autopwn\",\"slug\":\"autopwn\",\"description\":\"Specify targets and run sets of tools against them.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/nccgroup/autopwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"recon\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053905\",\"name\":\"autowpscan\",\"slug\":\"autowpscan\",\"description\":\"An automated tool that automatically scanning a list of multiple websites with wordpress at once.\",\"category\":\"cms\",\"source\":\"https://github.com/password123456/autowpscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"automation\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053906\",\"name\":\"avet\",\"slug\":\"avet\",\"description\":\"AntiVirus Evasion Tool.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/govolution/avet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"antivirus\",\"evasion\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705390a\",\"name\":\"awesome-cve-poc\",\"slug\":\"awesome-cve-poc\",\"description\":\"A collection about Proof of Concepts of Common Vulnerabilities and Exposures.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/qazbnm456/awesome-cve-poc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"poc\",\"resources\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c7\",\"name\":\"aws_pwn\",\"slug\":\"aws_pwn\",\"description\":\"Collection of AWS penetration testing scripts\",\"category\":\"cloud\",\"source\":\"https://github.com/dagrz/aws_pwn/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053911\",\"name\":\"axiom\",\"slug\":\"axiom\",\"description\":\"Distribute the workload of many different scanning tools with ease.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/pry0cc/axiom\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"digitalocean\",\"linode\",\"networkd\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053915\",\"name\":\"b374k\",\"slug\":\"b374k\",\"description\":\"PHP Webshell with handy features.\",\"category\":\"development\",\"source\":\"https://github.com/b374k/b374k\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"php\",\"rce\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c2\",\"name\":\"b374k\",\"slug\":\"b374k\",\"description\":\"Webshell with many features: file manager, search, command execution, DB connection, SQL explorer, process list\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/b374k/b374k\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596e6\",\"name\":\"bWAPP\",\"slug\":\"bwapp\",\"description\":\"Buggy Web Application, insecure webapp for security trainings\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://sourceforge.net/p/bwapp/code/ci/master/tree/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705395f\",\"name\":\"bWAPP\",\"slug\":\"bwapp\",\"description\":\"An extremely buggy web application!.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"resources\",\"training\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053960\",\"name\":\"bXSS\",\"slug\":\"bxss\",\"description\":\"bXSS is a utility which can be used identify Blind Cross-Site Scripting.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/LewisArdern/bXSS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"oob\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053916\",\"name\":\"backslash-powered-scanner\",\"slug\":\"backslash-powered-scanner\",\"description\":\"Finds unknown classes of injection vulnerabilities.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/backslash-powered-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594e4\",\"name\":\"badKarma\",\"slug\":\"badkarma\",\"description\":\"Advanced network reconnaissance tool\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/r3vn/badKarma\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593c3\",\"name\":\"badsecrets\",\"slug\":\"badsecrets\",\"description\":\"A library for detecting known or weak cryptographic secrets across many web frameworks\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/blacklanternsecurity/badsecrets\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aspnet\",\"telerik\",\"flask\",\"peoplesoft\",\"django\",\"rails\",\"jsf\",\"symfony\",\"express\",\"laravel\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053918\",\"name\":\"badsecrets\",\"slug\":\"badsecrets\",\"description\":\"A library for detecting known secrets across many web frameworks.\",\"category\":\"development\",\"source\":\"https://github.com/blacklanternsecurity/badsecrets\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cryptography\",\"django\",\"flask\",\"framework\",
99\"jwt\",\"laravel\",\"rails\",\"secrets\",\"symfony\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705391a\",\"name\":\"barq\",\"slug\":\"barq\",\"description\":\"The AWS Cloud Post Exploitation framework!\",\"category\":\"cloud-services\",\"source\":\"https://github.com/Voulnet/barq\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"exploits\",\"framework\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705391b\",\"name\":\"bbot\",\"slug\":\"bbot\",\"description\":\"OSINT automation for hackers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/blacklanternsecurity/bbot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"osint\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d4\",\"name\":\"bbr\",\"slug\":\"bbr\",\"description\":\"Generation of bug bounty reports based on user provided templates\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/codingo/bbr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705391c\",\"name\":\"bbradar.io\",\"slug\":\"bbradar.io\",\"description\":\"Fetches latest bug bounty programs from many platforms and consolidates them in one place.\",\"category\":\"auth-perms\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"online\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d5\",\"name\":\"bbrecon\",\"slug\":\"bbrecon\",\"description\":\"Service enumerating all targets on Internet covered by a bug bounty program\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/serain/bbrecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\",\"library\",\"api\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705391d\",\"name\":\"bbrf\",\"slug\":\"bbrf\",\"description\":\"Help you coordinate your reconnaissance workflows across multiple devices.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/honoki/bbrf-server\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"organizer\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705391e\",\"name\":\"bbscope\",\"slug\":\"bbscope\",\"description\":\"Scope gathering tool for multiple Bug Bounty platforms.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/sw33tLie/bbscope\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"bugcrowd\",\"hackerone\",\"immunefi\",\"intigriti\",\"yeswehack\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59755\",\"name\":\"beanshooter\",\"slug\":\"beanshooter\",\"description\":\"JMX enumeration and attacking; helps to identify common vulnerabilities on JMX endpoints\",\"category\":\"networking\",\"source\":\"https://github.com/qtc-de/beanshooter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053920\",\"name\":\"bearer\",\"slug\":\"bearer\",\"description\":\"Scan your source code against top security and privacy risks.\",\"category\":\"development\",\"source\":\"https://github.com/Bearer/bearer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"golang\",\"java\",\"javascript\",\"php\",\"python\",\"ruby\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59670\",\"name\":\"bearparser\",\"slug\":\"bearparser\",\"description\":\"PE parsing library (from PE-bear)\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/hasherezade/bearparser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053924\",\"name\":\"bettercap\",\"slug\":\"bettercap\",\"description\":\"The Swiss Army knife for WiFi, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.\",\"category\":\"network\",\"source\":\"https://github.com/bettercap/bettercap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bluetooth\",\"mitm\",\"network\",\"sniffer\",\"wifi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59756\",\"name\":\"bettercap\",\"slug\":\"bettercap\",\"description\":\"MITM framework\",\"category\":\"networking\",\"source\":\"https://github.com/bettercap/bettercap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59757\",\"name\":\"bettercap web UI\",\"slug\":\"bettercap-web-ui\",\"description\":\"Web UI for bettercap\",\"category\":\"networking\",\"source\":\"https://github.com/bettercap/ui\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053927\",\"name\":\"big-list-of-naughty-strings\",\"slug\":\"big-list-of-naughty-strings\",\"description\":\"A list of strings which have a high probability of causing issues when used as user-input data.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/minimaxir/big-list-of-naughty-strings\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"payloads\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59672\",\"name\":\"binbloom\",\"slug\":\"binbloom\",\"description\":\" Raw binary firmware analysis software; tries to determine the firmware loading address\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/quarkslab/binbloom\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59673\",\"name\":\"binutils\",\"slug\":\"binutils\",\"description\":\"GNU collection of binary tools\",\"category\":\"reverse-engineering\",\"source\":\"http://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053929\",\"name\":\"binwalk\",\"slug\":\"binwalk\",\"description\":\"Fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ReFirmLabs/binwalk\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"firmware\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59674\",\"name\":\"binwalk\",\"slug\":\"binwalk\",\"description\":\"Analyze, reverse engineer and extract firmware images (and other files, also usefull for Digital Forensics)\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/devttys0/binwalk\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595cb\",\"name\":\"bkcrack\",\"slug\":\"bkcrack\",\"description\":\"Crack legacy zip encryption with Biham and Kocher's known plaintext attack\",\"category\":\"cracking\",\"source\":\"https://github.com/kimci86/bkcrack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59618\",\"name\":\"bkhive\",\"slug\":\"bkhive\",\"description\":\"Dump the syskey bootkey from a Windows NT/2K/XP system hive, often used with samdump2, part of the ophcrack project\",\"category\":\"system-exploitation\",\"source\":\"https://sourceforge.net/projects/ophcrack/files/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59758\",\"name\":\"bloodyAD\",\"slug\":\"bloodyad\",\"description\":\"Active Directory privilege escalation framework\",\"category\":\"networking\",\"source\":\"https://github.com/CravateRouge/bloodyAD\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59759\",\"name\":\"boofuzz\",\"slug\":\"boofuzz\",\"description\":\"Network protocol fuzzing framework\",\"category\":\"networking\",\"source\":\"https://github.com/jtpereyda/boofuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705392f\",\"name\":\"boofuzz\",\"slug\":\"boofuzz\",\"description\":\"Network protocol fuzzing for humans.\",\"category\":\"network\",\"source\":\"https://github.com/jtpereyda/boofuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"fuzzing\",\"http\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59676\",\"name\":\"boomerang\",\"slug\":\"boomerang\",\"description\":\"x86 binaries to C decompiler\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/nemerle/boomerang\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5975b\",\"name\":\"bore\",\"slug\":\"bore\",\"description\":\"Creates a TCP tunnel; exposing local ports to a remote server, bypassing standard NAT connection firewalls\",\"category\":\"networking\",\"source\":\"https://github.com/ekzhang/bore\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053930\",\"name\":\"bore\",\"slug\":\"bore\",\"description\":\"A simple CLI tool for making tunnels to localhost.\",\"category\":\"network\",\"source\":\"https://github.com/ekzhang/bore\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"proxy\",\"tunnel\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d8\",\"name\":\"bounty-targets\",\"slug\":\"bounty-targets\",\"description\":\"Crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into another git repo\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/arkadiyt/bounty-targets\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053932\",\"name\":\"bounty-targets\",\"slug\":\"bounty-targets\",\"description\":\"Crawls bug bounty platform scopes.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/arkadiyt/bounty-targets\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"bugcrowd\",\"federacy\",\"hackenproof\",\"hackerone\",\"intigriti\",\"yeswehack\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053933\",\"name\":\"bounty-targets-data\",\"slug\":\"bounty-targets-data\",\"description\":\"Hourly-updated data dumps of bug bounty platform scopes that are eligible for reports.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/arkadiyt/bounty-targets-data\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"bugcrowd\",\"federacy\",\"hackenproof\",\"hackerone\",\"intigriti\",\"resources\",\"yeswehack\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053935\",\"name\":\"bountyplz\",\"slug\":\"bountyplz\",\"description\":\"Automated security reporting from markdown templates.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/fransr/bou
99ntyplz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"bugcrowd\",\"hackerone\",\"markdown\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594da\",\"name\":\"bountyplz\",\"slug\":\"bountyplz\",\"description\":\"Automated bug bounty reporting/submission, supports HackerOne and Bugcrowd\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/fransr/bountyplz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053936\",\"name\":\"brakeman\",\"slug\":\"brakeman\",\"description\":\"Static analysis security vulnerability scanner for Ruby on Rails applications.\",\"category\":\"development\",\"source\":\"https://github.com/presidentbeef/brakeman\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"rails\",\"ruby\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053937\",\"name\":\"broken-link-checker\",\"slug\":\"broken-link-checker\",\"description\":\"Find broken links, missing images, etc within your HTML.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/stevenvachon/broken-link-checker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"blh\",\"endpoints\",\"subto\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053938\",\"name\":\"broken-link-hijacking\",\"slug\":\"broken-link-hijacking\",\"description\":\"Broken Link Hijacking Burp Suite extension.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/PortSwigger/broken-link-hijacking\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"blh\",\"burpsuite\",\"endpoints\",\"subto\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59499\",\"name\":\"broneypote\",\"slug\":\"broneypote\",\"description\":\"Honeypot\",\"category\":\"honeypot-and-decoy\",\"source\":\"https://github.com/laluka/broneypote\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053939\",\"name\":\"brutas\",\"slug\":\"brutas\",\"description\":\"Wordlists handcrafted and automated with \u003c3\",\"category\":\"resources\",\"source\":\"https://github.com/tasooshi/brutas\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"utils\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705393b\",\"name\":\"brute ratel\",\"slug\":\"brute-ratel\",\"description\":\"A customized command and control center for red team and adversary simulation.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"dll\",\"dns\",\"mitre\",\"samba\",\"tcp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705393d\",\"name\":\"brutespray\",\"slug\":\"brutespray\",\"description\":\"Automatically attempts default creds on found services based on Nmap output.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/x90skysn3k/brutespray\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705393e\",\"name\":\"brutesubs\",\"slug\":\"brutesubs\",\"description\":\"Automation framework for running multiple open sourced subdomain bruteforcing tools in parallel.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/anshumanbh/brutesubs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053942\",\"name\":\"bucket_finder\",\"slug\":\"bucket_finder\",\"description\":\"DigiNinja's bucket_finder utility.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/mattweidner/bucket_finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705394d\",\"name\":\"bundler-audit\",\"slug\":\"bundler-audit\",\"description\":\"Patch-level verification for Bundler.\",\"category\":\"development\",\"source\":\"https://github.com/rubysec/bundler-audit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dependencies\",\"ruby\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053954\",\"name\":\"burp-exporter\",\"slug\":\"burp-exporter\",\"description\":\"Copy a Burp Suite request to a file or the clipboard as multiple programming languages functions.\",\"category\":\"network\",\"source\":\"https://github.com/artssec/burp-exporter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"export\",\"http\",\"requests\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053956\",\"name\":\"burp-vulners-scanner\",\"slug\":\"burp-vulners-scanner\",\"description\":\"Vulnerability scanner based on vulners.com search API.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/software-vulnerability-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"cves\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053961\",\"name\":\"bxss.net\",\"slug\":\"bxss.net\",\"description\":\"Web service that allows for detection Blind XSS vulnerabilities within web applications.\",\"category\":\"development\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"online\",\"webservices\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053964\",\"name\":\"bypasswaf\",\"slug\":\"bypasswaf\",\"description\":\"Add headers to all Burp requests to bypass some WAF products.\",\"category\":\"network\",\"source\":\"https://github.com/PortSwigger/bypass-waf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"firewall\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597fc\",\"name\":\"c7decrypt\",\"slug\":\"c7decrypt\",\"description\":\"Cisco password type-7 encryptor and decryptor\",\"category\":\"cryptography\",\"source\":\"https://github.com/claudijd/c7decrypt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594af\",\"name\":\"cIFrex\",\"slug\":\"cifrex\",\"description\":\"Regexp static code analysis\",\"category\":\"code-analysis\",\"source\":\"https://github.com/MaksymilianA/cifrex\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sast\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053966\",\"name\":\"cadaver\",\"slug\":\"cadaver\",\"description\":\"Command-line WebDAV client.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/notroj/cadaver\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"utils\",\"
99webdav\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053967\",\"name\":\"caido\",\"slug\":\"caido\",\"description\":\"A lightweight web security auditing toolkit.\",\"category\":\"network\",\"source\":\"https://github.com/caido/caido\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"proxy\",\"requests\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705396b\",\"name\":\"cameradar\",\"slug\":\"cameradar\",\"description\":\"Hacks its way into RTSP videosurveillance cameras.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/Ullaakut/cameradar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cameras\",\"iot\",\"rtsp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053970\",\"name\":\"capa\",\"slug\":\"capa\",\"description\":\"The FLARE team's open-source tool to identify capabilities in executable files.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/mandiant/capa\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"forensic\",\"reverse-engineering\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594e8\",\"name\":\"cariddi\",\"slug\":\"cariddi\",\"description\":\"Takes a list of domains, crawls urls and scans for endpoints, secrets, api keys, file extensions, tokens\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/edoardottt/cariddi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053972\",\"name\":\"cariddi\",\"slug\":\"cariddi\",\"description\":\"Crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/edoardottt/cariddi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\",\"passwords\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053973\",\"name\":\"catphish\",\"slug\":\"catphish\",\"description\":\"Generate similar-looking domains for phishing attacks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ring0lab/catphish\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053974\",\"name\":\"cc.py\",\"slug\":\"cc.py\",\"description\":\"Extracting URLs of a specific target based on the results of commoncrawl.org.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/si9int/cc.py\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"commoncrawl\",\"endpoints\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59710\",\"name\":\"ccs\",\"slug\":\"ccs\",\"description\":\"Code Credential Scanner; scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files\",\"category\":\"source-code-management\",\"source\":\"https://github.com/nccgroup/ccs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053977\",\"name\":\"celerystalk\",\"slug\":\"celerystalk\",\"description\":\"An asynchronous enumeration \u0026 vulnerability scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/sethsec/celerystalk\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"automation\",\"nessus\",\"scanner\",\"screenshots\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705397a\",\"name\":\"cerbrutus\",\"slug\":\"cerbrutus\",\"description\":\"Network brute force tool, faster than other existing solutions.\",\"category\":\"network\",\"source\":\"https://github.com/Cerbrutus-BruteForcer/cerbrutus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"bruteforce\",\"ftp\",\"network\",\"passwords\",\"ssh\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705397b\",\"name\":\"cero\",\"slug\":\"cero\",\"description\":\"Scrape domain names from SSL certificates of arbitrary hosts.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/glebarez/cero\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053984\",\"name\":\"certSniff\",\"slug\":\"certsniff\",\"description\":\"A certificate transparency log keyword sniffer written in Python.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/A-poc/certSniff\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053981\",\"name\":\"certmitm\",\"slug\":\"certmitm\",\"description\":\"A tool for testing for certificate validation vulnerabilities of TLS connections.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/aapooksman/certmitm\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"ssl\",\"tls\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053982\",\"name\":\"certmon\",\"slug\":\"certmon\",\"description\":\"A simple certificate expiration monitor script.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/corelan/certmon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"monitoring\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053983\",\"name\":\"certs.io\",\"slug\":\"certs.io\",\"description\":\"Search the entire internet by data in TLS certificates.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/certsio/certsio\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"companies\",\"emails\",\"online\",\"ssl\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59762\",\"name\":\"certsync\",\"slug\":\"certsync\",\"description\":\"Dump NTDS with golden certificates and UnPAC the hash\",\"category\":\"networking\",\"source\":\"https://github.com/zblurx/certsync\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ldap\",\"adcs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053988\",\"name\":\"chainsaw\",\"slug\":\"chainsaw\",\"description\":\"Rapidly search and hunt through windows forensic artefacts.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/WithSecureLabs/chainsaw\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"forensic\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59711\",\"name\":\"changedetection.io\",\"slug\":\"changedetectionio\",\"description\":\"Self-hosted website change detection tracking, monitoring and notification service\",\"category\":\"other\",\"source\":\"https://github.com/dgtlmoon/changedetection.io\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053989\",\"name\":\"changedetection.io\",\"slug\":\"changedetection.io\",\"description\":\"Page change monitoring with alerts a breezem, the best way to monitor website changes.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/dgtlmoon/changedetection.io\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"monitoring\",\"online\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705398a\",\"name\":\"changeme\",\"slug\":\"changeme\",\"description\":\"A default credential scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ztgrace/changeme\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705398d\",\"name\":\"cheat.sh\",\"slug\":\"cheat.sh\",\"description\":\"The only cheat sheet you need.\",\"category\":\"resources\",\"source\":\"https://github.com/chubin/cheat.sh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"online\",\"resources\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705398e\",\"name\":\"checkov\",\"slug\":\"checkov\",\"description\":\"Prevent cloud misconfigurations and find vulnerabilities during build-time.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/bridgecrewio/checkov\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"containers\",\"terraform\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053990\",\"name\":\"chipsec\",\"slug\":\"chipsec\",\"description\":\"Platform security assessment framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/chipsec/chipsec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bios\",\"firmware\",\"framework\",\"hardware\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59763\",\"name\":\"chisel\",\"slug\":\"chisel\",\"description\":\"Fast TCP tunneling over HTTP secured by SSH\",\"category\":\"networking\",\"source\":\"https://github.com/jpillora/chisel\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053991\",\"name\":\"chkrootkit\",\"slug\":\"chkrootkit\",\"description\":\"Locally checks for signs of a rootkit.\",\"category\":\"operating-systems\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"linux\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053993\",\"name\":\"cilium\",\"slug\":\"cilium\",\"description\":\"eBPF-based networking, security, and observability.\",\"category\":\"virtualization\",\"source\":\"https://github.com/cilium/cilium\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"containers\",\"kernel\",\"kubernetes\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053995\",\"name\":\"clair\",\"slug\":\"clair\",\"description\":\"Vulnerability static analysis for c
99ontainers.\",\"category\":\"virtualization\",\"source\":\"https://github.com/quay/clair\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"containers\",\"docker\",\"kubernetes\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053996\",\"name\":\"clairvoyance\",\"slug\":\"clairvoyance\",\"description\":\"Obtain GraphQL API Schema even if the introspection is not enabled.\",\"category\":\"databases\",\"source\":\"https://github.com/nikitastupin/clairvoyance\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593ce\",\"name\":\"clairvoyance\",\"slug\":\"clairvoyance\",\"description\":\"Obtain GraphQL API schema even if the introspection is disabled by abusing the \\\"did you mean\\\" feature\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/nikitastupin/clairvoyance\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053999\",\"name\":\"cloud_enum\",\"slug\":\"cloud_enum\",\"description\":\"Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/codingo/cloud_enum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"google\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef6705399d\",\"name\":\"cloudflare-origin-ip\",\"slug\":\"cloudflare-origin-ip\",\"description\":\"Try to find the origin IP of a webapp protected by Cloudflare.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gwen001/cloudflare-origin-ip\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloudflare\",\"ips\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a2\",\"name\":\"cloudlist\",\"slug\":\"cloudlist\",\"description\":\"Cloudlist is a tool for listing Assets from multiple Cloud Providers.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/projectdiscovery/cloudlist\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"google\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539a6\",\"name\":\"cloudsploit\",\"slug\":\"cloudsploit\",\"description\":\"Cloud Security Posture Management (CSPM).\",\"category\":\"cloud-services\",\"source\":\"https://github.com/aquasecurity/cloudsploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"alibaba\",\"aws\",\"azure\",\"cloud\",\"google\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ab\",\"name\":\"cnames\",\"slug\":\"cnames\",\"description\":\"Take a list of resolved subdomains and output any corresponding CNAMES en masse.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/cybercdh/cnames\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ac\",\"name\":\"co2\",\"slug\":\"co2\",\"description\":\"A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/co2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ad\",\"name\":\"codeql\",\"slug\":\"codeql\",\"description\":\"Power security researchers around the world as well as code scanning.\",\"category\":\"development\",\"source\":\"https://codeql.github.com\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"java\",\"php\",\"rails\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b2\",\"name\":\"commit-stream\",\"slug\":\"commit-stream\",\"description\":\"OSINT tool for finding Github repositories by extracting commit logs in real time.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/x1sec/commit-stream\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d3\",\"name\":\"commix\",\"slug\":\"commix\",\"description\":\"Web-based command injection tester\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/commixproject/commix\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b6\",\"name\":\"cook\",\"slug\":\"cook\",\"description\":\"Overpower wordlist generator, words permutation and combinations, encoding/decoding...\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/glitchedgitz/cook\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"passwords\",\"wordlists\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d0\",\"name\":\"cook\",\"slug\":\"cook\",\"description\":\"Wordlist generator: create permutations and combinations of words with predefined sets of extensions, words and patterns/function to create complex endpoints, wordlists and passwords\",\"category\":\"cracking\",\"source\":\"https://github.com/giteshnxtlvl/cook\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539b7\",\"name\":\"cookie_crimes\",\"slug\":\"cookie_crimes\",\"description\":\"Read local Chrome cookies without root or decrypting.\",\"category\":\"development\",\"source\":\"https://github.com/defaultnamehere/cookie_crimes\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"cookies\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5961a\",\"name\":\"cookie_crimes\",\"slug\":\"cookie_crimes\",\"description\":\"Read local Chrome cookies without root or decrypting and display then in JSON\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/defaultnamehere/cookie_crimes\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539bf\",\"name\":\"crackerjack\",\"slug\":\"crackerjack\",\"description\":\"Hashcat Web Interface.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ctxis/crackerjack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d5\",\"name\":\"crackpkcs12\",\"slug\":\"crackpkcs12\",\"description\":\"Multithreaded program to crack PKCS#12 files (p12 and pfx extensions)\",\"category\":\"cracking\",\"source\":\"https://github.com/crackpkcs12/crackpkcs12\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c2\",\"name\":\"crawley\",\"slug\":\"crawley\",\"description\":\"The unix-way web crawler.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/s0rg/crawley\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"directories\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5961c\",\"name\":\"creddump\",\"slug\":\"creddump\",\"description\":\"Dump windows credentials\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/moyix/creddump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c3\",\"name\":\"creepyCrawler\",\"slug\":\"creepycrawler\",\"description\":\"Crawl a site and extract useful informations for recon.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/chm0dx/creepyCrawler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"emails\",\"endpoints\",\"files\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539c4\",\"name\":\"crithit\",\"slug\":\"crithit\",\"description\":\"Takes a single wordlist item and tests it one by one over a large collection of websites.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/codingo/crithit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539cd\",\"name\":\"crowbar\",\"slug\":\"crowbar\",\"description\":\"Brute forcing tool that support several uncommon protocols.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/galkan/crowbar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"bruteforce\",\"network\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ce\",\"name\":\"crowdsec\",\"slug\":\"crowdsec\",\"description\":\"Offers crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/crowdsecurity/crowdsec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"defense\",\"ids\",\"ips\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539cf\",\"name\":\"crtndtry\",\"slug\":\"crtndtry\",\"description\":\"Yet another subdomain finder.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/nahamsec/crtndstry\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595d7\",\"name\":\"crunch\",\"slug\":\"crunch\",\"description\":\"Wordlist generator\",\"category\":\"cracking\",\"source\":\"https://sourceforge.net/projects/crunch-wordlist/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d0\",\"name\":\"crunch\",\"slug\":\"crunch\",\"description\":\"Wordlist generator where you can specify a character set or any set of characters to be used.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ff\",\"name\":\"crypto-identifier\",\"slug\":\"crypto-identifier\",\"description\":\"Tool that try to identify what cipher is used and uncipher the data\",\"category\":\"cryptography\",\"source\":\"https://github.com/Acceis/crypto_identifier\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d3\",\"name\":\"csp-analyzer\",\"slug\":\"csp-analyzer\",\"description\":\"Analyze Content-Security-Policy header of a given URL.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/gwen001/csp-analyzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"csp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d5\",\"name\":\"csprecon\",\"slug\":\"csprecon\",\"description\":\"Discover new target domains using Content Security Policy.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/edoardottt/csprecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"csp\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d6\",\"name\":\"csrf-scanner\",\"slug\":\"csrf-scanner\",\"description\":\"CSRF Scanner Extension for Burp Suite Pro.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/PortSwigger/csrf-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"csrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d8\",\"name\":\"cstc\",\"slug\":\"cstc\",\"description\":\"Burp Suite extension that allows request/response modification using a GUI.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/PortSwigger/cstc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"cryptography\",\"hash\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59713\",\"name\":\"ctf-party\",\"slug\":\"ctf-party\",\"description\":\"Library to enhance and speed up script/exploit writing for CTF players\",\"category\":\"other\",\"source\":\"https://github.com/noraj/ctf-party\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"encoding\",\"decoding\",\"hashing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539d9\",\"name\":\"ctf-tools\",\"slug\":\"ctf-tools\",\"description\":\"Some setup scripts for security research tools.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/zardus/ctf-tools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"organizer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59679\",\"name\":\"ctf_import\",\"slug\":\"ctf_import\",\"description\":\"Library to run basic functions from stripped binaries\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/docileninja/ctf_import\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539dc\",\"name\":\"ctftool\",\"slug\":\"ctftool\",\"description\":\"Interactive
99CTF exploration tool.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/taviso/ctftool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539df\",\"name\":\"curate\",\"slug\":\"curate\",\"description\":\"A tool for fetching archived URLs.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/EdOverflow/curate\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"recon\",\"virustotal\",\"webarchives\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e0\",\"name\":\"cve\",\"slug\":\"cve\",\"description\":\"Gather and update all available and newest CVEs with their PoC.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/trickest/cve\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"poc\",\"resources\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e1\",\"name\":\"cve-collector\",\"slug\":\"cve-collector\",\"description\":\"Simple latest CVE collector written in Python.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/password123456/cve-collector\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5949e\",\"name\":\"cve-search\",\"slug\":\"cve-search\",\"description\":\"Tool to import CVE and CPE into a MongoDB to facilitate search and processing of CVEs\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/cve-search/cve-search\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e3\",\"name\":\"cve-search\",\"slug\":\"cve-search\",\"description\":\"A tool to perform local searches for known vulnerabilities.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/cve-search/cve-search\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539e4\",\"name\":\"cvecrowd.com\",\"slug\":\"cvecrowd.com\",\"description\":\"Lists CVEs that are currently being discussed on the social network Mastodon.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/KwnyPwny/cvecrowd.com\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"mastodon\",\"online\",\"resources\",\"tracker\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a0\",\"name\":\"cvss-suite\",\"slug\":\"cvss-suite\",\"description\":\"CVSS calculator library\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/siemens/cvss-suite\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59715\",\"name\":\"cybernews personal data leak check\",\"slug\":\"cybernews-personal-data-leak-check\",\"description\":\"Service to check if an account has been compromised in a data breach, only tells if the account is compromised\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leak\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053965\",\"name\":\"c{api}tal\",\"slug\":\"capital\",\"description\":\"A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities.\",\"category\":\"resources\",\"source\":\"https://github.com/Checkmarx/capital\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"owasp\",\"resources\",\"training\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f0\",\"name\":\"dBmonster\",\"slug\":\"dbmonster\",\"description\":\"A multitool for tracking and locating nearby devices via their RF activities.\",\"category\":\"network\",\"source\":\"https://github.com/90N45-d3v/dBmonster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"tracker\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594eb\",\"name\":\"dataleaks\",\"slug\":\"dataleaks\",\"description\":\"Self-hosted data breach search engine\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/jeisonbeast/dataleaks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leaks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ec\",\"name\":\"datasploit\",\"slug\":\"datasploit\",\"description\":\"O
99SINT framework, find, aggregate and export data\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/DataSploit/datasploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59681\",\"name\":\"de4dot\",\"slug\":\"de4dot\",\"description\":\".NET deobfuscator and unpacker\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/de4dot/de4dot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f2\",\"name\":\"dead-link-checker\",\"slug\":\"dead-link-checker\",\"description\":\"A dead-simple way to recursively look for broken links on a web page.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Kaltsoon/dead-link-checker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"blh\",\"endpoints\",\"subto\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539f6\",\"name\":\"default-http-login-hunter\",\"slug\":\"default-http-login-hunter\",\"description\":\"Login hunter of default credentials for administrative web interfaces.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/InfosecMatter/default-http-login-hunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539fb\",\"name\":\"demovfuscator\",\"slug\":\"demovfuscator\",\"description\":\"A work-in-progress deobfuscator for movfuscated binaries.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/leetonidas/demovfuscator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539fe\",\"name\":\"deps.dev\",\"slug\":\"deps.dev\",\"description\":\"Better understand the structure, construction, and security of open source software packages.\",\"category\":\"development\",\"source\":\"https://github.com/google/deps.dev\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cargo\",\"composer\",\"dependencies\",\"development\",\"maven\",\"npm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef670539ff\",\"name\":\"depsdev\",\"slug\":\"depsdev\",\"description\":\"CLI client for deps.dev API.\",\"category\":\"development\",\"source\":\"https://github.com/edoardottt/depsdev\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cargo\",\"composer\",\"dependencies\",\"development\",\"maven\",\"npm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a00\",\"name\":\"deser-node\",\"slug\":\"deser-node\",\"description\":\"NodeJS deserialization payload generator.\",\"category\":\"development\",\"source\":\"https://github.com/klezVirus/deser-node\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"deserialization\",\"nodejs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a01\",\"name\":\"detect-secrets\",\"slug\":\"detect-secrets\",\"description\":\"An enterprise friendly way of detecting and preventing secrets in code.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Yelp/detect-secrets\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a02\",\"name\":\"detectify-cves\",\"slug\":\"detectify-cves\",\"description\":\"Find CVEs that don't have a Detectify modules.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/gwen001/detectify-cves\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"detectify\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a03\",\"name\":\"dex2jar\",\"slug\":\"dex2jar\",\"description\":\"Tools to work with android .dex and java .class files.\",\"category\":\"development\",\"source\":\"https://github.com/pxb1988/dex2jar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"decompiler\",\"java\",\"reverse-engineering\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a04\",\"name\":\"differer\",\"slug\":\"differer\",\"description\":\"differer finds how URLs are parsed by different languages in order to help bug hunters break filters.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/jimen0/differer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"ssrf\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"698fab33618362bd0d7f8703\",\"name\":\"diosts\",\"slug\":\"diosts\",\"description\":\"The disclose.io security.txt scraper (diosts) takes a list of domains as the input, retrieves and validates the security.txt if available and outputs it in the disclose.io JSON format.\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593d9\",\"name\":\"dirb\",\"slug\":\"dirb\",\"description\":\"Web directory and file scanner (wordlist bruteforce)\",\"category\":\"web-application-exploitation\",\"source\":\"https://sourceforge.net/projects/dirb/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593da\",\"name\":\"dirbuster\",\"slug\":\"dirbuster\",\"description\":\"Web directory and file scanner (wordlist bruteforce)\",\"category\":\"web-application-exploitation\",\"source\":\"https://sourceforge.net/projects/dirbuster/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a07\",\"name\":\"dirhunt\",\"slug\":\"dirhunt\",\"description\":\"Find web directories without bruteforce.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Nekmo/dirhunt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"commoncrawl\",\"crawler\",\"directories\",\"endpoints\",\"recon\",\"webarchives\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a08\",\"name\":\"dirlstr\",\"slug\":\"dirlstr\",\"description\":\"Finds Directory Listings or open S3 buckets from a list of URLs.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/cybercdh/dirlstr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\",\"directorylisting\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593db\",\"name\":\"dirsearch\",\"slug\":\"dirsearch\",\"description\":\"Web directory and file scanner (wordlist bruteforce)\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/maurosoria/dirsearch\",\"review_youtube_id\":\"7zayC6Wzt-w\",\"sponsorship_level\":0,\"keywords\":[\"directories\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59717\",\"name\":\"discover\",\"slug\":\"discover\",\"description\":\"Scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit\",\"category\":\"other\",\"source\":\"https://github.com/leebaird/discover\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a0c\",\"name\":\"discover\",\"slug\":\"discover\",\"description\":\"Custom bash scripts used to automate various penetration testing tasks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/leebaird/discover\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"automation\",\"osint\",\"recon\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a0f\",\"name\":\"disposable-email-domains\",\"slug\":\"disposable-email-domains\",\"description\":\"A list of disposable and temporary email address domains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/disposable-email-domains/disposable-email-domains\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"blacklist\",\"emails\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593dc\",\"name\":\"distributed-jwt-cracker\",\"slug\":\"distributed-jwt-cracker\",\"description\":\"HS256 JWT token distributed brute force cracker\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/lmammino/distributed-jwt-cracker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a12\",\"name\":\"django-DefectDojo\",\"slug\":\"django-defectdojo\",\"description\":\"DevSecOps, ASPM, Vulnerability Management.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/DefectDojo/django-DefectDojo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"codeanalysis\",\"devsecops\",\"reports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a13\",\"name\":\"dmut\",\"slug\":\"dmut\",\"description\":\"Perform permutations, mutations and alteration of subdomains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/bp0lr/dmut\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59682\",\"name\":\"dnSpy\",\"slug\":\"dnspy\",\"description\":\".NET assembly debugger, decompiler and editor\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/0xd4d/dnSpy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59683\",\"name\":\"dnSpyEx\",\"slug\":\"dnspyex\",\"description\":\".NET assembly debugger, decompiler and editor; fork of dnSpy\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/dnSpyEx/dnSpy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688262034a82bb1318e40fec\",\"name\":\"dns-fuzzer\",\"slug\":\"dns-fuzzer\",\"description\":\"It comes with crash detection and crash replay. To use it, first create a file called \\\"records\\\" in the same directory as the fuzzer with the dns records for the target in the following format: \u003crecord type\u003e,\u003crecord question\u003e,\u003crecord class\u003e\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/guyinatuxedo/dns-fuzzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a1c\",\"name\":\"dnsReaper\",\"slug\":\"dnsreaper\",\"description\":\"Subdomain takeover tool for attackers, bug bounty hunters and the blue team!\",\"category\":\"cloud-services\",\"source\":\"https://github.com/punk-security/dnsReaper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"cloudflare\",\"digitalocean\",\"dns\",\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a24\",\"name\":\"dnsX\",\"slug\":\"dnsx\",\"description\":\"Fast and multi-purpose DNS toolkit designed for running DNS queries.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/dnsx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a14\",\"name\":\"dnscan\",\"slug\":\"dnscan\",\"description\":\"Python wordlist-based DNS subdomain scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/rbsec/dnscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59589\",\"name\":\"dnscat2\",\"slug\":\"dnscat2\",\"description\":\"DNS tunnel meant for encrypted Command \u0026 Control channel, data exfiltration\",\"category\":\"red-teaming\",\"source\":\"https://github.com/iagox86/dnscat2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a15\",\"name\":\"dnscat2\",\"slug\":\"dnscat2\",\"description\":\"Create an encrypted command-and-control (C\u0026C) channel over the DNS protocol.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/iagox86/dnscat2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"dns\",\"exfiltration\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a17\",\"name\":\"dnsenum\",\"slug\":\"dnsenum\",\"description\":\"Enumerates DNS information of a domain and to discover non-contiguous ip blocks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/SparrowOchon/dnsenum2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"domains\",\"ips\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ef\",\"name\":\"dnsenum\",\"slug\":\"dnsenum\",\"description\":\"DNS reconnaissance tool: AXFR, DNS records enumeration, subdomain bruteforce, range reverse lookup\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/fwaeytens/dnsenum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f0\",\"name\":\"dnsenum2\",\"slug\":\"dnsenum2\",\"description\":\"Continuation of dnsenum project\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/SparrowOchon/dnsenum2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a19\",\"name\":\"dnsgen\",\"slug\":\"dnsgen\",\"description\":\"Generates combination of domain names from the provided input.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ProjectAnte/dnsgen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a20\",\"name\":\"dnstwist\",\"slug\":\"dnstwist\",\"description\":\"Domain name permutation engine for detecting several types of attacks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/elceef/dnstwist\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"dns\",\"domains\",\"fuzzing\",\"online\",\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a21\",\"name\":\"dnstwist_\",\"slug\":\"dnstwist_\",\"description\":\"A tool to monitor for potential spear phishing domains and send to Slack.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hazcod/dnstwist\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"dns\",\"domains\",\"fuzzing\",\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a22\",\"name\":\"dnswalk\",\"slug\":\"dnswalk\",\"description\":\"A DNS database debugger.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f2\",\"name\":\"dnsx\",\"slug\":\"dnsx\",\"description\":\"Multi-purpose DNS toolkit allow to run multiple DNS queries\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/projectdiscovery/dnsx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593dd\",\"name\":\"docem\",\"slug\":\"docem\",\"description\":\"Uility to embed XXE and XSS payloads in docx, odt, pptx, etc\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/whitel1st/docem\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},
99{\"_id\":\"688d0d5c5bc8deef67053a25\",\"name\":\"docem\",\"slug\":\"docem\",\"description\":\"Utility to embed XXE and XSS payloads in docx, odt, pptx...\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/whitel1st/docem\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"payloads\",\"xss\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a26\",\"name\":\"docker-bench-security\",\"slug\":\"docker-bench-security\",\"description\":\"Check for dozens of common best-practices around deploying Docker containers in production.\",\"category\":\"virtualization\",\"source\":\"https://github.com/docker/docker-bench-security\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"containers\",\"docker\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a29\",\"name\":\"dom-red\",\"slug\":\"dom-red\",\"description\":\"Small script to check a list of domains against open redirect vulnerability.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Naategh/dom-red\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"openredirect\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a2c\",\"name\":\"domain_hunter\",\"slug\":\"domain_hunter\",\"description\":\"Try to find all subdomains, similar-domains and related-domains of an organization.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/bit4woo/domain_hunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"domains\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a2d\",\"name\":\"domained\",\"slug\":\"domained\",\"description\":\"Multi Tool Subdomain Enumeration.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/TypeError/domained\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"screenshots\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f3\",\"name\":\"domainfinder\",\"slug\":\"domainfinder\",\"description\":\"Find a domain from an IP address\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/nekosecurity/domainfinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a32\",\"name\":\"dontgo403\",\"slug\":\"dontgo403\",\"description\":\"Tool to bypass 40X response codes.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/devploit/dontgo403\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a36\",\"name\":\"dorky\",\"slug\":\"dorky\",\"description\":\"Quickly do keyword searches over GitLab and GitHub for OSINT \u0026 bug bounty recon.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/codingo/dorky\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dorks\",\"github\",\"gitlab\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a37\",\"name\":\"dot\",\"slug\":\"dot\",\"description\":\"The Deepfake Offensive Toolkit.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/sensity-ai/dot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ai\",\"authentication\",\"deepfake\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59684\",\"name\":\"dotPeek\",\"slug\":\"dotpeek\",\"description\":\".NET decompiler and assembly browser\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59719\",\"name\":\"doxycannon\",\"slug\":\"doxycannon\",\"description\":\"Proxycannon and botnet, using docker, ovpn files, tor nodes, and dante socks5 proxies that may be used for password spraying\",\"category\":\"other\",\"source\":\"https://github.com/audibleblink/doxycannon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a3b\",\"name\":\"drek\",\"slug\":\"drek\",\"description\":\"A static-code-analysis tool for performing security-focused code reviews.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/chrisallenlane/drek\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"regexp\",\"reports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a3c\",\"name\":\"driftctl\",\"slug\":\"driftctl\",\"description\":\"Detect, track and alert on infrastru
99cture drift.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/snyk/driftctl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"github\",\"google\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e4\",\"name\":\"driftctl\",\"slug\":\"driftctl\",\"description\":\"Measures infrastructure as code coverage, and tracks infrastructure drift\",\"category\":\"defensive\",\"source\":\"https://github.com/snyk/driftctl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e0\",\"name\":\"droopescan\",\"slug\":\"droopescan\",\"description\":\"CMS scanner supporting SilverStripe and Wordpress, having partial support for Joomla, Moodle, Drupal\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/droope/droopescan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a3f\",\"name\":\"droopescan\",\"slug\":\"droopescan\",\"description\":\"A plugin-based scanner that aids security researchers in identifying issues with several CMSs.\",\"category\":\"cms\",\"source\":\"https://github.com/SamJoan/droopescan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"drupal\",\"joomla\",\"moodle\",\"scanner\",\"silverstripe\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"}
99,{\"_id\":\"688d0d5c5bc8deef67053a40\",\"name\":\"drozer\",\"slug\":\"drozer\",\"description\":\"The leading security assessment framework for Android.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/WithSecureLabs/drozer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"framework\",\"mobile\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e1\",\"name\":\"drupwn\",\"slug\":\"drupwn\",\"description\":\"Drupal CMS enumeration and exploitation tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/immunIT/drupwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c3\",\"name\":\"ds_store_exp\",\"slug\":\"ds_store_exp\",\"description\":\"Extract files from .DS_Store recursively\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/lijiejie/ds_store_exp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a43\",\"name\":\"dsieve\",\"slug\":\"dsieve\",\"description\":\"Filter and enrich a list of subdomains by level.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/trickest/dsieve\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a44\",\"name\":\"dsniff\",\"slug\":\"dsniff\",\"description\":\"Collection of tools for network auditing and penetration testing.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/tecknicaltom/dsniff\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mitm\",\"network\",\"passwords\",\"sniffer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e2\",\"name\":\"dtd-finder\",\"slug\":\"dtd-finder\",\"description\":\"Identify DTDs on filesystem snapshot and build XXE payloads using those local DTDs\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/GoSecure/dtd-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a47\",\"name\":\"dufflebag\",\"slug\":\"dufflebag\",\"description\":\"Search exposed EBS volumes for secrets.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/BishopFox/dufflebag\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"cloud\",\"ebs\",\"elastic\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a48\",\"name\":\"dumpcreds\",\"slug\":\"dumpcreds\",\"description\":\"May be used to extract various credentials from running processes.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ponypot/dumpcreds\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"imap\",\"ntlm\",\"process\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593e4\",\"name\":\"dvcs-ripper\",\"slug\":\"dvcs-ripper\",\"description\":\"Dump web accessible (distributed) version control systems (DVCS/VCS): SVN, GIT, Mercurial/hg, Bazaar/bzr, â¦\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/kost/dvcs-ripper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dvcs\",\"vcs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a4c\",\"name\":\"dvcs-ripper\",\"slug\":\"dvcs-ripper\",\"description\":\"Rip web accessible version control systems: svn, git...\",\"category\":\"source-code-management\",\"source\":\"https://github.com/kost/dvcs-ripper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bazaar\",\"crawler\",\"cvs\",\"git\",\"mercurial\",\"svn\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a57\",\"name\":\"eLdap-Ldap-Search-and-Filter\",\"slug\":\"eldap-ldap-search-and-filter\",\"description\":\"A tool that helps users searching and filtering queries in Ldap environment.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/EmreOvunc/eLdap-Ldap-Search-and-Filter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ldap\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594f7\",\"name\":\"eTools.ch\",\"slug\":\"etoolsch\",\"description\":\"Metasearch engine, query 16 search engines in parallel\",\"category\":\"osint-and-reconnaissance\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59688\",\"name\":\"edb\",\"slug\":\"edb\",\"description\":\"Cross platform AArch32/x86/x86-64 debugger\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/eteran/edb-debugger\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a56\",\"name\":\"egressbuster\",\"slug\":\"egressbuster\",\"description\":\"Check egress filtering and identify if ports are allowed to automatically spawn a shell.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/trustedsec/egressbuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"egress\",\"emails\",\"ports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595da\",\"name\":\"elpscrk\",\"slug\":\"elpscrk\",\"description\":\"An Intelligent wordlist generator based on user profiling, permutations, and statistics.\",\"category\":\"cracking\",\"source\":\"https://github.com/D4Vinci/elpscrk\",\"review_youtube_id\":\"iiMo01m6AIY\",\"sponsorship_level\":0,\"keywords\":[\"password\",\"crack\",\"profiling\",\"permutation\",\"wordlist\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a5a\",\"name\":\"endext\",\"slug\":\"endext\",\"description\":\"A tool for extracting all the possible endpoints from the JS files.\",\"category\":\"development\",\"source\":\"https://github.com/SirBugs/endext\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"javascript\",\"regexp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6887c1611838514efe5c62fa\",\"name\":\"endlessh\",\"slug\":\"endlessh\",\"description\":\"SSH tarpit that slowly sends an endless banner \",\"category\":\"honeypot-and-decoy\",\"source\":\"https://github.com/skeeto/endlessh\",\"review_youtube_id\":\"2VHu9frKXlo\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a5b\",\"name\":\"endoflife.date\",\"slug\":\"endoflife.date\",\"description\":\"Informative site with EoL dates of everything.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/endoflife-date/endoflife.date\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"online\",\"resources\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a5e\",\"name\":\"enum4Linux\",\"slug\":\"enum4linux\",\"description\":\"Enumerate data from Windows and
99Samba hosts.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/CiscoCXSecurity/enum4linux\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"samba\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59623\",\"name\":\"enum4linux\",\"slug\":\"enum4linux\",\"description\":\"Windows Samba enumeration tool\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/portcullislabs/enum4linux\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59624\",\"name\":\"enum4linux-ng\",\"slug\":\"enum4linux-ng\",\"description\":\"Windows Samba enumeration tool, next generation version of enum4linux\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/cddmp/enum4linux-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a5f\",\"name\":\"enum4linux-ng\",\"slug\":\"enum4linux-ng\",\"description\":\"A Windows/Samba enumeration tool with additional features like JSON/YAML export.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/cddmp/enum4linux-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"samba\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59558\",\"name\":\"envizon\",\"slug\":\"envizon\",\"description\":\"Vulnerability management and reporting platform\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/evait-security/envizon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a60\",\"name\":\"eos\",\"slug\":\"eos\",\"description\":\"Enemies Of Symfony - debug mode Symfony looter.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/synacktiv/eos\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a61\",\"name\":\"espionage\",\"slug\":\"espionage\",\"description\":\"Collects informations related to domains whois, history, dns records and more.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/iAbdullahMughal/espionage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"domains\",\"osint\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a64\",\"name\":\"evil SSDP\",\"slug\":\"evil-ssdp\",\"description\":\"Spoof SSDP replies to phish for credentials and NetNTLM challenge/response.\",\"category\":\"auth-perms\",\"source\":\"https://gitlab.com/initstring/evil-ssdp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"ntlm\",\"passwords\",\"phishing\",\"spoofing\",\"ssdp\",\"xml\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a65\",\"name\":\"evil-winrm\",\"slug\":\"evil-winrm\",\"description\":\"The ultimate WinRM shell for hacking/pentesting.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Hackplayers/evil-winrm\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"kerberos\",\"privesc\",\"windows\",\"winrm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5976c\",\"name\":\"evilginx2\",\"slug\":\"evilginx2\",\"description\":\"Man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication\",\"category\":\"networking\",\"source\":\"https://github.com/kgretzky/evilginx2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a68\",\"name\":\"evilgophish\",\"slug\":\"evilgophish\",\"description\":\"Combination of evilginx3 and GoPhish.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/fin3ss3g0d/evilgophish\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"framework\",\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a69\",\"name\":\"exfilkit\",\"slug\":\"exfilkit\",\"description\":\"Data exfiltration utility for testing detection capabilities.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/tasooshi/exfilkit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59604\",\"name\":\"exif\",\"slug\":\"exif\",\"description\":\"Shows EXIF information for JPEG files only\",\"category\":\"steganography\",\"source\":\"https://sourceforge.net/projects/libexif/files/exif/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a6b\",\"name\":\"exiv2\",\"slug\":\"exiv2\",\"description\":\"Image metadata library and tools.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Exiv2/exiv2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"images\",\"metadata\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a6f\",\"name\":\"extract-endpoints\",\"slug\":\"extract-endpoints\",\"description\":\"Extract endpoints from source files.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gwen001/extract-endpoints\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"parser\",\"regexp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c6\",\"name\":\"extundelete\",\"slug\":\"extundelete\",\"description\":\"Tool to recover deleted files from an ext3 or ext4 partition\",\"category\":\"digital-forensics\",\"source\":\"https://sourceforge.net/projects/extundelete/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a73\",\"name\":\"ezXSS\",\"slug\":\"ezxss\",\"description\":\"An easy way for penetration tester
99s and bug bounty hunters to test (blind) XSS.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/ssl/ezXSS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"687a8e173573978c5280b625\",\"name\":\"faction\",\"slug\":\"faction\",\"description\":\" Pen Test Report Generation and Assessment Collaboration \",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/factionsecurity/faction\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a75\",\"name\":\"falco\",\"slug\":\"falco\",\"description\":\"Cloud native runtime security.\",\"category\":\"virtualization\",\"source\":\"https://github.com/falcosecurity/falco\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"containers\",\"defense\",\"ids\",\"kubernetes\",\"linux\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a78\",\"name\":\"fastsub\",\"slug\":\"fastsub\",\"description\":\"A DNS bruteforcer with multi-threading, and handling of bad resolvers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/codingo/fastsub\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"dns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a7a\",\"name\":\"favicon-hashtrick\",\"slug\":\"favicon-hashtrick\",\"description\":\"Python script implementing the favicon hash trick to find subdomains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gwen001/favicon-hashtrick\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"shodan\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a7b\",\"name\":\"favirecon\",\"slug\":\"favirecon\",\"description\":\"Use favicon.ico to improve your target recon phase.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/edoardottt/favirecon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"favicon\",\"fingerprint\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a7c\",\"name\":\"fcrackzip\",\"slug\":\"fcrackzip\",\"description\":\"Zip password cracker.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"passwords\",\"zip\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593eb\",\"name\":\"feroxbuster\",\"slug\":\"feroxbuster\",\"description\":\"Web directory and file scanner (wordlist bruteforce)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/epi052/feroxbuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a81\",\"name\":\"ffuf\",\"slug\":\"ffuf\",\"description\":\"Fast web fuzzer written in Go.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ffuf/ffuf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"directories\",\"endpoints\",\"recon\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593ec\",\"name\":\"ffuf\",\"slug\":\"ffuf\",\"description\":\"Web directory and file scanner (wordlist bruteforce); but also a web fuzzer\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/ffuf/ffuf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a82\",\"name\":\"ffufPostprocessing\",\"slug\":\"ffufpostprocessing\",\"description\":\"Golang tool which helps dropping the irrelevant entries from your ffuf result file.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Damian89/ffufPostprocessing\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a83\",\"name\":\"fibratus\",\"slug\":\"fibratus\",\"description\":\"Modern tool for Windows kernel exploration and tracing with a focus on security.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/rabbitstack/fibratus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"kernel\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a8b\",\"name\":\"findsecuritycontacts.com\",\"slug\":\"findsecuritycontacts.com\",\"description\":\"Scans the top 500 sites daily for their security.txt file or DNS records.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/OllieJC/findsecuritycontacts.com\",\"review_youtube_id\":\"5STeLO-7pg0\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"emails\",\"online\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a8f\",\"name\":\"fingerprintjs\",\"slug\":\"fingerprintjs\",\"description\":\"Browser fingerprinting library.\",\"category\":\"development\",\"source\":\"https://github.com/fingerprintjs/fingerprintjs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"fingerprint\",\"javascript\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a90\",\"name\":\"fingerprintx\",\"slug\":\"fingerprintx\",\"description\":\"Standalone utility for service discovery on open ports!\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/praetorian-inc/fingerprintx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\",\"ports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5958c\",\"name\":\"fireELF\",\"slug\":\"fireelf\",\"description\":\"Fileless linux malware framework\",\"category\":\"red-teaming\",\"source\":\"https://github.com/rek7/fireELF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a95\",\"name\":\"flan\",\"slug\":\"flan\",\"description\":\"A pretty sweet vulnerability scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/cloudflare/flan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"fingerprint\",\"ports\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6961267fad80bcb65ebe07dc\",\"name\":\"flutterguard\",\"slug\":\"flutterguard\",\"description\":\" Know and see everything an attacker can extract and get from your published Flutter app \",\"category\":\"adversary-simulation\",\"source\":\"https://github.com/flutterguard/flutterguard-cli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053a9b\",\"name\":\"fprobe\",\"slug\":\"fprobe\",\"description\":\"Take a list of domains/subdomains and probe for working http/https server.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/theblackturtle/fprobe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"probing\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa3\",\"name\":\"fscan\",\"slug\":\"fscan\",\"description\":\"Kscan is an asset mapping tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/shadow1ng/fscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"fingerprint\",\"network\",\"ports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa4\",\"name\":\"fuxploider\",\"slug\":\"fuxploider\",\"description\":\"File upload vulnerability scanner and exploitation tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/almandin/fuxploider\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"fileupload\",\"rce\",\"scanner\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f2\",\"name\":\"fuxploider\",\"slug\":\"fuxploider\",\"description\":\"Automates the process of detecting and exploiting file upload forms flaws\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/almandin/fuxploider\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa5\",\"name\":\"fuzzagotchi\",\"slug\":\"fuzzagotchi\",\"description\":\"A fuzzing tool written in Go. It helps your pentesting journey.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hideckies/fuzzagotchi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\",\"fuzzing\",\"parameters\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aa9\",\"name\":\"fuzzuli\",\"slug\":\"fuzzuli\",\"description\":\"Find critical backup files by creating a dynamic wordlist based on the domain.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/musana/fuzzuli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backups\",\"endpoints\",\"fuzzing\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59505\",\"name\":\"gOSINT\",\"slug\":\"gosint\",\"description\":\"O
99SINT framework; find mails, dumps, retrieve Telegram history and info about hosts\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Nhoya/gOSINT\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aad\",\"name\":\"gateway-finder\",\"slug\":\"gateway-finder\",\"description\":\"Identify routers on the local LAN and paths to the Internet.\",\"category\":\"network\",\"source\":\"https://github.com/pentestmonkey/gateway-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"lan\",\"network\",\"router\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aae\",\"name\":\"gateway-finder-imp\",\"slug\":\"gateway-finder-imp\",\"description\":\"Identify routers on the local LAN and paths to the Internet.\",\"category\":\"network\",\"source\":\"https://github.com/whitel1st/gateway-finder-imp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"lan\",\"network\",\"router\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab0\",\"name\":\"gau\",\"slug\":\"gau\",\"description\":\"Fetch known URLs from several sources.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/lc/gau\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab1\",\"name\":\"gaussrf\",\"slug\":\"gaussrf\",\"description\":\"Fetch known URLs from several sources and Filter Urls With OpenRedirection or SSRF Parameters.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/KathanP19/gaussrf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"o
99penredirect\",\"ssrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab2\",\"name\":\"gcp_scanner\",\"slug\":\"gcp_scanner\",\"description\":\"A comprehensive scanner for Google Cloud.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/google/gcp_scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"google\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab5\",\"name\":\"gef\",\"slug\":\"gef\",\"description\":\"A modern experience for GDB with advanced debugging capabilities.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hugsy/gef\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"exploits\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ab9\",\"name\":\"getJS\",\"slug\":\"getjs\",\"description\":\"A tool to fastly get all javascript sources/files.\",\"category\":\"development\",\"source\":\"https://github.com/003random/getJS\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"javascript\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aba\",\"name\":\"getsploit\",\"slug\":\"getsploit\",\"description\":\"Command line utility for searching and downloading exploits.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/vulnersCom/getsploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5971c\",\"name\":\"getsploit\",\"slug\":\"getsploit\",\"description\":\"CLI utility for searching and downloading exploits from Exploit-DB, Metasploit, Packetstorm and others\",\"category\":\"other\",\"source\":\"https://github.com/vulnersCom/getsploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053abb\",\"name\":\"gf\",\"slug\":\"gf\",\"description\":\"A wrapper around grep to avoid typing common patterns.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/tomnomnom/gf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053abc\",\"name\":\"ggshield\",\"slug\":\"ggshield\",\"description\":\"Find multiple types of hardcoded secrets \u0026 types of infrastructure-as-code misconfigurations.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/GitGuardian/ggshield\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"passwords\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ac2\",\"name\":\"git-all-secrets\",\"slug\":\"git-all-secrets\",\"description\":\"Capture all the git secrets by leveraging multiple open source git searching tools.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/anshumanbh/git-all-secrets\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f5\",\"name\":\"git-dump\",\"slug\":\"git-dump\",\"description\":\"Dump the contents of a remote git repository without directory listing enabled\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/bahamas10/node-git-dump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dvcs\",\"vcs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ac3\",\"name\":\"git-dumper\",\"slug\":\"git-dumper\",\"description\":\"A tool to dump a git repository from a website.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/arthaud/git-dumper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"git\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f6\",\"name\":\"git-dumper\",\"slug\":\"git-dumper\",\"description\":\"Dump the contents of a remote git repository without directory listing enabled\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/arthaud/git-dumper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dvcs\",\"vcs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ac4\",\"name\":\"git-secrets\",\"slug\":\"git-secrets\",\"description\":\"Prevents you from committing secrets and credentials into git repositories.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/awslabs/git-secrets\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"git\",\"secrets\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ac5\",\"name\":\"git-vuln-finder\",\"slug\":\"git-vuln-finder\",\"description\":\"Find potential software vulnerabilities from git commit messages.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/cve-search/git-vuln-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"git\",\"regexp\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ac6\",\"name\":\"git-wild-hunt\",\"slug\":\"git-wild-hunt\",\"description\":\"A tool to hunt for credentials in GitHub wild AKA git*hunt.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/josehelps/git-wild-hunt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ac9\",\"name\":\"gitGraber\",\"slug\":\"gitgraber\",\"description\":\"Monitor GitHub to search and find sensitive data in real time.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hisxo/gitGraber\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ff\",\"name\":\"gitGraber\",\"slug\":\"gitgraber\",\"description\":\"Monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe, etc.\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/hisxo/gitGraber\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053acc\",\"name\":\"github-endpoints\",\"slug\":\"github-endpoints\",\"description\":\"Find endpoints on GitHub.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gwen001/github-endpoints\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"github\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053acd\",\"name\":\"github-regexp\",\"slug\":\"github-regexp\",\"description\":\"Basically a regexp over a GitHub search.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gwen001/github-regexp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"github\",\"regexp\",\"secrets\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ace\",\"name\":\"github-subdomains\",\"slug\":\"github-subdomains\",\"description\":\"Find subdomains on GitHub.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gwen001/github-subdomains\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad0\",\"name\":\"gitjacker\",\"slug\":\"gitjacker\",\"description\":\"Leak git repositories from misconfigured websites.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/liamg/gitjacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"git\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad1\",\"name\":\"gitlab-subdomains\",\"slug\":\"gitlab-subdomains\",\"description\":\"Find subdomains on GitLab.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gwen001/gitlab-subdomains\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gitlab\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad2\",\"name\":\"gitleaks\",\"slug\":\"gitleaks\",\"description\":\"Protect and discover secrets using Gitleaks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/zricethezav/gitleaks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"devsecops\",\"git\",\"secrets\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad4\",\"name\":\"gitpillage\",\"slug\":\"gitpillage\",\"description\":\"Extract data from a .git directory.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/gwen001/gitpillage\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"git\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad6\",\"name\":\"gitscraper\",\"slug\":\"gitscraper\",\"description\":\"Scrapes public GitHub repositories for common naming conventions in variables, folders and files.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/adamtlangley/gitscraper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\",\"files\",\"github\",\"parameters\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad8\",\"name\":\"gittyleaks\",\"slug\":\"gittyleaks\",\"description\":\"Find sensitive information for a git repo.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/kootenpv/gittyleaks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"git\",\"passwords\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59501\",\"name\":\"gittyleaks\",\"slug\":\"gittyleaks\",\"description\":\"Find sensitive information (username, password, email) in git repositories\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/kootenpv/gittyleaks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5958e\",\"name\":\"gmailc2\",\"slug\":\"gmailc2\",\"description\":\"Undetectable C2 server that c
99ommunicates via Google SMTP to evade antivirus protections and network traffic restrictions\",\"category\":\"red-teaming\",\"source\":\"https://github.com/machine1337/gmailc2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a1\",\"name\":\"go-cve-dictionary\",\"slug\":\"go-cve-dictionary\",\"description\":\"Self-hosted CVE feed server\",\"category\":\"vulnerability-assessment\",\"source\":\"https://github.com/vulsio/go-cve-dictionary\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"nvd\",\"jvn\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ad9\",\"name\":\"go-dork\",\"slug\":\"go-dork\",\"description\":\"The fastest dork scanner written in Go.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/dwisiswant0/go-dork\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bing\",\"dorks\",\"google\",\"shodan\",\"yahoo\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ada\",\"name\":\"go-secdump\",\"slug\":\"go-secdump\",\"description\":\"Tool to remotely dump secrets from the Windows registry.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/jfjallid/go-secdump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"secrets\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59770\",\"name\":\"go-secdump\",\"slug\":\"go-secdump\",\"description\":\"Remotely dump secrets from the Windows registry (SAM hive, LSA secrets, SECURITY hive)\",\"category\":\"networking\",\"source\":\"https://github.com/jfjallid/go-secdump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053adb\",\"name\":\"go-stare\",\"slug\":\"go-stare\",\"description\":\"A fast \u0026 light web screenshot without headless browser but Chrome DevTools protocol.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/dwisiswant0/go-stare\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\",\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae2\",\"name\":\"godap\",\"slug\":\"godap\",\"description\":\"A complete TUI for LDAP.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Macmod/godap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ldap\",\"users\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59627\",\"name\":\"goddi\",\"slug\":\"goddi\",\"description\":\"Active Directory domain information dumper\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/NetSPI/goddi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59773\",\"name\":\"goddi\",\"slug\":\"goddi\",\"description\":\"Active Directory domain information dumper\",\"category\":\"networking\",\"source\":\"https://github.com/NetSPI/goddi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593f9\",\"name\":\"gofingerprint\",\"slug\":\"gofingerprint\",\"description\":\"Indentify web servers by checking their HTTP responses against a user defined list of fingerprints\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Static-Flow/gofingerprint\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae6\",\"name\":\"google-authenticator-exporter\",\"slug\":\"google-authenticator-exporter\",\"description\":\"Get the TOTP secrets exported by Google Authenticator.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/krissrex/google-authenticator-exporter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"2fa\",\"google\",\"mfa\",\"secrets\",\"totp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593fa\",\"name\":\"goop\",\"slug\":\"goop\",\"description\":\"Dump the contents of a remote git repository without directory listing enabled; focus on as-complete-as-possible dumps and handling as many edge-cases as possible\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/nyancrimew/goop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ae9\",\"name\":\"goreplay\",\"slug\":\"goreplay\",\"description\":\"Capture and replay live HTTP traffic in order to continuously test your system with real data.\",\"category\":\"network\",\"source\":\"https://github.com/buger/goreplay\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"network\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aea\",\"name\":\"gorgo\",\"slug\":\"gorgo\",\"description\":\"The vertasile multi-threaded password sprayer built on the shoulders of giants.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/pry0cc/gorgo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"passwords\",\"spraying\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aec\",\"name\":\"gospider\",\"slug\":\"gospider\",\"description\":\"Fast web spider written in Go.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/jaeles-project/gospider\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"directories\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aed\",\"name\":\"gotator\",\"slug\":\"gotator\",\"description\":\"Generates DNS wordlists through permutations.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Josue87/gotator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b593fc\",\"name\":\"gowitness\",\"slug\":\"gowitness\",\"description\":\"Take screenshots of websites\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/sensepost/gowitness\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053aef\",\"name\":\"gowitness\",\"slug\":\"gowitness\",\"description\":\"A golang, web screenshot utility using Chrome Headless.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/sensepost/gowitness\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af1\",\"name\":\"grafana-ssrf\",\"slug\":\"grafana-ssrf\",\"description\":\"Authenticated SSRF in Grafana.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/RandomRobbieBF/grafana-ssrf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"azure\",\"cloud\",\"exploits\",\"google\",\"grafana\",\"ssrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af2\",\"name\":\"graftcp\",\"slug\":\"graftcp\",\"description\":\"A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.\",\"category\":\"network\",\"source\":\"https://github.com/hmgle/graftcp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"proxy\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595df\",\"name\":\"graphcat\",\"slug\":\"graphcat\",\"description\":\"Generate graphs and charts based on password cracking results; supports hashcat and john the ripper potfile as well as ntds file\",\"category\":\"cracking\",\"source\":\"https://github.com/Orange-Cyberdefense/graphcat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af7\",\"name\":\"graphql-armor\",\"slug\":\"graphql-armor\",\"description\":\"The missing GraphQL security security layer.\",\"category\":\"databases\",\"source\":\"https://github.com/Escape-Technologies/graphql-armor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af8\",\"name\":\"graphql-introspection-analyzer\",\"slug\":\"graphql-introspection-analyzer\",\"description\":\"Graphql introspection query anal
99yzer.\",\"category\":\"databases\",\"source\":\"https://github.com/gwen001/graphql-introspection-analyzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053af9\",\"name\":\"graphql-path-enum\",\"slug\":\"graphql-path-enum\",\"description\":\"Lists the different ways of reaching a given type in a GraphQL schema.\",\"category\":\"databases\",\"source\":\"https://gitlab.com/dee-see/graphql-path-enum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59403\",\"name\":\"graphql-path-enum\",\"slug\":\"graphql-path-enum\",\"description\":\"Lists the different ways of reaching a given type in a GraphQL schema\",\"category\":\"web-application-exploitation\",\"source\":\"https://gitlab.com/dee-see/graphql-path-enum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053afa\",\"name\":\"graphql-voyager\",\"slug\":\"graphql-voyager\",\"description\":\"Represent any GraphQL API as an interactive graph.\",\"category\":\"databases\",\"source\":\"https://github.com/graphql-kit/graphql-voyager\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"graphql\",\"online\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59404\",\"name\":\"graphql.security\",\"slug\":\"graphqlsecurity\",\"description\":\"Runs a dozen of security checks against a given GraphQL endpoint\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053afc\",\"name\":\"graphw00f\",\"slug\":\"graphw00f\",\"description\":\"GraphQL Server Engine Fingerprinting utility for software security professionals.\",\"category\":\"databases\",\"source\":\"https://github.com/dolevf/graphw00f\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"graphql\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59406\",\"name\":\"graphw00f\",\"slug\":\"graphw00f\",\"description\":\"GraphQL server engine fingerprinting\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/dolevf/graphw00f\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b00\",\"name\":\"grep.app\",\"slug\":\"grep.app\",\"description\":\"Searches code from over a half million public repositories on GitHub.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"online\",\"regexp\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b02\",\"name\":\"grr\",\"slug\":\"grr\",\"description\":\"An incident response framework focused on remote live forensics.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/google/grr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"defense\",\"forensic\",\"organizer\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59591\",\"name\":\"gscript\",\"slug\":\"gscript\",\"description\":\"Genesis Scripting Engine; framework to rapidly implement custom droppers for all three major operating systems\",\"category\":\"red-teaming\",\"source\":\"https://github.com/gen0cide/gscript\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5971f\",\"name\":\"gtfo\",\"slug\":\"gtfo\",\"description\":\"CLI for searching gtfobins and lolbas from the terminal\",\"category\":\"other\",\"source\":\"https://github.com/mzfr/gtfo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b09\",\"name\":\"gwdomains\",\"slug\":\"gwdomains\",\"description\":\"Sub domain wild card filtering tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/thelikes/gwdomains\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"recon\",\"subdomains\",\"wildcard\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b0c\",\"name\":\"h1-search\",\"slug\":\"h1-search\",\"description\":\"Request the public disclosures on a specific HackerOne program.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/dsopas/h1-search\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"hackerone\",\"reports\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b0d\",\"name\":\"h2cSmuggler\",\"slug\":\"h2csmuggler\",\"description\":\"HTTP Request Smuggling over HTTP/2 Cleartext.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/BishopFox/h2csmuggler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hrs\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59506\",\"name\":\"h8mail\",\"slug\":\"h8mail\",\"description\":\"Email OSINT \u0026 Password breach hunting tool; supports chasing down related email\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/khast3x/h8mail\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"email\",\"breach\",\"password\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b0e\",\"name\":\"h8mail\",\"slug\":\"h8mail\",\"description\":\"Powerful and user-friendly password hunting tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/opencubicles/h8mail\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"leaks\",\"passwords\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5955b\",\"name\":\"hackOx\",\"slug\":\"hackox\",\"description\":\"Modular web based pentesting interface designed to run on Raspberry Pi\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/deantonious/hackox_old\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b1b\",\"name\":\"hakfindinternaldomains\",\"slug\":\"hakfindinternaldomains\",\"description\":\"Feed it a list of subdomains, it will resolve them and tell you which ones are internal.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hakluke/hakfindinternaldomains\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"ips\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b1c\",\"name\":\"hakip2host\",\"slug\":\"hakip2host\",\"description\":\"Takes a list of IP addresses then does a series of checks to return associated domain names.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hakluke/hakip2host\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b1d\",\"name\":\"haklistgen\",\"slug\":\"haklistgen\",\"description\":\"Turns any junk text into a usable wordlist for brute-forcing.\",\"category\":\"resources\",\"source\":\"https://github.com/hakluke/haklistgen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"utils\",\"
99wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b1e\",\"name\":\"hakoriginfinder\",\"slug\":\"hakoriginfinder\",\"description\":\"Discover the origin host behind a reverse proxy, useful for bypassing cloud WAFs!.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hakluke/hakoriginfinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"ips\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b1f\",\"name\":\"hakrawler\",\"slug\":\"hakrawler\",\"description\":\"Simple, fast web crawler designed for discovery of endpoints and assets within a web application.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hakluke/hakrawler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b20\",\"name\":\"hakrevdns\",\"slug\":\"hakrevdns\",\"description\":\"Small, fast tool for performing reverse DNS lookups en masse.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hakluke/hakrevdns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b21\",\"name\":\"haktldextract\",\"slug\":\"haktldextract\",\"description\":\"Extract domains/subdomains from URLs en masse.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hakluke/haktldextract\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"endpoints\",\"subdomains\",\"tld\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b22\",\"name\":\"haktrails\",\"slug\":\"haktrails\",\"description\":\"Golang client for querying SecurityTrails API data.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hakluke/haktrails\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"ports\",\"securitytrails\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b24\",\"name\":\"hardCIDR\",\"slug\":\"hardcidr\",\"description\":\"Discover the netblocks or ranges (in CIDR notation) owned by the target organization.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/trustedsec/hardcidr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"asn\",\"ips\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b27\",\"name\":\"harpoon\",\"slug\":\"harpoon\",\"description\":\"CLI tool for open source and threat intelligence.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Te-k/harpoon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"emails\",\"ips\",\"osint\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59806\",\"name\":\"hashID\",\"slug\":\"hashid\",\"description\":\"Identify the different types of hashes\",\"category\":\"cryptography\",\"source\":\"https://github.com/psypanda/hashID\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e1\",\"name\":\"hashcobra\",\"slug\":\"hashcobra\",\"description\":\"Hash cracking tool using rainbow tables\",\"category\":\"cracking\",\"source\":\"https://github.com/hashcat/hashcat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"password\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b2d\",\"name\":\"hauditor\",\"slug\":\"hauditor\",\"description\":\"Analyze the security headers returned by a web page and report dangerous configurations.\",\"category\":\"network\",\"source\":\"https://github.com/trap-bytes/hauditor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cors\",\"headers\",\"http\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b34\",\"name\":\"hcxdumptool\",\"slug\":\"hcxdumptool\",\"description\":\"Small tool to capture packets from wlan devices.\",\"category\":\"network\",\"source\":\"https://github.com/ZerBea/hcxdumptool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wpa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59408\",\"name\":\"headerpwn\",\"slug\":\"headerpwn\",\"description\":\"Fuzzer for analyzing how servers respond to different HTTP headers\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/roglew/guppy-proxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b35\",\"name\":\"headi\",\"slug\":\"headi\",\"description\":\"Customisable and automated HTTP header injection.\",\"category\":\"network\",\"source\":\"https://github.com/mlcsec/headi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"headers\",\"http\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59664\",\"name\":\"heaphopper\",\"slug\":\"heaphopper\",\"description\":\"Bounded model checking framework for Heap-implementations\",\"category\":\"b
99inary-exploitation\",\"source\":\"https://github.com/angr/heaphopper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b38\",\"name\":\"hetty\",\"slug\":\"hetty\",\"description\":\"An HTTP toolkit for security research.\",\"category\":\"network\",\"source\":\"https://github.com/dstotijn/hetty\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"proxy\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59724\",\"name\":\"hideNsneak\",\"slug\":\"hidensneak\",\"description\":\"CLI tool for ephemeral penetration testing, rapidly deploy and manage various cloud services\",\"category\":\"other\",\"source\":\"https://github.com/rmikehodges/hideNsneak\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b3b\",\"name\":\"hoaxshell\",\"slug\":\"hoaxshell\",\"description\":\"Windows reverse shell payload generator and handler that abuses the http(s) protocol.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/t3l3machus/hoaxshell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"payloads\",\"shell\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59779\",\"name\":\"hoaxshell\",\"slug\":\"hoaxshell\",\"description\":\"Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell\",\"category\":\"networking\",\"source\":\"https://github.com/t3l3machus/hoaxshell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59508\",\"name\":\"holehe\",\"slug\":\"holehe\",\"description\":\"Check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/megadose/holehe\",\"review_youtube_id\":\"Tn4jxRVbmm0\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"osint\",\"socialnetworks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b3e\",\"name\":\"honggfuzz\",\"slug\":\"honggfuzz\",\"description\":\"A security oriented software fuzzer.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/google/honggfuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59807\",\"name\":\"houndsniff\",\"slug\":\"houndsniff\",\"description\":\"Identify the different types of hashes\",\"category\":\"cryptography\",\"source\":\"https://github.com/MichaelDim02/houndsniff\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b41\",\"name\":\"hping\",\"slug\":\"hping\",\"description\":\"Network tool able to send custom TCP/IP packets.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/antirez/hping\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\",\"network\",\"scanner\",\"tcp\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b42\",\"name\":\"hrekt\",\"slug\":\"hrekt\",\"description\":\"A really fast HTTP prober.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ethicalhackingplayground/hrekt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"probing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5940b\",\"name\":\"http-garden\",\"slug\":\"http-garden\",\"description\":\"Differential testing and fuzzing of HTTP servers and proxies\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/narfindustries/http-garden\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b45\",\"name\":\"http-request-smuggling\",\"slug\":\"http-request-smuggling\",\"description\":\"HTTP Request Smuggling Detection Tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/anshumanpattnaik/http-request-smuggling\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hrs\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59651\",\"name\":\"http-screenshot-html\",\"slug\":\"http-screenshot-html\",\"description\":\"Nmap NSE script that scans for http server, takes a screenshot of them, and organizes the results into an HTML report\",\"category\":\"plugins\",\"source\":\"https://github.com/afxdub/http-screenshot-html\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b49\",\"name\":\"httprebind\",\"slug\":\"httprebind\",\"description\":\"Automatic tool for DNS rebinding-based SSRF attacks.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/daeken/httprebind\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"google\",\"ssrf\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b4a\",\"name\":\"httprobe\",\"slug\":\"httprobe\",\"description\":\"Take a list of domains and probe for working HTTP and HTTPS servers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/tomnomnom/httprobe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"probing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b4b\",\"name\":\"httpscreenshot\",\"slug\":\"httpscreenshot\",\"description\":\"Grabs screenshots and HTML of large numbers of websites.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/breenmachine/httpscreenshot/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5940c\",\"name\":\"httpscreenshot\",\"slug\":\"httpscreenshot\",\"description\":\"Take screenshots of websites\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/breenmachine/httpscreenshot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b4c\",\"name\":\"httpx\",\"slug\":\"httpx\",\"description\":\"HTTP toolkit that allows running multiple probes using the retryablehttp library.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/httpx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"probing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5940d\",\"name\":\"httpx\",\"slug\":\"httpx\",\"description\":\"Multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/projectdiscovery/httpx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b4d\",\"name\":\"hunter.how\",\"slug\":\"hunter.how\",\"description\":\"Internet search engines for security researchers.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"dns\",\"ips\",\"network\",\"online\",\"ports\",\"recon\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b50\",\"name\":\"icmpdoor\",\"slug\":\"icmpdoor\",\"description\":\"An ICMP reverse shell written in Python3 and scapy.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/krabelize/icmpdoor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"
99icmp\",\"postexploitation\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b52\",\"name\":\"ike-scan\",\"slug\":\"ike-scan\",\"description\":\"Discover and fingerprint IKE hosts.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/royhills/ike-scan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\",\"ike\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b53\",\"name\":\"ikeforce\",\"slug\":\"ikeforce\",\"description\":\"Command line IPSEC VPN brute forcing tool for Linux.\",\"category\":\"network\",\"source\":\"https://github.com/SpiderLabs/ikeforce\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"ipsec\",\"usernames\",\"vpn\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b56\",\"name\":\"impacket\",\"slug\":\"impacket\",\"description\":\"Collection of Python classes for working with network protocols.\",\"category\":\"network\",\"source\":\"https://github.com/fortra/impacket\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"network\",\"protocols\",\"samba\",\"tcp\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b58\",\"name\":\"infer\",\"slug\":\"infer\",\"description\":\"A static analyzer for Java, C, C++, and Objective-C.\",\"category\":\"development\",\"source\":\"https://github.com/facebook/infer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"java\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b5a\",\"name\":\"infoooze\",\"slug\":\"infoooze\",\"description\":\"User-friendly OSINT tool that allows you to quickly and easily gather informations.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/devXprite/infoooze\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"osint\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59727\",\"name\":\"inlite\",\"slug\":\"inlite\",\"description\":\"Scan QR-code, 1D, DataMatrix, Postal, PDF417, and more\",\"category\":\"other\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59816\",\"name\":\"intel-wifi-research-tools\",\"slug\":\"intel-wifi-research-tools\",\"description\":\"Research tools developed for Intel Wi-Fi chips : decode firmware files, communicate with the chip through Linux's debug filesystem\",\"category\":\"wireless\",\"source\":\"https://github.com/Ledger-Donjon/intel-wifi-research-tools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b62\",\"name\":\"interactsh\",\"slug\":\"interactsh\",\"description\":\"An OOB interaction gathering server and client library\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/projectdiscovery/interactsh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"oob\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b70\",\"name\":\"ipsourcebypass\",\"slug\":\"ipsourcebypass\",\"description\":\"Bypass IP source restrictions using HTTP headers.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/p0dalirius/ipsourcebypass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authorization\",\"bypass\",\"http\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b71\",\"name\":\"is-website-vulnerable\",\"slug\":\"is-website-vulnerable\",\"description\":\"Finds publicly known security vulnerabilities in a website's frontend JavaScript libraries.\",\"category\":\"development\",\"source\":\"https://github.com/lirantal/is-website-vulnerable\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"javascript\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59729\",\"name\":\"itdis\",\"slug\":\"itdis\",\"description\":\"Is This Domain In Scope; a small tool that allows you to check if a list of domains you have been provided is in the scope of your pentest or not\",\"category\":\"other\",\"source\":\"https://gitlab.com/noraj/itdis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b8f\",\"name\":\"jSQL Injection\",\"slug\":\"jsql-injection\",\"description\":\"Java application for automatic SQL database injection.\",\"category\":\"development\",\"source\":\"https://github.com/ron190/jsql-injection\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"java\",\"sqli\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b74\",\"name\":\"ja3\",\"slug\":\"ja3\",\"description\":\"Create SSL client fingerprints in an easy to produce and shareable way.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/salesforce/ja3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\",\"ssl\",\"tls\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b75\",\"name\":\"jackdaw\",\"slug\":\"jackdaw\",\"description\":\"Gather gather gather.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/skelsec/jackdaw\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"domains\",\"hash\",\"passwords\",\"usernames\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59697\",\"name\":\"jadx\",\"slug\":\"jadx\",\"description\":\"DEX to Java decompiler\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/skylot/jadx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b76\",\"name\":\"jadx\",\"slug\":\"jadx\",\"description\":\"Dex to Java decompiler.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/skylot/jadx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"decompiler\",\"java\",\"mobile\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e8\",\"name\":\"johnny\",\"slug\":\"johnny\",\"description\":\"GUI frontend to John the Ripper\",\"category\":\"cracking\",\"source\":\"https://github.com/openwall/johnny\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"password\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b7f\",\"name\":\"jok3r\",\"slug\":\"jok3r\",\"description\":\"Network and Web Pentest Automation Framework.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/koutto/jok3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"cves\",\"fingerprint\",\"framework\",\"organizer\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b83\",\"name\":\"js-beautify\",\"slug\":\"js-beautify\",\"description\":\"Beautifier for JavaScript.\",\"category\":\"development\",\"source\":\"https://github.com/beautifier/js-beautify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"css\",\"html\",\"javascript\",\"obfuscation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b86\",\"name\":\"jsfinder\",\"slug\":\"jsfinder\",\"description\":\"Fetches JavaScript files quickly and comprehensively from a defined list of URLs or domains.\",\"category\":\"development\",\"source\":\"https://github.com/kacakb/jsfinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\",\"javascript\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b88\",\"name\":\"jsleak\",\"slug\":\"jsleak\",\"description\":\"Find secrets, paths or links in the source code.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/channyein1337/jsleak\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"javascript\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b89\",\"name\":\"jsluice\",\"slug\":\"jsluice\",\"description\":\"Extract URLs, paths, secrets, and other interesting bits from JavaScript.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/BishopFox/jsluice\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\",\"javascript\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b8a\",\"name\":\"json-web-tokens\",\"slug\":\"json-web-tokens\",\"description\":\"JSON Web Tokens Support for Burp Suite.\",\"category\":\"development\",\"source\":\"https://github.com/PortSwigger/json-web-tokens\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"json\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b91\",\"name\":\"jswzl\",\"slug\":\"jswzl\",\"description\":\"Improve your web application aecurity testing with rich data from static analysis.\",\"category\":\"development\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"javascript\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b96\",\"name\":\"jwt-cracker\",\"slug\":\"jwt-cracker\",\"description\":\"Simple JWT token brute force cracker.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/lmammino/jwt-cracker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"cracker\",\"jwt\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b97\",\"name\":\"jwt-hack\",\"slug\":\"jwt-hack\",\"description\":\"JWT encoding/decoding, generates payloads for JWT attack and very fast cracking.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/hahwul/jwt-hack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"cracker\",\"jwt\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59418\",\"name\":\"jwt-hack\",\"slug\":\"jwt-hack\",\"description\":\"A toolkit for JWT tokens security testing\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/hahwul/jwt-hack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b98\",\"name\":\"jwt-heartbreaker\",\"slug\":\"jwt-heartbreaker\",\"description\":\"Burp Suite extension to check JWT for using keys from known from public sources.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/wallarm/jwt-heartbreaker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"burpsuite\",\"jwt\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59419\",\"name\":\"jwt_tool\",\"slug\":\"jwt_tool\",\"description\":\"A toolkit for validating, forging and cracking JWT tokens\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/ticarpi/jwt_tool\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5941a\",\"name\":\"jwtcat\",\"slug\":\"jwtcat\",\"description\":\"JWT brute-force cracker\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/AresS31/jwtcat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053b9a\",\"name\":\"jwtear\",\"slug\":\"jwtear\",\"description\":\"Modular command-line tool to parse, create and manipulate JWT tokens.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/KINGSABRI/jwtear\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"jwt\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5977f\",\"name\":\"kalitorify\",\"slug\":\"kalitorify\",\"description\":\"Script for Kali Linux which use iptables settings to create a transparent proxy through Tor Network\",\"category\":\"networking\",\"source\":\"https://github.com/brainfucksec/kalitorify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ba0\",\"name\":\"karma v2\",\"slug\":\"karma-v2\",\"description\":\"Passive open source intelligence automated reconnaissance.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Dheerajmadhukar/karma_v2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"cves\",\"ips\",\"leaks\",\"osint\",\"ports\",\"shodan\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ba1\",\"name\":\"katana\",\"slug\":\"katana\",\"description\":\"A next-generation crawling and spidering framework.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/katana\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ba2\",\"name\":\"katoolin3\",\"slug\":\"katoolin3\",\"description\":\"Get your favourite Kali Linux tools on Debian/Ubuntu/Linux Mint.\",\"category\":\"virtualization\",\"source\":\"https://github.com/s-h-3-l-l/katoolin3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"toolkit\",\"utils\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ba5\",\"name\":\"kerberoast\",\"slug\":\"kerberoast\",\"description\":\"Series of tools for attacking MS Kerberos implementations.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/nidem/kerberoast\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"kerberos\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053ba7\",\"name\":\"kerbrute\",\"slug\":\"kerbrute\",\"description\":\"Bruteforce and enumerate Active Directory accounts through Kerberos pre-authentication.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ropnop/kerbrute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"authentication\",\"bruteforce\",\"domains\",\"kerberos\"],\"usedInReports\":true,\"company\":\"\"}
99,{\"_id\":\"688d0d5c5bc8deef67053ba8\",\"name\":\"kernel-exploit-factory\",\"slug\":\"kernel-exploit-factory\",\"description\":\"Linux kernel CVE exploit analysis report and relative debug environment.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/bsauce/kernel-exploit-factory\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"kernel\",\"linux\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053baa\",\"name\":\"keyhacks.sh\",\"slug\":\"keyhacks.sh\",\"description\":\"Automation of tokens/api keys testing.\",\"category\":\"development\",\"source\":\"https://github.com/gwen001/keyhacks.sh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595e9\",\"name\":\"kh2hc\",\"slug\":\"kh2hc\",\"description\":\"Convert OpenSSH known_hosts file hashed with HashKnownHosts to hashes crackable by Hashcat\",\"category\":\"cracking\",\"source\":\"https://github.com/noraj/kh2hc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bac\",\"name\":\"kicks3\",\"slug\":\"kicks3\",\"description\":\"S3 bucket finder from html,js and bucket misconfiguration testing tool.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/abuvanth/kicks3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bae\",\"name\":\"king-phisher\",\"slug\":\"king-phisher\",\"description\":\"Phishing Campaign Toolkit.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rsmusllp/king-phisher\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"phishing\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb1\",\"name\":\"kiterunner\",\"slug\":\"kiterunner\",\"description\":\"Contextual content discovery tool.\",\"category\":\"development\",\"source\":\"https://github.com/assetnote/kiterunner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"endpoints\",\"recon\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5950c\",\"name\":\"kitphishr\",\"slug\":\"kitphishr\",\"description\":\"Hunts for phishing kit source code by traversing URL folders and searching in open directories for zip files; supports list of URLs or PhishTank\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/cybercdh/kitphishr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bb6\",\"name\":\"komiser\",\"slug\":\"komiser\",\"description\":\"Cloud resources manager designed to analyze and manage cloud cost, usage, security, and more!.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/tailwarden/komiser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"azure\",\"cloud\",\"digitalocean\",\"google\",\"scaleway\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bba\",\"name\":\"kube-bench\",\"slug\":\"kube-bench\",\"description\":\"Checks whether Kubernetes is deployed according to security best practices.\",\"category\":\"virtualization\",\"source\":\"https://github.com/aquasecurity/kube-bench\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"kubernetes\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bbf\",\"name\":\"kxss\",\"slug\":\"kxss\",\"description\":\"Adaption of tomnomnom's kxss tool with a different output format.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Emoe/kxss\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc0\",\"name\":\"l0phtcrack\",\"slug\":\"l0phtcrack\",\"description\":\"Crack Windows passwords from hashes.\",\"category\":\"auth-perms\",\"source\":\"https://gitlab.com/l0phtcrack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"hash\",\"ntlm\",\"passwords\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5959a\",\"name\":\"lateralus\",\"slug\":\"lateralus\",\"description\":\"Terminal based phishing c
99ampaign tool\",\"category\":\"red-teaming\",\"source\":\"https://github.com/lateralusd/lateralus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc3\",\"name\":\"lazyegg\",\"slug\":\"lazyegg\",\"description\":\"Powerful tool for extracting various types of data from a target URL.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/schooldropout1337/lazyegg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"ips\",\"secrets\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bc6\",\"name\":\"lazys3\",\"slug\":\"lazys3\",\"description\":\"Ruby script to bruteforce for AWS s3 buckets using different permutations.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/nahamsec/lazys3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a0\",\"name\":\"ldd\",\"slug\":\"ldd\",\"description\":\"Tool that print shared library dependencies\",\"category\":\"reverse-engineering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59785\",\"name\":\"ldeep\",\"slug\":\"ldeep\",\"description\":\"Active Directory LDAP enumeration utility\",\"category\":\"networking\",\"source\":\"https://github.com/franc-pentest/ldeep\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bcc\",\"name\":\"leakScraper\",\"slug\":\"leakscraper\",\"description\":\"Set of tools to process and visualize huge text files containing credentials.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/Acceis/leakScraper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leaks\",\"osint\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59511\",\"name\":\"leakScraper\",\"slug\":\"leakscraper\",\"description\":\"Set of tools to process and visualize huge text files containing credentials\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/Acceis/leakScraper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59665\",\"name\":\"libformatstr\",\"slug\":\"libformatstr\",\"description\":\"Library to simplify format string exploitation\",\"category\":\"binary-exploitation\",\"source\":\"https://github.com/hellman/libformatstr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597e9\",\"name\":\"libiris\",\"slug\":\"libiris\",\"description\":\"Cross-platform sandboxing library\",\"category\":\"defensive\",\"source\":\"https://github.com/mtth-bfft/libiris\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bd5\",\"name\":\"ligolo\",\"slug\":\"ligolo\",\"description\":\"Reverse tunneling made easy for pentesters.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/sysdream/ligolo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"postexploitation\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bdf\",\"name\":\"linWinPwn\",\"slug\":\"linwinpwn\",\"description\":\"Automates a number of Active Directory enumeration and vulnerability.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/lefayjey/linWinPwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"enumeration\",\"linux\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59789\",\"name\":\"linWinPwn\",\"slug\":\"linwinpwn\",\"description\":\"Script that automates a number of Active Directory enumeration and vulnerability checks\",\"category\":\"networking\",\"source\":\"https://github.com/lefayjey/linWinPwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5959c\",\"name\":\"link\",\"slug\":\"link\",\"description\":\"Command and control framework; HTTPS communication, process injection, in-memory .NET assembly execution, SharpCollection tools, sRDI implementation for shellcode generation, Windows link reloads DLLs from disk into current process\",\"category\":\"red-teaming\",\"source\":\"https://github.com/postrequest/link\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bdc\",\"name\":\"linux-exploit-suggester\",\"slug\":\"les\",\"description\":\"Linux privilege escalation auditing tool.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/The-Z-Labs/linux-exploit-suggester\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"linux\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5962d\",\"name\":\"linux-exploit-suggester.sh\",\"slug\":\"linux-exploit-suggestersh\",\"description\":\"Linux kernel exploit suggester\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/mzet-/linux-exploit-suggester\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bdd\",\"name\":\"linux-smart-enumeration\",\"slug\":\"linux-smart-enumeration\",\"description\":\"Linux enumeration tool for pentesting and CTFs with verbosity levels.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/diego-treitos/linux-smart-enumeration\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"enumeration\",\"linux\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bde\",\"name\":\"linuxprivchecker\",\"slug\":\"linuxprivchecker\",\"description\":\"A Linux privilege escalation check
99script.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/sleventyeleven/linuxprivchecker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"linux\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5962e\",\"name\":\"linuxprivchecker.py\",\"slug\":\"linuxprivcheckerpy\",\"description\":\"Linux privilege escalation check script\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/sleventyeleven/linuxprivchecker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be0\",\"name\":\"linx\",\"slug\":\"linx\",\"description\":\"Reveals invisible links within JavaScript files.\",\"category\":\"development\",\"source\":\"https://github.com/riza/linx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"javascript\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be1\",\"name\":\"litefuzz\",\"slug\":\"litefuzz\",\"description\":\"A multi-platform fuzzer for poking at userland binaries and servers.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/sec-tools/litefuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be4\",\"name\":\"lk_scraper\",\"slug\":\"lk_scraper\",\"description\":\"A fully configurable LinkedIn scraper: scrape anything within LinkedIn.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/jqueguiner/lk_scraper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linkedin\",\"scraper\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be5\",\"name\":\"lnkbomb\",\"slug\":\"lnkbomb\",\"description\":\"Malicious shortcut generator for collecting NTLM hashes from insecure file shares.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/dievus/lnkbomb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"passwords\",\"samba\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053be6\",\"name\":\"localdataHog\",\"slug\":\"localdatahog\",\"description\":\"String-based secret-searching tool, high entropy and regexes.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ewilded/localdataHog\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"reports\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ec\",\"name\":\"longtongue\",\"slug\":\"longtongue\",\"description\":\"Password wordlist generator based on target information\",\"category\":\"cracking\",\"source\":\"https://github.com/edoardottt/longtongue\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bee\",\"name\":\"lorsrf\",\"slug\":\"lorsrf\",\"description\":\"Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/knassar702/lorsrf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"oob\",\"ssrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bef\",\"name\":\"lsassy\",\"slug\":\"lsassy\",\"description\":\"Python tool to remotely extract credentials on a set of hosts.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Hackndo/lsassy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"credentials\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5978b\",\"name\":\"lsassy\",\"slug\":\"lsassy\",\"description\":\"CLI tool and library to extract credentials from lsass remotely\",\"category\":\"networking\",\"source\":\"https://github.com/Hackndo/lsassy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\",\"mimikatz\",\"wmi\",\"kerberos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf1\",\"name\":\"lyncsmash\",\"slug\":\"lyncsmash\",\"description\":\"Locate and attack Lync and Skype for Business.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/nyxgeek/lyncsmash\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"lync\",\"skype\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf2\",\"name\":\"lynis\",\"slug\":\"lynis\",\"description\":\"Security auditing tool for Linux, macOS, and UNIX-based systems.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/CISOfy/lynis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"linux\",\"macos\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ed\",\"name\":\"lyricpass\",\"slug\":\"lyricpass\",\"description\":\"Tool to generate wordlists based on lyrics\",\"category\":\"cracking\",\"source\":\"https://github.com/initstring/lyricpass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\",\"lyrics\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf4\",\"name\":\"macchanger\",\"slug\":\"macchanger\",\"description\":\"Makes the maniputation of MAC addresses of network interfaces easier.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/alobbs/macchanger\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5959e\",\"name\":\"macro_pack\",\"slug\":\"macro_pack\",\"description\":\"Obfuscation and generation of retro formats such as MS Office documents or VBS like format\",\"category\":\"red-teaming\",\"source\":\"https://github.com/sevagas/macro_pack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"antimalware\",\"bypass\",\"shortcut\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf6\",\"name\":\"magspoof\",\"slug\":\"magspoof\",\"description\":\"A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card wirelessly.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/samyk/magspoof\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"nfc\",\"rfid\",\"spoofing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bf9\",\"name\":\"malicious-pdf\",\"slug\":\"malicious-pdf\",\"description\":\"Generates a bunch of malicious pdf files with phone-home functionality.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/jonaslejon/malicious-pdf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"exploits\",\"pdf\",\"phones\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bfb\",\"name\":\"maltrail\",\"slug\":\"maltrail\",\"description\":\"Malicious traffic detection system.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/stamparm/maltrail\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"defense\",\"ids\",\"malware\",\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053bfe\",\"name\":\"mana\",\"slug\":\"mana\",\"description\":\"W
99ifi rogue AP attacks and MitM.\",\"category\":\"network\",\"source\":\"https://github.com/sensepost/mana\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mitm\",\"network\",\"toolkit\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59517\",\"name\":\"mantis\",\"slug\":\"mantis\",\"description\":\"Command-line framework designed to automate the workflow of asset discovery, reconnaissance, and scanning\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/PhonePe/mantis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c00\",\"name\":\"mapcidr\",\"slug\":\"mapcidr\",\"description\":\"Small utility program to perform multiple operations for a given subnet/CIDR ranges.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/mapcidr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"ports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c03\",\"name\":\"mass-s3-bucket-tester\",\"slug\":\"mass-s3-bucket-tester\",\"description\":\"Tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/random-robbie/mass-s3-bucket-tester\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5972d\",\"name\":\"mec\",\"slug\":\"mec\",\"description\":\"MassExploitConsole; mass reconnaissance and exploitation framework\",\"category\":\"other\",\"source\":\"https://github.com/jm33-m0/mec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c08\",\"name\":\"meg\",\"slug\":\"meg\",\"description\":\"Fetch many paths for many hosts, without killing the hosts.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/tomnomnom/meg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c09\",\"name\":\"mentalist\",\"slug\":\"mentalist\",\"description\":\"Graphical tool for custom wordlist generation.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/sc0tfree/mentalist\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c0a\",\"name\":\"merlin\",\"slug\":\"merlin\",\"description\":\"Cross-platform post-exploitation HTTP/2 Command \u0026 Control server and agent.\",\"category\":\"network\",\"source\":\"https://github.com/Ne0nd0g/merlin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"exploits\",\"http\",\"postexploitation\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c0e\",\"name\":\"metahttp\",\"slug\":\"metahttp\",\"description\":\"Script that automates the scanning of a target network for HTTP resources through XXE.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/vp777/metahttp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"scanner\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c10\",\"name\":\"metasploitable\",\"slug\":\"metasploitable\",\"description\":\"VM that is built from the ground up with a large amount of security vulnerabilities.\",\"category\":\"resources\",\"source\":\"https://github.com/rapid7/metasploitable3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"resources\",\"training\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c11\",\"name\":\"mfoc\",\"slug\":\"mfoc\",\"description\":\"Mifare classic offline cracker.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/nfc-tools/mfoc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"iot\",\"mifare\",\"rfid\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5951a\",\"name\":\"mihari\",\"slug\":\"mihari\",\"description\":\"Aggregates results from Shodan, Censys, VirusTotal, SecurityTrail, etc. and extracts artifacts (IP addresses, domains, URLs or hashes
99)\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/ninoseki/mihari\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c15\",\"name\":\"mimikatz\",\"slug\":\"mimikatz\",\"description\":\"A little tool to play with Windows security.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/gentilkiwi/mimikatz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cracker\",\"hash\",\"ntlm\",\"passwords\",\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59630\",\"name\":\"mimikatz\",\"slug\":\"mimikatz\",\"description\":\"Extract plaintext passwords, hash, PIN code and kerberos tickets from memory; perform pass-the-hash, pass-the-ticket or build Golden tickets\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/gentilkiwi/mimikatz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c16\",\"name\":\"mimikittenz\",\"slug\":\"mimikittenz\",\"description\":\"A post-exploitation powershell tool for extracting juicy info from memory.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/orlyjamie/mimikittenz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"memory\",\"secrets\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59631\",\"name\":\"minidump\",\"slug\":\"minidump\",\"description\":\"Library and CLI to parse and read Microsoft minidump file format\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/skelsec/minidump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c17\",\"name\":\"mitm6\",\"slug\":\"mitm6\",\"description\":\"pwning IPv4 via IPv6.\",\"category\":\"network\",\"source\":\"https://github.com/dirkjanm/mitm6\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"network\",\"protocols\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c18\",\"name\":\"mitmAP\",\"slug\":\"mitmap\",\"description\":\"A python program to create a fake AP and sniff data.\",\"category\":\"network\",\"source\":\"https://github.com/xdavidhu/mitmAP\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mitm\",\"sniffer\",\"wifi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59425\",\"name\":\"mitmproxy\",\"slug\":\"mitmproxy\",\"description\":\"Interactive HTTPS proxy\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/mitmproxy/mitmproxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c19\",\"name\":\"mitmproxy\",\"slug\":\"mitmproxy\",\"description\":\"An interactive TLS-capable intercepting HTTP proxy.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/mitmproxy/mitmproxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mitm\",\"proxy\",\"ssl\",\"tls\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c1b\",\"name\":\"mksub\",\"slug\":\"mksub\",\"description\":\"Generate tens of thousands of subdomain combinations in a matter of seconds.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/trickest/mksub\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59791\",\"name\":\"modifyCertTemplate\",\"slug\":\"modifycerttemplate\",\"description\":\"Aid operators in modifying ADCS certificate templates so that a created vulnerable state can be leveraged for privilege escalation\",\"category\":\"networking\",\"source\":\"https://github.com/fortalice/modifyCertTemplate\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"esc4\",\"acl\",\"ace\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c1e\",\"name\":\"moniorg\",\"slug\":\"moniorg\",\"description\":\"Leverage crt.sh website to monitor domains of a target.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/yousseflahouifi/moniorg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"monitoring\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595a4\",\"name\":\"monomorph\",\"slug\":\"monomorph\",\"description\":\"MD5-monomorphic shellcode packer, all payloads have the same MD5 hash\",\"category\":\"red-teaming\",\"source\":\"https://github.com/DavidBuchanan314/monomorph\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59427\",\"name\":\"monsoon\",\"slug\":\"monsoon\",\"description\":\"Web directory and file scanner (wordlist bruteforce)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/RedTeamPentesting/monsoon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c1f\",\"name\":\"moonwalk-back\",\"slug\":\"moonwalk-back\",\"description\":\"Cover your tracks during Linux exploitation by leaving zero traces on the exploited system.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/Aditya-dom/moonwalk-back\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"linux\",\"logs\",\"postexploitation\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c21\",\"name\":\"morphHTA\",\"slug\":\"morphhta\",\"description\":\"Morphing Cobalt Strike's evil.HTA.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/vysecurity/morphHTA\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cobaltstrike\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c2a\",\"name\":\"msLDAPDump\",\"slug\":\"msldapdump\",\"description\":\"LDAP enumeration tool implemented in Python3.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/dievus/msLDAPDump\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"enumeration\",\"kerberos\",\"ldap\",\"ntlm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c28\",\"name\":\"msfpc\",\"slug\":\"msfpc\",\"description\":\"A quick way to generate various basic Meterpreter payloads via MSFvenom.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/g0tmi1k/msfpc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"metasploit\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c29\",\"name\":\"msldap\",\"slug\":\"msldap\",\"description\":\"LDAP library for auditing Microsoft Active Directory.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/skelsec/msldap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"ldap\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c2d\",\"name\":\"mssqlproxy\",\"slug\":\"mssqlproxy\",\"description\":\"Perform lateral movement in restricted environments through a compromised MSSQL Server.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/blackarrowsec/mssqlproxy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mssql\",\"privesc\",\"sqli\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c2f\",\"name\":\"murphysec\",\"slug\":\"murphysec\",\"description\":\"An open source tool focused on software supply chain security.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/murphysecurity/murphysec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"dependencies\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c30\",\"name\":\"mvt\",\"slug\":\"mvt\",\"description\":\"Helps with conducting forensics of mobile devices in order to find signs of a potential compromise.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/mvt-project/mvt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"forensic\",\"ios\",\"mobile\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c31\",\"name\":\"mx-takeover\",\"slug\":\"mx-takeover\",\"description\":\"Focuses DNS MX records and detects misconfigured MX records.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/musana/mx-takeover\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"subdomains\",\"subto\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c33\",\"name\":\"mythril\",\"slug\":\"mythril\",\"description\":\"Security analysis tool for EVM bytecode that supports smart contracts builds.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Consensys/mythril\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"blockchain\",\"ethereum\",\"web3\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59793\",\"name\":\"naabu\",\"slug\":\"naabu\",\"description\":\"Port scanner with a focus on reliability and simplicity\",\"category\":\"networking\",\"source\":\"https://github.com/projectdiscovery/naabu\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c39\",\"name\":\"nasm\",\"slug\":\"nasm\",\"description\":\"A cross-platform x86 assembler with an Intel-like syntax.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/netwide-assembler/nasm\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"assembler\",\"development\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c3a\",\"name\":\"nbtscan\",\"slug\":\"nbtscan\",\"description\":\"Scan networks searching for NetBIOS information.\",\"category\":\"network\",\"source\":\"https://github.com/resurrecting-open-source-projects/nbtscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"netbios\",\"network\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59794\",\"name\":\"ncat\",\"slug\":\"ncat\",\"description\":\"Improved reimplementation of Netcat by nmap team; Supports TCP and UDP, IPv4 and IPv6, SSL, proxy (HTTP and SOCKS4)\",\"category\":\"networking\",\"source\":\"https://github.com/nmap/nmap/tree/master/ncat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"reverse shell\",\"bind shell\",\"listener\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c3b\",\"name\":\"ncrack\",\"slug\":\"ncrack\",\"description\":\"Open source tool for network authentication cracking.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/nmap/ncrack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"authentication\",\"bruteforce\",\"cracker\",\"network\",\"protocols\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59796\",\"name\":\"nemesis\",\"slug\":\"nemesis\",\"description\":\"Packet manipulation CLI tool; craft and inject packets of several protocols\",\"category\":\"networking\",\"source\":\"https://github.com/troglobit/nemesis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c3e\",\"name\":\"netcap\",\"slug\":\"netcap\",\"description\":\"A framework for secure and scalable network traffic analysis.\",\"category\":\"network\",\"source\":\"https://github.com/dreadl0ck/netcap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"monitoring\",\"network\",\"protocols\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c3f\",\"name\":\"netdiscover\",\"slug\":\"netdiscover\",\"description\":\"Network address discovering tool.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/netdiscover-scanner/netdiscover\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"arp\",\"network\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596a3\",\"name\":\"netzob\",\"slug\":\"netzob\",\"description\":\"Protocol reverse engineering, modeling and fuzzing\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/netzob/netzob\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c46\",\"name\":\"nexfil\",\"slug\":\"nexfil\",\"description\":\"O
99SINT tool for finding profiles by username.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/thewhiteh4t/nexfil\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5979b\",\"name\":\"ngocok\",\"slug\":\"ngocok\",\"description\":\"ngrok collaborator link\",\"category\":\"networking\",\"source\":\"https://github.com/dwisiswant0/ngocok\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5942a\",\"name\":\"nikto\",\"slug\":\"nikto\",\"description\":\"Very light web security scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/sullo/nikto\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c4e\",\"name\":\"nipper-ng\",\"slug\":\"nipper-ng\",\"description\":\"Network infrastructure configuration parser.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/arpitn30/nipper-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"parser\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5979e\",\"name\":\"nmap-parse-output\",\"slug\":\"nmap-parse-output\",\"description\":\"Converts / manipulates / extracts data from a nmap scan output\",\"category\":\"networking\",\"source\":\"https://github.com/ernw/nmap-parse-output\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c52\",\"name\":\"nmap-query-xml\",\"slug\":\"nmap-query-xml\",\"description\":\"A simple program to query nmap XML files in the terminal.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/honze-net/nmap-query-xml\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"ports\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c53\",\"name\":\"nmapAutomater\",\"slug\":\"nmapautomater\",\"description\":\"Automate the process of enumeration \u0026 recon that is run every time.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/21y4d/nmapAutomator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"automation\",\"cms\",\"directories\",\"nmap\",\"ports\",\"recon\",\"scanner\",\"toolkit\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c56\",\"name\":\"nodejsscan\",\"slug\":\"nodejsscan\",\"description\":\"A static security code scanner for Node.js applications.\",\"category\":\"development\",\"source\":\"https://github.com/ajinabraham/nodejsscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"javascript\",\"nodejs\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f0\",\"name\":\"npk\",\"slug\":\"npk\",\"description\":\"Distributed hash cracking platform meant to be deployed on AWS (Cognito, DynamoDB, S3) so you pay only when you have a task running\",\"category\":\"cracking\",\"source\":\"https://github.com/c6fc/npk\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5951e\",\"name\":\"nqntnqnqmb\",\"slug\":\"nqntnqnqmb\",\"description\":\"Retrieve information on linkedin profiles, companies on linkedin and search on linkedin companies/persons\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/megadose/nqntnqnqmb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a1\",\"name\":\"ntlm_theft\",\"slug\":\"ntlm_theft\",\"description\":\"Generate multiple types of NTLMv2 hash theft files\",\"category\":\"networking\",\"source\":\"https://github.com/Greenwolf/ntlm_theft\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c61\",\"name\":\"nuclei-burp-plugin\",\"slug\":\"nuclei-burp-plugin\",\"description\":\"A Burp Suite plugin intended to help with Nuclei template generation.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/projectdiscovery/nuclei-burp-plugin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c62\",\"name\":\"nuclei-wordfence-cve\",\"slug\":\"nuclei-wordfence-cve\",\"description\":\"Collection of Nuclei templates dedicated to WordPress core, plugins and themes vulnerabilities.\",\"category\":\"cms\",\"source\":\"https://github.com/topscoder/nuclei-wordfence-cve\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"resources\",\"templates\",\"wordfence\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594a3\",\"name\":\"nvd_feed_api\",\"slug\":\"nvd_feed_api\",\"description\":\"A ruby API for NVD CVE feeds management, the library will help you to download and manage NVD Data Feeds, search for CVEs, build your vulerability assesment platform or vulnerability database\",\"category\":\"vulnerability-assessment\",\"source\":\"https://gitlab.com/noraj/nvd_api\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c63\",\"name\":\"o365recon\",\"slug\":\"o365recon\",\"description\":\"Retrieve information via O365 and AzureAD with valid credentials.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/nyxgeek/o365recon\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"azure\",\"cloud\",\"enumeration\",\"o365\",\"users\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59730\",\"name\":\"objection\",\"slug\":\"objection\",\"description\":\"Runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak\",\"category\":\"other\",\"source\":\"https://github.com/sensepost/objection\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c65\",\"name\":\"objection\",\"slug\":\"objection\",\"description\":\"Runtime mobile exploration.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/sensepost/objection\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"frida\",\"ios\",\"mobile\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c66\",\"name\":\"octosql\",\"slug\":\"octosql\",\"description\":\"CLI tool which lets you query a plethora of databases and file formats.\",\"category\":\"databases\",\"source\":\"https://github.com/cube2222/octosql\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"database\",\"sql\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c67\",\"name\":\"octosuite\",\"slug\":\"octosuite\",\"description\":\"An all-in-one GitHub open-source intelligence framework.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/bellingcat/octosuite\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"github\",\"osint\",\"users\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c69\",\"name\":\"off-by-slash\",\"slug\":\"off-by-slash\",\"description\":\"Burp extension to detect alias traversal via NGINX misconfiguration at scale.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/bayotop/off-by-slash\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c6f\",\"name\":\"onedrive_user_enum\",\"slug\":\"onedrive_user_enum\",\"description\":\"Enumerate valid o365 users.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/nyxgeek/onedrive_user_enum\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"o365\",\"office\",\"usernames\",\"users\",\"
99windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a2\",\"name\":\"onesixtyone\",\"slug\":\"onesixtyone\",\"description\":\"SNMP scanner\",\"category\":\"networking\",\"source\":\"https://github.com/trailofbits/onesixtyone\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c73\",\"name\":\"open-sesame\",\"slug\":\"open-sesame\",\"description\":\"Contains HackerOne disclosed reports and other bug bounty writeups.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/humblelad/open-sesame\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugbounty\",\"hackerone\",\"reports\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c7d\",\"name\":\"orpheus\",\"slug\":\"orpheus\",\"description\":\"Bypass Kerberoast detections with modified KDC options and encryption types.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/trustedsec/orpheus\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"encryption\",\"kerberos\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c81\",\"name\":\"osintname\",\"slug\":\"osintname\",\"description\":\"Generate emails and usernames.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/yuyudhn/osintname\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"osint\",\"usernames\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5942f\",\"name\":\"otori\",\"slug\":\"otori\",\"description\":\"On The Outside, Reaching In, exploitation toolbox for XXE attacks\",\"category\":\"web-application-exploitation\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597a4\",\"name\":\"owabrute\",\"slug\":\"owabrute\",\"description\":\"Hydra wrapper for bruteforcing Microsoft Outlook Web Application\",\"category\":\"networking\",\"source\":\"https://github.com/p0dalirius/owabrute\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"owa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c8a\",\"name\":\"owasp MASTG\",\"slug\":\"owasp-mastg\",\"description\":\"Comprehensive manual for mobile application security testing and reverse engineering.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/OWASP/owasp-mastg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"learning\",\"mobile\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c8b\",\"name\":\"owasp MASVS\",\"slug\":\"owasp-masvs\",\"description\":\"The industry standard for mobile application security.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/OWASP/owasp-masvs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"ios\",\"learning\",\"mobile\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c8d\",\"name\":\"oxml_xxe\",\"slug\":\"oxml_xxe\",\"description\":\"Embeds XXE/XML exploits into different filetypes.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/BuffaloWill/oxml_xxe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"payloads\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59432\",\"name\":\"oxml_xxe\",\"slug\":\"oxml_xxe\",\"description\":\"Tool for embedding XXE/XML exploits into different filetypes (docx/xlsx, odt/ods, svg, xml, etc.)\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/BuffaloWill/oxml_xxe\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c8e\",\"name\":\"oyente\",\"slug\":\"oyente\",\"description\":\"An analysis tool for smart contracts.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/enzymefinance/oyente\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"blockchain\",\"ethereum\",\"web3\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c8f\",\"name\":\"p0f\",\"slug\":\"p0f\",\"description\":\"Identify the operating system of a target host simply by examining captured packets.\",\"category\":\"network\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fingerprint\",\"http\",\"network\",\"tcp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59634\",\"name\":\"p0wnedShell\",\"slug\":\"p0wnedshell\",\"description\":\"PowerShell runspace post exploitation toolkit\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/Cn33liz/p0wnedShell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c92\",\"name\":\"padding-oracle-attacker\",\"slug\":\"padding-oracle-attacker\",\"description\":\"Execute padding oracle attacks with support for concurrent network requests and an elegant UI.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/KishanBagaria/padding-oracle-attacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"oracle\",\"passwords\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c93\",\"name\":\"pagodo\",\"slug\":\"pagodo\",\"description\":\"Automate google hacking database scraping and searching.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/opsdisk/pagodo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dorks\",\"google\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c94\",\"name\":\"param-miner\",\"slug\":\"param-miner\",\"description\":\"Identifies hidden, unlinked parameters, useful for finding web cache poisoning vulnerabilities.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/PortSwigger/param-miner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"parameters\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5c5bc8deef67053c95\",\"name\":\"parameth\",\"slug\":\"parameth\",\"description\":\"Brute discover GET and POST parameters.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/maK-/parameth\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"parameters\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59435\",\"name\":\"parameth\",\"slug\":\"parameth\",\"description\":\"HTTP parameter discovery suite\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/maK-/parameth\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053c9b\",\"name\":\"pass-station\",\"slug\":\"pass-station\",\"description\":\"CLI \u0026 library to search for default credentials among thousands of products/vendors.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/sec-it/pass-station\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053c9c\",\"name\":\"passiveDNS\",\"slug\":\"passivedns\",\"description\":\"A network sniffer that logs all DNS server replies for use in a passive DNS setup.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gamelinux/passivedns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"requests\",\"sniffer\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597f9\",\"name\":\"pcc\",\"slug\":\"pcc\",\"description\":\"PHP Secure Configuration Checker; parse php.ini to find security misconfiguration\",\"category\":\"configuration-audit\",\"source\":\"https://github.com/sektioneins/pcc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ab\",\"name\":\"pe_to_shellcode\",\"slug\":\"pe_to_shellcode\",\"description\":\"Converts PE into a shellcode\",\"category\":\"red-teaming\",\"source\":\"https://github.com/hasherezade/pe_to_shellcode\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca4\",\"name\":\"peda\",\"slug\":\"peda\",\"description\":\"Python Exploit Development Assistance for GDB.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/longld/peda\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"debug\",\"exploits\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ca9\",\"name\":\"personal-security-checklist\",\"slug\":\"personal-security-checklist\",\"description\":\"A compiled checklist of 300+ tips for protecting digital security and privacy.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Lissy93/personal-security-checklist\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"defense\",\"privacy\",\"resources\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ad\",\"name\":\"phpsploit\",\"slug\":\"phpsploit\",\"description\":\"Command \u0026 Controll framework which silently persists on webserver via polymorphic PHP oneliner\",\"category\":\"red-teaming\",\"source\":\"https://github.com/nil0x42/phpsploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c\u0026c\",\"c2\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb0\",\"name\":\"phpsploit\",\"slug\":\"phpsploit\",\"description\":\"Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/nil0x42/phpsploit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"backdoor\",\"c2c\",\"exploits\",\"framework\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb3\",\"name\":\"pingcastle\",\"slug\":\"pingcastle\",\"description\":\"Get Active Directory security at 80% in 20% of the time.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/vletoux/pingcastle\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"azure\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb4\",\"name\":\"pipedream\",\"slug\":\"pipedream\",\"description\":\"Collect HTTP or webhook requests and inspect them in a human-friendly way.\",\"category\":\"network\",\"source\":\"https://github.com/PipedreamH
99Q/pipedream\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"http\",\"online\",\"requests\",\"utils\",\"webhooks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb6\",\"name\":\"pivotnacci\",\"slug\":\"pivotnacci\",\"description\":\"A tool to make socks connections through HTTP agents.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/blackarrowsec/pivotnacci\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"pivot\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb7\",\"name\":\"plasma\",\"slug\":\"plasma\",\"description\":\"Interactive disassembler that generates indented pseudo-code with colored syntax.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/plasma-disassembler/plasma\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"arm\",\"disassembler\",\"reverse-engineering\",\"x86\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb8\",\"name\":\"plution\",\"slug\":\"plution\",\"description\":\"Prototype pollution scanner using headless chrome.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/raverrr/plution\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"parameters\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cb9\",\"name\":\"pmd\",\"slug\":\"pmd\",\"description\":\"An extensible multilanguage static code analyzer.\",\"category\":\"development\",\"source\":\"https://github.com/pmd/pmd\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"html\",\"java\",\"javascript\",\"xml\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f4\",\"name\":\"pnwgen\",\"slug\":\"pnwgen\",\"description\":\"Phone number wordlist generator\",\"category\":\"cracking\",\"source\":\"https://github.com/toxydose/pnwgen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\",\"phone\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597aa\",\"name\":\"polarbearscan\",\"slug\":\"polarbearscan\",\"description\":\"Port scanner and banner grabber\",\"category\":\"networking\",\"source\":\"https://github.com/gvb84/pbscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc4\",\"name\":\"postMessage-tracker\",\"slug\":\"postmessage-tracker\",\"description\":\"A Chrome Extension to track postMessage usage (url, domain and stack).\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/fransr/postMessage-tracker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"postmessage\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc1\",\"name\":\"postleaks\",\"slug\":\"postleaks\",\"description\":\"Search for sensitive data in Postman public library.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/cosad3s/postleaks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\",\"postman\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cc2\",\"name\":\"postmaniac\",\"slug\":\"postmaniac\",\"description\":\"Postman OSINT tool to extract creds, token, username, email \u0026 more from Postman Public Workspaces.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/boringthegod/postmaniac\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\",\"postman\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ccc\",\"name\":\"pown.js\",\"slug\":\"pown.js\",\"description\":\"Security testing and exploitation toolkit.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/pownjs/pown\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"framework\",\"recon\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5943d\",\"name\":\"ppfuzz\",\"slug\":\"ppfuzz\",\"description\":\"Scan for client-side prototype pollution\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/dwisiswant0/ppfuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ccd\",\"name\":\"ppfuzz\",\"slug\":\"ppfuzz\",\"description\":\"A fast tool to scan client-side prototype pollution vulnerability written in Rust.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/dwisiswant0/ppfuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"prototype-pollution\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5943e\",\"name\":\"pphack\",\"slug\":\"pphack\",\"description\":\"Client-side prototype pollution scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/edoardottt/pphack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cce\",\"name\":\"pphack\",\"slug\":\"pphack\",\"description\":\"The most advanced client-side prototype pollution scanner.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/edoardottt/pphack\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"prototype-pollution\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ccf\",\"name\":\"ppmap\",\"slug\":\"ppmap\",\"description\":\"Exploitation tool which leverages client-side Prototype Pollution to XSS.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/kleiton0x00/ppmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"prototype-pollution\",\"scanner\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cd3\",\"name\":\"prototype-pollution-exploits\",\"slug\":\"prototype-pollution-exploits\",\"description\":\"Prototype Pollution exploits collection.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Kirill89/prototype-pollution-exploits\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"prototype-pollution\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cd5\",\"name\":\"proxify\",\"slug\":\"proxify\",\"description\":\"Swiss Army knife Proxy tool for HTTP(S) traffic capture, manipulation, and replay on the go.\",\"category\":\"network\",\"source\":\"https://github.com/projectdiscovery/proxify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"proxy\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cd6\",\"name\":\"proxmark3\",\"slug\":\"proxmark3\",\"description\":\"RFID tool designed to snoop, listen and emulate everything from Low to High Frequency tags.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Proxmark/proxmark3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"hardware\",\"rfid\"],\"usedInReports\":false,\"company\":\"\"}
99,{\"_id\":\"688d0d5d5bc8deef67053cd7\",\"name\":\"proxychains\",\"slug\":\"proxychains\",\"description\":\"Force any TCP connection made by any given application to follow through proxy.\",\"category\":\"network\",\"source\":\"https://github.com/haad/proxychains\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"proxy\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cd8\",\"name\":\"proxychains-ng\",\"slug\":\"proxychains-ng\",\"description\":\"Continuation of the unmaintained proxychains project.\",\"category\":\"network\",\"source\":\"https://github.com/rofl0r/proxychains-ng\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"proxy\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59639\",\"name\":\"pspy\",\"slug\":\"pspy\",\"description\":\"CLI tool designed to snoop on processes without need for root permissions; it allows to see commands run by other users, cron jobs, etc. as they execute\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/DominicBreuker/pspy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cdd\",\"name\":\"psudohash\",\"slug\":\"psudohash\",\"description\":\"Password list generator for orchestrating brute force attacks.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/t3l3machus/psudohash\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"passwords\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ae\",\"name\":\"pty4all\",\"slug\":\"pty4all\",\"description\":\"Persistent multi reverse shell handler\",\"category\":\"networking\",\"source\":\"https://github.com/laluka/pty4all\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"pty\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cdf\",\"name\":\"pupy\",\"slug\":\"pupy\",\"description\":\"Opensource, cross-platform C2 and post-exploitation framework written in python and C.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/n1nj4sec/pupy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"c2c\",\"framework\",\"linux\",\"macos\",\"postexploitation\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ce0\",\"name\":\"puredns\",\"slug\":\"puredns\",\"description\":\"Puredns is a fast domain resolver \u0026 subdomain bruteforcing tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/d3mondev/puredns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ce2\",\"name\":\"pwnagotchi\",\"slug\":\"pwnagotchi\",\"description\":\"Deep reinforcement learning instrumenting bettercap for WiFi pwning.\",\"category\":\"network\",\"source\":\"https://github.com/evilsocket/pwnagotchi\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"gpt\",\"network\",\"wifi\",\"wireless\",\"wpa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ce3\",\"name\":\"pwnat\",\"slug\":\"pwnat\",\"description\":\"Punch holes through firewalls/NATs where both clients and servers can be behind separate NATs.\",\"category\":\"network\",\"source\":\"https://github.com/samyk/pwnat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"firewall\",\"nat\",\"pivot\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597af\",\"name\":\"pwncat\",\"slug\":\"pwncat\",\"description\":\"Sophisticated bind and reverse shell handler with many features as well as a drop-in replacement or compatible complement to netcat, ncat or socat\",\"category\":\"networking\",\"source\":\"https://github.com/cytopia/pwncat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ce4\",\"name\":\"pwncat\",\"slug\":\"pwncat\",\"description\":\"Netcat on steroids with many extra features.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/cytopia/pwncat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"privesc\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b0\",\"name\":\"pwncat-caleb\",\"slug\":\"pwncat-caleb\",\"description\":\"Fancy reverse and bind shell handler, can perform automated actions on the remote host including enumeration, implant installation and privilege escalation; attempt to spawn a pseudoterminal (pty) for a full interactive session\",\"category\":\"networking\",\"source\":\"https://github.com/calebstewart/pwncat\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ce6\",\"name\":\"pwndrop\",\"slug\":\"pwndrop\",\"description\":\"Self-deployable file hosting service allowing to easily upload and share payloads over HTTP and WebD.\",\"category\":\"network\",\"source\":\"https://github.com/kgretzky/pwndrop\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"payloads\",\"postexploitation\",\"webdav\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ce9\",\"name\":\"pwntools\",\"slug\":\"pwntools\",\"description\":\"CTF framework and exploit development library.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/Gallopsled/pwntools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ctf\",\"exploits\",\"framework\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59666\",\"name\":\"pwntools\",\"slug\":\"pwntools\",\"description\":\"Framework and exploit development library\",\"category\":\"b
99inary-exploitation\",\"source\":\"https://github.com/Gallopsled/pwntools\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59667\",\"name\":\"pwntools-ruby\",\"slug\":\"pwntools-ruby\",\"description\":\"Framework and exploit development library, ported onto ruby\",\"category\":\"binary-exploitation\",\"source\":\"https://github.com/peter50216/pwntools-ruby\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cea\",\"name\":\"pyBuster\",\"slug\":\"pybuster\",\"description\":\"A multi-target URL bruteforcer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/pwndizzle/pybuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"endpoints\",\"ports\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b1\",\"name\":\"pyGPOAbuse\",\"slug\":\"pygpoabuse\",\"description\":\"Partial python implementation of SharpGPOAbuse; modify an existing GPO by creating an immediate scheduled task as SYSTEM on the remote computer for computer GPO or logged in user for user GPO\",\"category\":\"networking\",\"source\":\"https://github.com/Hackndo/pyGPOAbuse\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"active directory\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cec\",\"name\":\"pydictor\",\"slug\":\"pydictor\",\"description\":\"A powerful and useful hacker dictionary builder for a brute-force attack.\",\"category\":\"resources\",\"source\":\"https://github.com/LandGrey/pydictor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"utils\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f6\",\"name\":\"pydictor\",\"slug\":\"pydictor\",\"description\":\"Multi-method password wordlist generator\",\"category\":\"cracking\",\"source\":\"https://github.com/LandGrey/pydictor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"wordlist\",\"generator\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cee\",\"name\":\"pyfiscan\",\"slug\":\"pyfiscan\",\"description\":\"Free web-application vulnerability and version scanner.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/fgeek/pyfiscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"fingerprint\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5949d\",\"name\":\"pypotomux\",\"slug\":\"pypotomux\",\"description\":\"Protocol demuxed honeypot and wordlists collected from it\",\"category\":\"honeypot-and-decoy\",\"source\":\"https://github.com/laluka/pypotomux\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5963a\",\"name\":\"pypykatz\",\"slug\":\"pypykatz\",\"description\":\"Platform idependent Mimikatz implementation\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/skelsec/pypykatz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"lsass\",\"registry\",\"dpapi\",\"credentials\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf0\",\"name\":\"pypykatz\",\"slug\":\"pypykatz\",\"description\":\"Mimikatz implementation in pure Python.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/skelsec/pypykatz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"cracker\",\"ntlm\",\"passwords\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf4\",\"name\":\"pywerview\",\"slug\":\"pywerview\",\"description\":\"A (partial) Python rewriting of PowerSploit's PowerView.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/the-useless-one/pywerview\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"kerberos\",\"ldap\",\"linux\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b2\",\"name\":\"pywerview\",\"slug\":\"pywerview\",\"description\":\"A partial Python rewriting of PowerSploit's PowerView\",\"category\":\"networking\",\"source\":\"https://github.com/the-useless-one/pywerview\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ldap\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf5\",\"name\":\"qark\",\"slug\":\"qark\",\"description\":\"Look for several security related Android application vulnerabilities.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/linkedin/qark\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"apk\",\"codeanalysis\",\"mobile\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf7\",\"name\":\"qemu\",\"slug\":\"qemu\",\"description\":\"A generic and open source machine emulator and virtualizer.\",\"category\":\"virtualization\",\"source\":\"https://gitlab.com/qemu-project/qemu\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emulation\",\"vm\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf8\",\"name\":\"qira\",\"slug\":\"qira\",\"description\":\"QEMU Interactive Runtime Analyser.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/geohot/qira\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"debug\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cf9\",\"name\":\"qscan\",\"slug\":\"qscan\",\"description\":\"Quick network scanner library.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/0xor0ne/qscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"ports\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cfa\",\"name\":\"qsfuzz\",\"slug\":\"qsfuzz\",\"description\":\"qsfuzz is a tool that allows to write simple rules in YAML that define what value to inject\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ameenmaali/qsfuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cfb\",\"name\":\"qsinject\",\"slug\":\"qsinject\",\"description\":\"Allows you to quickly substitute query string values with regex matches, one-at-a-time.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ameenmaali/qsinject\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"parameters\",\"payloads\",\"regexp\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053cfc\",\"name\":\"qsreplace\",\"slug\":\"qsreplace\",\"description\":\"Accept URLs on stdin, replace all query string values with a user-supplied value.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/tomnomnom/qsreplace\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d06\",\"name\":\"radare2\",\"slug\":\"radare2\",\"description\":\"UNIX-like reverse engineering framework and command-line toolset.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/radareorg/radare2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"disassembler\",\"forensic\",\"malware\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596ae\",\"name\":\"radare2\",\"slug\":\"radare2\",\"description\":\"Crossplatform binary analysis framework, disassembler, decompiler and debugger, support collaborative analysis\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/radare/radare2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d0a\",\"name\":\"rate-limit-checker\",\"slug\":\"rate-limit-checker\",\"description\":\"Check whether the domain has a rate limit enabled.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/Sh1Yo/rate-limit-checker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ratelimit\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d0b\",\"name\":\"ratproxy\",\"slug\":\"ratproxy\",\"description\":\"A semi-automated largely passive web application security audit tool.\",\"category\":\"vulnerabilities\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"csrf\",\"proxy\",\"scanner\",\"xss\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59737\",\"name\":\"rawsec_cli\",\"slug\":\"rawsec_cli\",\"description\":\"Rawsec Inventory search CLI to find security tools and resources\",\"category\":\"other\",\"source\":\"https://github.com/tyki6/rawsec_cli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596af\",\"name\":\"rbkb\",\"slug\":\"rbkb\",\"description\":\"Ruby BlackBag; a miscellaneous collection of command-line tools and ruby library helpers related to pen-testing and reversing\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/emonti/rbkb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b5\",\"name\":\"rbndr\",\"slug\":\"rbndr\",\"description\":\"Server for testing software against DNS rebinding vulnerabilities\",\"category\":\"networking\",\"source\":\"https://github.com/taviso/rbndr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b6\",\"name\":\"rdp-sec-check\",\"slug\":\"rdp-sec-check\",\"description\":\"Script to enumerate security settings of an RDP Service\",\"category\":\"networking\",\"source\":\"https://github.com/portcullislabs/rdp-sec-check\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d0d\",\"name\":\"rdpy\",\"slug\":\"rdpy\",\"description\":\"Remote Desktop Protocol in twisted Python.\",\"category\":\"network\",\"source\":\"https://github.com/citronneur/rdpy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"honeypot\",\"mitm\",\"rdp\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d1c\",\"name\":\"reDuh\",\"slug\":\"reduh\",\"description\":\"Create a TCP circuit through validly formed HTTP requests.\",\"category\":\"network\",\"source\":\"https://github.com/sensepost/reDuh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"http\",\"rce\",\"shell\",\"tunnel\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597b7\",\"name\":\"reGeorg\",\"slug\":\"regeorg\",\"description\":\"SOCKS proxies through the DMZ for pivoting\",\"category\":\"networking\",\"source\":\"https://github.com/sensepost/reGeorg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d1d\",\"name\":\"reGeorg\",\"slug\":\"regeorg\",\"description\":\"Pwn a bastion webserver and create SOCKS proxies through the DMZ.\",\"category\":\"network\",\"source\":\"https://github.com/sensepost/reGeorg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"http\",\"rce\",\"shell\",\"tunnel\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59532\",\"name\":\"reNgine\",\"slug\":\"rengine\",\"description\":\"Automated recon framework for web applications; customizable scan engines \u0026 pipeline of reconnaissance\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/yogeshojha/rengine\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d0e\",\"name\":\"reapoc\",\"slug\":\"reapoc\",\"description\":\"OpenSource Poc \u0026\u0026 Vulnerable-Target Storage Box.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/cckuailong/reap
99oc\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"poc\",\"resources\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5981e\",\"name\":\"reaver-wps\",\"slug\":\"reaver-wps\",\"description\":\"Bruteforce WPS tool\",\"category\":\"wireless\",\"source\":\"https://code.google.com/archive/p/reaver-wps/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b5981f\",\"name\":\"reaver-wps (t6x fork)\",\"slug\":\"reaver-wps-t6x-fork\",\"description\":\"Bruteforce WPS tool\",\"category\":\"wireless\",\"source\":\"https://github.com/t6x/reaver-wps-fork-t6x\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d11\",\"name\":\"recollapse\",\"slug\":\"recollapse\",\"description\":\"Helper tool for black-box regex fuzzing to bypass validations.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/0xacb/recollapse\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5952b\",\"name\":\"reconFTW\",\"slug\":\"reconftw\",\"description\":\"Perform automated recon on a target domain by running set of tools to perform scanning and finding out vulnerabilities\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/six2dez/reconftw\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d13\",\"name\":\"reconFTW\",\"slug\":\"reconftw\",\"description\":\"Runs the best set of tools to perform scanning and finding out vulnerabilities on a target domain.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/six2dez/reconftw\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d1f\",\"name\":\"regulator\",\"slug\":\"regulator\",\"description\":\"Automated learning of regexes for DNS discovery.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/cramppet/regulator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d20\",\"name\":\"rekall\",\"slug\":\"rekall\",\"description\":\"Rekall Memory Forensic Framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/google/rekall\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"forensic\",\"framework\",\"memory\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594cd\",\"name\":\"rekall\",\"slug\":\"rekall\",\"description\":\"Volatile memory extraction utility\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/google/rekall\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594ce\",\"name\":\"rekall (Fireeye fork)\",\"slug\":\"rekall-fireeye-fork\",\"description\":\"Fork of rekall with support for Windows 10 memory compression\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/fireeye/win10_rekall\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d22\",\"name\":\"related-domains\",\"slug\":\"related-domains\",\"description\":\"Find related domains of a given domain.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/gwen001/related-domains\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d25\",\"name\":\"repo-supervisor\",\"slug\":\"repo-supervisor\",\"description\":\"Scan your code for security misconfiguration, search for passwords and secrets.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/auth0/repo-supervisor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"git\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d28\",\"name\":\"resolvers\",\"slug\":\"resolvers\",\"description\":\"The most exhaustive list of reliable DNS resolvers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/trickest/resolvers\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"probing\",\"resources\",\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d2d\",\"name\":\"reverse-shell-generator\",\"slug\":\"reverse-shell-generator\",\"description\":\"Hosted Reverse Shell generator with a ton of functionality.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/0dayCTF/reverse-shell-generator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ctf\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d30\",\"name\":\"rexsser\",\"slug\":\"rexsser\",\"description\":\"Burp Suite plugin that extracts ke
99ywords from response using and test for reflected XSS.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/profmoriarity/rexsser\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d32\",\"name\":\"ripgen\",\"slug\":\"ripgen\",\"description\":\"Rust-based high performance domain permutation generator.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/resyncgg/ripgen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5973a\",\"name\":\"ronin-exploits\",\"slug\":\"ronin-exploits\",\"description\":\"A micro-framework for writing and running exploits\",\"category\":\"Exploits\",\"source\":\"https://github.com/ronin-rb/ronin-exploits\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5973b\",\"name\":\"ronin-payloads\",\"slug\":\"ronin-payloads\",\"description\":\"A micro-framework for writing and running exploit payloads\",\"category\":\"Exploits\",\"source\":\"https://github.com/ronin-rb/ronin-payloads\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59445\",\"name\":\"ronin-vulns\",\"slug\":\"ronin-vulns\",\"description\":\"Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/ronin-ruby/ronin-vulns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597bd\",\"name\":\"ruby-nmap\",\"slug\":\"ruby-nmap\",\"description\":\"Library for nmap, allows automating nmap and parsing nmap XML files\",\"category\":\"networking\",\"source\":\"https://github.com/sophsec/ruby-nmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d39\",\"name\":\"ruler\",\"slug\":\"ruler\",\"description\":\"A tool to abuse Exchange services.\",\"category\":\"network\",\"source\":\"https://github.com/sensepost/ruler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exchange\",\"http\",\"microsoft\",\"rpc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595f8\",\"name\":\"rulesfinder\",\"slug\":\"rulesfinder\",\"description\":\"Machine-learn password mangling rules; finds efficient password mangling rules (for John the Ripper or Hashcat) for a given dictionary and a list of passwords\",\"category\":\"cracking\",\"source\":\"https://github.com/synacktiv/rulesfinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d3b\",\"name\":\"rush\",\"slug\":\"rush\",\"description\":\"A cross-platform command-line tool for executing jobs in parallel.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/shenwei356/rush\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59446\",\"name\":\"rustbuster\",\"slug\":\"rustbuster\",\"description\":\"Web directory, file and DNS scanner (wordlist bruteforce); but also a web fuzzer\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/phra/rustbuster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d40\",\"name\":\"s3-buckets-finder\",\"slug\":\"s3-buckets-finder\",\"description\":\"Find AWS S3 buckets and test their permissions.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/gwen001/s3-buckets-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d44\",\"name\":\"s3cXSSer\",\"slug\":\"s3cxsser\",\"description\":\"This extension will help you to detect GET/POST based XSS vulnerability in any website easily.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/s3c-krd/s3cXSSer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"browser\",\"chrome\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d42\",\"name\":\"s3cario\",\"slug\":\"s3cario\",\"description\":\"Performs buckets checks from a given list of subdomains.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/0xspade/s3cario\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d45\",\"name\":\"s3recon\",\"slug\":\"s3recon\",\"description\":\"Amazon S3 bucket finder and crawler.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/clarketm/s3re
99con\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d46\",\"name\":\"s3reverse\",\"slug\":\"s3reverse\",\"description\":\"The format of various S3 buckets is convert in one format.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/hahwul/s3reverse\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d48\",\"name\":\"s3tk\",\"slug\":\"s3tk\",\"description\":\"A security toolkit for Amazon S3.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/ankane/s3tk\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"aws\",\"buckets\",\"cloud\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c7\",\"name\":\"sJET\",\"slug\":\"sjet\",\"description\":\"JMX Exploitation Toolkit\",\"category\":\"networking\",\"source\":\"https://github.com/siberas/sjet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d4b\",\"name\":\"safecopy\",\"slug\":\"safecopy\",\"description\":\"Burp Extension for copying requests safely.\",\"category\":\"network\",\"source\":\"https://github.com/yashrs/safecopy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"headers\",\"http\",\"requests\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5963c\",\"name\":\"samdump2\",\"slug\":\"samdump2\",\"description\":\"Retrieves syskey and extract hashes from Windows 2k/NT/XP/Vista SAM, often used with bkhive, part of the ophcrack project\",\"category\":\"system-exploitation\",\"source\":\"https://sourceforge.net/projects/ophcrack/files/samdump2/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597c0\",\"name\":\"sandmap\",\"slug\":\"sandmap\",\"description\":\"Metasploit-like CLI interface for Nmap Script Engine (NSE)\",\"category\":\"networking\",\"source\":\"https://github.com/trimstray/sandmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d4f\",\"name\":\"sandsifter\",\"slug\":\"sandsifter\",\"description\":\"The x86 processor fuzzer.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/xoreaxeaxeax/sandsifter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"x86\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b4\",\"name\":\"sandsifter\",\"slug\":\"sandsifter\",\"description\":\"x86 processor fuzzer\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/xoreaxeaxeax/sandsifter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d53\",\"name\":\"scan-check-builder\",\"slug\":\"scan-check-builder\",\"description\":\"Burp Suite extension which helps to improve the active and passive scanner by yourself.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/scan-check-builder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d55\",\"name\":\"scanless\",\"slug\":\"scanless\",\"description\":\"Online port scan scraper.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/vesche/scanless\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"online\",\"ports\",\"scraper\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5963d\",\"name\":\"scavenger\",\"slug\":\"scavenger\",\"description\":\"multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as interesting files containing sensitive information\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/SpiderLabs/scavenger\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d69\",\"name\":\"secbutler\",\"slug\":\"secbutler\",\"description\":\"The perfect butler for pentesters, bug-bounty hunters and security researchers.\",\"category\":\"network\",\"source\":\"https://github.com/groundsec/secbutler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cheatsheets\",\"proxy\",\"shell\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d6d\",\"name\":\"secret-bridge\",\"slug\":\"secret-bridge\",\"description\":\"Monitors Github for leaked secrets.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/duo-labs/secret-bridge\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59448\",\"name\":\"secureCodeBox\",\"slug\":\"securecodebox\",\"description\":\"Continuous security scans based on kubernetes; orchestrate and automate a bunch of security-testing tools\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/secureCodeBox/secureCodeBox\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d72\",\"name\":\"securityonion\",\"slug\":\"securityonion\",\"description\":\"Free and open platform for threat hunting, enterprise security monitoring, and log management.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/Security-Onion-Solutions/securityonion\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"monitoring\",\"reports\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d77\",\"name\":\"sentrySSRF\",\"slug\":\"sentryssrf\",\"description\":\"Searching for Sentry config on page or in Javascript files and check blind SSRF.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/xawdxawdx/sentrySSRF\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sentry\",\"ssrf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d78\",\"name\":\"server-side-prototype-pollution\",\"slug\":\"server-side-prototype-pollution\",\"description\":\"Identifies server-side prototype pollution vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/PortSwigger/server-side-prototype-pollution\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"prototype-pollution\",\"scanner\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d7b\",\"name\":\"shad0w\",\"slug\":\"shad0w\",\"description\":\"A post exploitation framework designed to operate covertly on heavily monitored environments.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/bats3c/shad0w\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"postexploitation\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d0\",\"name\":\"shellbags\",\"slug\":\"shellbags\",\"description\":\"Shellbag parser (Windows Registry Keys)\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/williballenthin/shellbags\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d8b\",\"name\":\"shhgit\",\"slug\":\"shhgit\",\"description\":\"Secrets detection for your GitHub, GitLab and Bitbucket repositories.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/eth0izzle/shhgit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bitbucket\",\"github\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d8d\",\"name\":\"shosubgo\",\"slug\":\"shosubgo\",\"description\":\"Small tool to grab subdomains using Shodan API.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/incogbyte/shosubgo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"shodan\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59536\",\"name\":\"shosubgo\",\"slug\":\"shosubgo\",\"description\":\"Grab subdomains using Shodan api\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/incogbyte/shosubgo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d90\",\"name\":\"shuffleDNS\",\"slug\":\"shuffledns\",\"description\":\"Enumerate valid subdomains using active bruteforce and DNS resolution.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/shuffledns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59537\",\"name\":\"shuffledns\",\"slug\":\"shuffledns\",\"description\":\"Wrapper around massdns that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/projectdiscovery/shuffledns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596f0\",\"name\":\"simulator\",\"slug\":\"simulator\",\"description\":\"Distributed systems and infrastru
99cture simulator for attacking and debugging Kubernetes, creates a Kubernetes cluster in AWS and runs scenarios which misconfigure it or leave it vulnerable to compromise to train in mitigating against these vulnerabilities\",\"category\":\"intentionally-vulnerable-applications\",\"source\":\"https://github.com/controlplaneio/simulator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5944e\",\"name\":\"sj\",\"slug\":\"sj\",\"description\":\"Swagger Jacker; audit API endpoints defined in exposed (Swagger/OpenAPI) definition files\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/BishopFox/sj\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d97\",\"name\":\"skipfish\",\"slug\":\"skipfish\",\"description\":\"Active web application security reconnaissance tool.\",\"category\":\"informations-gathering\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"directories\",\"endpoints\",\"reports\",\"scanner\",\"sitemap\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d9b\",\"name\":\"slither\",\"slug\":\"slither\",\"description\":\"Static analyzer for Solidity.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/crytic/slither\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ethereum\",\"solidity\",\"web3\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d9c\",\"name\":\"sliver\",\"slug\":\"sliver\",\"description\":\"Adversary emulation framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/BishopFox/sliver\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"c2c\",\"framework\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d9e\",\"name\":\"smap\",\"slug\":\"smap\",\"description\":\"A drop-in replacement for Nmap powered by shodan.io.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/s0md3v/Smap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053d9f\",\"name\":\"smb-scanner\",\"slug\":\"smb-scanner\",\"description\":\"Samba scanning tool.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/TechnicalMujeeb/smb-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"samba\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da1\",\"name\":\"smbcrawler\",\"slug\":\"smbcrawler\",\"description\":\"No-nonsense tool that takes credentials and a list of hosts and crawls through those shares.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/SySS-Research/smbcrawler\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053da4\",\"name\":\"smbmap\",\"slug\":\"smbmap\",\"description\":\"A handy SMB enumeration tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ShawnDEvans/smbmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"samba\",\"shares\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dab\",\"name\":\"snallygaster\",\"slug\":\"snallygaster\",\"description\":\"Tool to scan for secret files on HTTP servers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hannob/snallygaster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"leaks\",\"passwords\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59451\",\"name\":\"snallygaster\",\"slug\":\"snallygaster\",\"description\":\"Web scanner that looks for files accessible on web servers that shouldn't be public\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/hannob/snallygaster\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ca\",\"name\":\"snmpbw.pl\",\"slug\":\"snmpbwpl\",\"description\":\"Multithreaded script for bulk walking targeted host systems for SNMP data\",\"category\":\"networking\",\"source\":\"https://github.com/dheiland-r7/snmp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dae\",\"name\":\"sns\",\"slug\":\"sns\",\"description\":\"IIS shortname scanner written in Go.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/sw33tLie/sns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"iis\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053db2\",\"name\":\"socialhunter\",\"slug\":\"socialhunter\",\"description\":\"Crawls the website and finds broken social media links that can be hijacked\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/utkusen/socialhunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"404\",\"crawler\",\"endpoints\",\"second-order\",\"takeover\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053db4\",\"name\":\"sonarqube\",\"slug\":\"sonarqube\",\"description\":\"Continuous inspection.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/SonarSource/sonarqube\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"secrets\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053db6\",\"name\":\"sops\",\"slug\":\"sops\",\"description\":\"Simple and flexible tool for managing secrets.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/getsops/sops\",\"review_youtube_id\":\"NlLp2lfV1WQ\",\"sponsorship_level\":0,\"keywords\":[\"encryption\",\"secrets\",\"utils\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053db9\",\"name\":\"sourcemapper\",\"slug\":\"sourcemapper\",\"description\":\"Extract JavaScript source trees from source map files.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/denandz/sourcemapper\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"endpoints\",\"javascript\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dba\",\"name\":\"spaces-finder\",\"slug\":\"spaces-finder\",\"description\":\"A tool to hunt for publicly accessible DigitalOcean Spaces.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/appsecco/spaces-finder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"digitalocean\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dbb\",\"name\":\"spamscanner\",\"slug\":\"spamscanner\",\"description\":\"Node.js anti-spam, email filtering, and phishing prevention tool and service.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/spamscanner/spamscanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"defense\",\"emails\",\"phishing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5953a\",\"name\":\"spiderfoot\",\"slug\":\"spiderfoot\",\"description\":\"O
99SINT framework, collect and manage data, scan target\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/smicallef/spiderfoot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59452\",\"name\":\"spidr\",\"slug\":\"spidr\",\"description\":\"Web spidering library that can spider a site, multiple domains, certain links or infinitely\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/postmodern/spidr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5973f\",\"name\":\"sploitctl\",\"slug\":\"sploitctl\",\"description\":\"Fetch, install and search exploit archives from exploit sites like Packet Storm or Exploit-DB\",\"category\":\"other\",\"source\":\"https://github.com/BlackArch/sploitctl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc0\",\"name\":\"spoofcheck\",\"slug\":\"spoofcheck\",\"description\":\"Simple script that checks a domain for email protection.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/BishopFox/spoofcheck\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"spoofing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc4\",\"name\":\"spraykatz\",\"slug\":\"spraykatz\",\"description\":\"Credentials gathering tool automating remote procdump and parse of lsass process.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/aas-n/spraykatz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"lsass\",\"passwords\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc7\",\"name\":\"sqli-labs\",\"slug\":\"sqli-labs\",\"description\":\"SQLI labs to test error based, blind boolean based, time based.\",\"category\":\"resources\",\"source\":\"https://github.com/Audi-1/sqli-labs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"resources\",\"sqli\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dc9\",\"name\":\"sqlipy\",\"slug\":\"sqlipy\",\"description\":\"Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.\",\"category\":\"well-known-products\",\"source\":\"https://github.com/PortSwigger/sqli-py\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"sqli\",\"sqlmap\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59454\",\"name\":\"sqlmap\",\"slug\":\"sqlmap\",\"description\":\"Automatic SQL injection and database takeover\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/sqlmapproject/sqlmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dcc\",\"name\":\"sqlmap\",\"slug\":\"sqlmap\",\"description\":\"Automatic SQL injection and database takeover tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/sqlmapproject/sqlmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"sqli\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dce\",\"name\":\"sqlmate\",\"slug\":\"sqlmate\",\"description\":\"A friend of SQLmap which will do what you always expected from SQLmap.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/s0md3v/sqlmate\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sqli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd4\",\"name\":\"ssh-audit\",\"slug\":\"ssh-audit\",\"description\":\"SSH server auditing: banner, key exchange, encryption, compatibility, security...\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/arthepsy/ssh-audit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"encryption\",\"fingerprint\",\"ssh\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597cd\",\"name\":\"ssh-audit\",\"slug\":\"ssh-audit\",\"description\":\"SSH scanner that detects protocol, version, grab banner, recognize software and operating system, output algorithm information and recommendations\",\"category\":\"networking\",\"source\":\"https://github.com/jtesta/ssh-audit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd5\",\"name\":\"ssh-auditor\",\"slug\":\"ssh-auditor\",\"description\":\"The best way to scan for weak ssh passwords on your network.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ncsa/ssh-auditor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"network\",\"passwords\",\"scanner\",\"ssh\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd7\",\"name\":\"sshLooter\",\"slug\":\"sshlooter\",\"description\":\"Script to steal passwords from ssh.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/mthbernardes/sshLooter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"sniffer\",\"ssh\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd8\",\"name\":\"sshLooterC\",\"slug\":\"sshlooterc\",\"description\":\"It's the C version of sshLooter.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/mthbernardes/sshLooterC\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"sniffer\",\"ssh\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ce\",\"name\":\"sshame\",\"slug\":\"sshame\",\"description\":\"Brute force SSH public-key authentication interactively\",\"category\":\"networking\",\"source\":\"https://github.com/HynekPetrak/sshame\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59456\",\"name\":\"ssllabs-scan\",\"slug\":\"ssllabs-scan\",\"description\":\"CLI reference-implementation client for Qualys SSL Labs APIs, designed for automated and/
99or bulk testing\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/ssllabs/ssllabs-scan/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssl\",\"tls\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dd9\",\"name\":\"sslscan\",\"slug\":\"sslscan\",\"description\":\"Tests SSL/TLS enabled services to discover supported cipher suites.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/rbsec/sslscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssl\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59457\",\"name\":\"sslscan2\",\"slug\":\"sslscan2\",\"description\":\"Tests SSL/TLS enabled services to discover supported cipher suites\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/rbsec/sslscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssl\",\"tls\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dda\",\"name\":\"sslstrip\",\"slug\":\"sslstrip\",\"description\":\"A tool for exploiting Moxie Marlinspike's SSL \\\"stripping\\\" attack.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/moxie0/sslstrip\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"mitm\",\"network\",\"ssl\",\"stripping\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053de5\",\"name\":\"steghide\",\"slug\":\"steghide\",\"description\":\"Steganography program that hides secrets in the least significant bits of a file.\",\"category\":\"cryptanalysis\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"secrets\",\"steganography\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b6\",\"name\":\"strace\",\"slug\":\"strace\",\"description\":\"Debugger for Linux\",\"category\":\"reverse-engineering\",\"source\":\"https://sourceforge.net/projects/strace/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053deb\",\"name\":\"sub-domain enumeration techniques\",\"slug\":\"sub-domain-enumeration-techniques\",\"description\":\"Esoteric sub-domain enumeration techniques - Bugcrowd LevelUp\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bugcrowd\",\"resources\",\"subdomains\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dee\",\"name\":\"sub404\",\"slug\":\"sub404\",\"description\":\"A fast tool to check
99subdomain takeover vulnerability.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/r3curs1v3-pr0xy/sub404\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df4\",\"name\":\"subHijack\",\"slug\":\"subhijack\",\"description\":\"Hijacking forgotten \u0026 misconfigured subdomains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/vavkamil/old-repos-backup/tree/master/subHijack-master\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\",\"subto\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5953d\",\"name\":\"subfinder\",\"slug\":\"subfinder\",\"description\":\"Discovers valid subdomains for websites, designed as a passive framework to be useful for bug bounties and safe for penetration testing\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/projectdiscovery/subfinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df6\",\"name\":\"subjs\",\"slug\":\"subjs\",\"description\":\"Fetches javascript file from a list of URLS or subdomains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/lc/subjs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"javascript\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053df9\",\"name\":\"subnerium\",\"slug\":\"subnerium\",\"description\":\"A fast passive subdomain enumeration tool that uses various sources to gather data.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/d3f1ne/subnerium\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"recon\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dfe\",\"name\":\"subtake\",\"slug\":\"subtake\",\"description\":\"Extension of sublister tool to check for subdomain takeovers.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/codingo/subtake\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5953f\",\"name\":\"subzuf\",\"slug\":\"subzuf\",\"description\":\"DNS response-guided subdomain fuzzer\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/elceef/subzuf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053dff\",\"name\":\"subzuf\",\"slug\":\"subzuf\",\"description\":\"A smart DNS response-guided subdomain fuzzer.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/elceef/subzuf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"altdns\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e00\",\"name\":\"subzy\",\"slug\":\"subzy\",\"description\":\"Subdomain takeover vulnerability checker.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/PentestPad/subzy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\",\"subto\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e04\",\"name\":\"sulley\",\"slug\":\"sulley\",\"description\":\"A pure-python fully automated and unattended fuzzing framework.\",\"category\":\"network\",\"source\":\"https://github.com/OpenRCE/sulley\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"fuzzing\",\"http\",\"requests\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e06\",\"name\":\"svn-extractor\",\"slug\":\"svn-extractor\",\"description\":\"Simple script to extract all web resources by means of .SVN folder exposed over network.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/anantshri/svn-extractor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"scanner\",\"svn\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e08\",\"name\":\"swagroutes\",\"slug\":\"swagroutes\",\"description\":\"Extract and list API routes from Swagger files in YAML/JSON format.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/amalmurali47/swagroutes\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"api\",\"endpoints\",\"swagger\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e0f\",\"name\":\"t14m4t\",\"slug\":\"t14m4t\",\"description\":\"Automated brute-forcing attack tool.\",\"category\":\"network\",\"source\":\"https://github.com/MS-WEB-BN/t14m4t\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bruteforce\",\"ftp\",\"imap\",\"ldap\",\"passwords\",\"protocols\",\"ssh\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e10\",\"name\":\"takeover\",\"slug\":\"takeover\",\"description\":\"A tool for testing subdomain takeover possibilities at a mass scale.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/mzfr/takeover\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\",\"subto\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e11\",\"name\":\"talisman\",\"slug\":\"talisman\",\"description\":\"Validate the outgoing changeset for things that look suspicious such as tokens, passwords and keys.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/thoughtworks/talisman\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"codeanalysis\",\"git\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e17\",\"name\":\"terraform\",\"slug\":\"terraform\",\"description\":\"Enables you to safely and predictably create, change, and improve infrastru
99cture.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/hashicorp/terraform\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"network\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5945e\",\"name\":\"testssl.sh\",\"slug\":\"testsslsh\",\"description\":\"TLS/SSL scanner to find weak ciphers, protocols or flaws\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/drwetter/testssl.sh/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssl\",\"tls\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e18\",\"name\":\"testssl.sh\",\"slug\":\"testssl.sh\",\"description\":\"Testing TLS/SSL encryption anywhere on any port.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/drwetter/testssl.sh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"certificates\",\"ssl\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e1a\",\"name\":\"tfsec\",\"slug\":\"tfsec\",\"description\":\"Security scanner for your Terraform code.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/aquasecurity/tfsec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cloud\",\"codeanalysis\",\"terraform\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e25\",\"name\":\"theHarvester\",\"slug\":\"theharvester\",\"description\":\"E-mails, subdomains and names Harvester.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/laramies/theHarvester\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"emails\",\"osint\",\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59543\",\"name\":\"theHarvester\",\"slug\":\"theharvester\",\"description\":\"Multi-purpose information gathering tool: emails, names, subdomains, IPs, URLs\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/laramies/theHarvester\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596b8\",\"name\":\"theZoo\",\"slug\":\"thezoo\",\"description\":\"Repository of live malwares for malware analysis\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/ytisf/theZoo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596df\",\"name\":\"threatfeeds.io\",\"slug\":\"threatfeedsio\",\"description\":\"Open-source threat intelligence feeds; sharing malware URLs, IP reputation, bad IPs, etc.\",\"category\":\"threat-intelligence\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e29\",\"name\":\"timesketch\",\"slug\":\"timesketch\",\"description\":\"Collaborative forensic timeline analysis.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/google/timesketch\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"forensic\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59544\",\"name\":\"tinfoleak\",\"slug\":\"tinfoleak\",\"description\":\"Twitter intelligence analysis tool\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/vaguileradiaz/tinfoleak\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e2a\",\"name\":\"tinfoleak\",\"slug\":\"tinfoleak\",\"description\":\"The most complete open-source tool for Twitter intelligence analysis.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/vaguileradiaz/tinfoleak\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\",\"scraper\",\"socialnetworks\",\"twitter\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e2b\",\"name\":\"tko-subs\",\"slug\":\"tko-subs\",\"description\":\"A tool that can help detect and takeover subdomains with dead DNS records.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/anshumanbh/tko-subs\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"subdomains\",\"subto\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e2e\",\"name\":\"tlsx\",\"slug\":\"tlsx\",\"description\":\"Fast and configurable TLS grabber focused on TLS based data collection.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/tlsx\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"ips\",\"ports\",\"probing\",\"subdomains\",\"tls\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e31\",\"name\":\"toxssin\",\"slug\":\"toxssin\",\"description\":\"Open-source penetration testing tool that automates the process of exploiting XSS.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/t3l3machus/toxssin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"payloads\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59461\",\"name\":\"toxssin\",\"slug\":\"toxssin\",\"description\":\"XSS exploitation command-line interface and payload generator\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/t3l3machus/toxssin\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"javascript\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e32\",\"name\":\"tplmap\",\"slug\":\"tplmap\",\"description\":\"Server-Side Template Injection and Code Injection Detection and Exploitation Tool.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/epinna/tplmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ssti\",\"vulnerabilities\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59464\",\"name\":\"tplmap\",\"slug\":\"tplmap\",\"description\":\"SSTI and code injection detection and exploitation tool\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/epinna/tplmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e33\",\"name\":\"trackerjacker\",\"slug\":\"trackerjacker\",\"description\":\"Like nmap for mapping wifi networks you're not connected to, plus device tracking.\",\"category\":\"network\",\"source\":\"https://github.com/calebmadrigal/trackerjacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59820\",\"name\":\"trackerjacker\",\"slug\":\"trackerjacker\",\"description\":\"Tool for mapping and tacking wifi networks and devices through raw 802.11 monitoring\",\"category\":\"wireless\",\"source\":\"https://github.com/calebmadrigal/trackerjacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e36\",\"name\":\"traitor\",\"slug\":\"traitor\",\"description\":\"Automatic Linux privilege escalation via exploitation of low-hanging fruit.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/liamg/traitor\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"linux\",\"postexploitation\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59546\",\"name\":\"trape\",\"slug\":\"trape\",\"description\":\"Analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/jofpin/trape\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e38\",\"name\":\"trape\",\"slug\":\"trape\",\"description\":\"People tracker on the Internet: OSINT analysis and research tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/jofpin/trape\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e3e\",\"name\":\"trurl\",\"slug\":\"trurl\",\"description\":\"Command line tool for URL parsing and manipulation.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/curl/trurl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"parser\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e40\",\"name\":\"tsunami-security-scanner\",\"slug\":\"tsunami-security-scanner\",\"description\":\"Network security scanner with an extensible plugin system.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/google/tsunami-security-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5965e\",\"name\":\"ttddbg\",\"slug\":\"ttddbg\",\"description\":\"Time Travel Debugging IDA plugin\",\"category\":\"plugins\",\"source\":\"https://github.com/airbus-cert/ttddbg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e42\",\"name\":\"tun2socks\",\"slug\":\"tun2socks\",\"description\":\"Handle all network traffic of any internet programs sent by the device through a proxy.\",\"category\":\"network\",\"source\":\"https://github.com/xjasonlyu/tun2socks\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"protocols\",\"proxy\",\"tunnel\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e45\",\"name\":\"twint\",\"slug\":\"twint\",\"description\":\"Twitter scraping \u0026 OSINT tool allowing you to scrape a user's followers, following, tweets and more.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/twintproject/twint\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"osint\",\"scraper\",\"socialnetworks\",\"twitter\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e47\",\"name\":\"ufonet\",\"slug\":\"ufonet\",\"description\":\"De
99nial of Service Toolkit.\",\"category\":\"network\",\"source\":\"https://github.com/epsylon/ufonet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dos\",\"exploits\",\"network\",\"p2p\",\"protocols\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596fe\",\"name\":\"uncoder.io\",\"slug\":\"uncoderio\",\"description\":\"Translate sigma rules into various SIEM, EDR, and XDR formats\",\"category\":\"incident-response\",\"source\":\"https://uncoder.io/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596be\",\"name\":\"uncompyle\",\"slug\":\"uncompyle\",\"description\":\"Python 2.7 binaries (.pyc) decompiler\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/gstarnberger/uncompyle\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596bf\",\"name\":\"uncompyle6\",\"slug\":\"uncompyle6\",\"description\":\"Python 1.5, 2.1 to 2.7, 3.1 to 3.6 binaries (.pyc) decompiler\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/rocky/python-uncompyle6\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e49\",\"name\":\"uncompyle6\",\"slug\":\"uncompyle6\",\"description\":\"A cross-version Python bytecode decompiler.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rocky/python-uncompyle6\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"decompiler\",\"python\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e4a\",\"name\":\"uncover\",\"slug\":\"uncover\",\"description\":\"Quickly discover exposed hosts on the internet using multiple search engines.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/projectdiscovery/uncover\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"subdomains\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59549\",\"name\":\"uncover\",\"slug\":\"uncover\",\"description\":\"Discover exposed hosts on the internet using multiple search engines\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/projectdiscovery/uncover\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e4b\",\"name\":\"undetected-chromedriver\",\"slug\":\"undetected-chromedriver\",\"description\":\"Optimized Selenium Chromedriver patch which does not trigger anti-bot services.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ultrafunkamsterdam/undetected-chromedriver\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"automation\",\"bypass\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e4d\",\"name\":\"unfurl\",\"slug\":\"unfurl\",\"description\":\"An Entropy-Based Link Vulnerability Tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/JLospinoso/unfurl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59642\",\"name\":\"unicorn\",\"slug\":\"unicorn\",\"description\":\"Tool for using a PowerShell downgrade attack and inject shellcode into memory\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/trustedsec/unicorn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e4e\",\"name\":\"unicorn\",\"slug\":\"unicorn\",\"description\":\"Simple tool for using a PowerShell downgrade attack and inject shellcode into memory.\",\"category\":\"development\",\"source\":\"https://github.com/trustedsec/unicorn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"memory\",\"metasploit\",\"powershell\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59742\",\"name\":\"unisec\",\"slug\":\"unisec\",\"description\":\"Toolkit for security research manipulating Unicode: confusables, homoglyphs, hexdump, code point, UTF-8, UTF-16, UTF-32, properties, regexp search, size, grapheme, surrogates, version, ICU, CLDR, UCD\",\"category\":\"other\",\"source\":\"https://github.com/Acceis/unisec\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e50\",\"name\":\"unix-privesc-check\",\"slug\":\"unix-privesc-check\",\"description\":\"Shell script to check for simple privilege escalation vectors on Unix systems.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/pentestmonkey/unix-privesc-check\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"linux\",\"privesc\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e54\",\"name\":\"upload_bypass\",\"slug\":\"upload_bypass\",\"description\":\"File upload restrictions bypass by using different techniques!\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/sAjibuu/upload_bypass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"exploits\",\"fileupload\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e56\",\"name\":\"urless\",\"slug\":\"urless\",\"description\":\"De-clutter a list of URLs.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/xnl-h4ck3r/urless\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e57\",\"name\":\"urlgrab\",\"slug\":\"urlgrab\",\"description\":\"A golang utility to spider through a website searching for additional links.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/IAmStoxe/urlgrab\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e58\",\"name\":\"urlhunter\",\"slug\":\"urlhunter\",\"description\":\"Allows searching on URLs that are exposed via shortener services.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/utkusen/urlhunter\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bitly\",\"documents\",\"google\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e59\",\"name\":\"uro\",\"slug\":\"uro\",\"description\":\"Declutters url lists for crawling/pentesting.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/s0md3v/uro\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597ee\",\"name\":\"usbsas\",\"slug\":\"usbsas\",\"description\":\"Tool and framework for securely reading untrusted USB mass storage devices\",\"category\":\"defensive\",\"source\":\"https://github.com/cea-sec/usbsas\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e5a\",\"name\":\"userefuzz\",\"slug\":\"userefuzz\",\"description\":\"User-Agent, X-Forwarded-For and Referer SQLI Fuzzer.\",\"category\":\"network\",\"source\":\"https://github.com/root-tanishq/userefuzz\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\",\"headers\",\"sqli\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59744\",\"name\":\"v0lt\",\"slug\":\"v0lt\",\"description\":\"CTF toolkit / framework\",\"category\":\"other\",\"source\":\"https://github.com/P1kachu/v0lt\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59468\",\"name\":\"vaf\",\"slug\":\"vaf\",\"description\":\"Web directory and file scanner (wordlist bruteforce); but also a web fuzzer\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/d4rckh/vaf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e5c\",\"name\":\"vaf\",\"slug\":\"vaf\",\"description\":\"Cross-platform very advanced and fast web fuzzer written in nim.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/d4rckh/vaf\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"fuzzing\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e60\",\"name\":\"van-gonography\",\"slug\":\"van-gonography\",\"description\":\"Hide any type of files inside a image of your choice using steganography.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/JoshuaKasa/van-gonography\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"files\",\"images\",\"steganography\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e61\",\"name\":\"vaya-ciego-nen\",\"slug\":\"vaya-ciego-nen\",\"description\":\"Detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/hipotermia/vaya-ciego-nen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"oob\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e63\",\"name\":\"vbscan\",\"slug\":\"vbscan\",\"description\":\"A black box vBulletin vulnerability scanner.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/OWASP/vbscan\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cms\",\"scanner\",\"vbulletin\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59578\",\"name\":\"vcr\",\"slug\":\"vcr\",\"description\":\"Vulnerability Compliance Report; parse Nessus CIS benchmark scan files and generate HTML reports\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/Shellntel/vcr\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e64\",\"name\":\"vcsmap\",\"slug\":\"vcsmap\",\"description\":\"Plugin-based tool to scan public version control systems for sensitive information.\",\"category\":\"source-code-management\",\"source\":\"https://github.com/melvinsh/vcsmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"github\",\"gitlab\",\"scanner\",\"secrets\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e68\",\"name\":\"vhosts-sieve\",\"slug\":\"vhosts-sieve\",\"description\":\"Searching for virtual hosts among non-resolvable domains.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/dariusztytko/vhosts-sieve\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"recon\",\"subdomains\",\"vhosts\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e6c\",\"name\":\"volatility\",\"slug\":\"volatility\",\"description\":\"The volatile memory extraction framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/volatilityfoundation/volatility3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"forensic\",\"malware\",\"memory\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d2\",\"name\":\"volatility\",\"slug\":\"volatility\",\"description\":\"Volatile memory extraction utility\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/volatilityfoundation/volatility\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594d3\",\"name\":\"volatility (Fireeye fork)\",\"slug\":\"volatility-fireeye-fork\",\"description\":\"Fork of volatility with support for Windows 10 memory compression\",\"category\":\"digital-forensics\",\"source\":\"https://github.com/fireeye/win10_volatility\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5965f\",\"name\":\"volatility-gpg\",\"slug\":\"volatility-gpg\",\"description\":\"Volatility3 plugins that can retrieve partial and full gpg passphrases from gpg-agent's cache\",\"category\":\"plugins\",\"source\":\"https://github.com/kudelskisecurity/volatility-gpg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59579\",\"name\":\"vuldash\",\"slug\":\"vuldash\",\"description\":\"Vulnerability Dashboard; vulnerability database, project management and report generation\",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/talsoft/vuldash\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e6d\",\"name\":\"vulhub\",\"slug\":\"vulhub\",\"description\":\"Pre-built vulnerable environments based on docker-compose.\",\"category\":\"resources\",\"source\":\"https://github.com/vulhub/vulhub\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"docker\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e6f\",\"name\":\"vulnerable-AD\",\"slug\":\"vulnerable-ad\",\"description\":\"Create a vulnerable active directory to test most of the active directory attacks in a local lab.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/safebuffer/vulnerable-AD\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"training\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59660\",\"name\":\"vulners\",\"slug\":\"vulners\",\"description\":\"Vulnerability scanner based on vulners.com search API\",\"category\":\"plugins\",\"source\":\"https://github.com/vulnersCom/burp-vulners-scanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"687a8e7d3573978c5280b626\",\"name\":\"vulnrepo\",\"slug\":\"vulnrepo\",\"description\":\"VULNRÎPO - Free vulnerability report generator and repository, end-to-e
99nd encrypted! Templates of issues, CWE,CVE,MITRE ATT\u0026CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting! \",\"category\":\"collaboration-and-report\",\"source\":\"https://github.com/kac89/vulnrepo\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5946b\",\"name\":\"w3af\",\"slug\":\"w3af\",\"description\":\"Web application attack and audit framework, web-oriented security scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/andresriancho/w3af\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e73\",\"name\":\"w3af\",\"slug\":\"w3af\",\"description\":\"Web Application Attack and Audit Framework.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/andresriancho/w3af\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"framework\",\"scanner\",\"vulnerabilities\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e74\",\"name\":\"wacker\",\"slug\":\"wacker\",\"description\":\"A WPA3 dictionary cracker.\",\"category\":\"network\",\"source\":\"https://github.com/blunderbuss-wctf/wacker\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\",\"wpa\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e76\",\"name\":\"waf-bypass\",\"slug\":\"waf-bypass\",\"description\":\"Check your WAF before an attacker does.\",\"category\":\"network\",\"source\":\"https://github.com/nemesida-waf/waf-bypass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"firewall\",\"waf\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e77\",\"name\":\"wafw00f\",\"slug\":\"wafw00f\",\"description\":\"Identify and fingerprint Web Application Firewall products protecting a website.\",\"category\":\"network\",\"source\":\"https://github.com/EnableSecurity/wafw00f\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"bypass\",\"firewall\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5946d\",\"name\":\"wapiti\",\"slug\":\"wapiti\",\"description\":\"Web-oriented vulnerability scanner, can generates reports\",\"category\":\"web-application-exploitation\",\"source\":\"https://sourceforge.net/projects/wapiti/\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e7c\",\"name\":\"waybackSqliScanner\",\"slug\":\"waybacksqliscanner\",\"description\":\"Gather urls from wayback machine and test each GET parameter for SQL injection.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/ghostlulzhacks/waybackSqliScanner\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"sqli\",\"vulnerabilities\",\"webarchives\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e7d\",\"name\":\"waybackurls\",\"slug\":\"waybackurls\",\"description\":\"Fetch all the URLs that the Wayback Machine knows about for a domain.\",\"category\":\"cloud-services\",\"source\":\"https://github.com/tomnomnom/waybackurls\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"webarchives\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5954a\",\"name\":\"waymore\",\"slug\":\"waymore\",\"description\":\"Find links from Wayback Machine, Common Crawl, Alien Vault OTX and URLScan; download the archived responses for URLs on Wayback Machine\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/xnl-h4ck3r/waymore\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e7f\",\"name\":\"wazuh\",\"slug\":\"wazuh\",\"description\":\"The open source security platform.\",\"category\":\"bug-bounty\",\"source\":\"https://github.com/wazuh/wazuh\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allineone\",\"cloud\",\"reports\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e81\",\"name\":\"weakpass\",\"slug\":\"weakpass\",\"description\":\"Database of wordlists for hash cracking and compilation of best wordlists.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/zzzteph/weakpass\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"passwords\",\"resources\",\"
99wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e85\",\"name\":\"web-hacking-toolkit\",\"slug\":\"web-hacking-toolkit\",\"description\":\"A web hacking toolkit.\",\"category\":\"virtualization\",\"source\":\"https://github.com/hueristiq/web-hacking-toolkit\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"docker\",\"toolkit\",\"vm\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e86\",\"name\":\"web2shell\",\"slug\":\"web2shell\",\"description\":\"Automate converting webshells into reverse shells.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/ejedev/web2shell\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"rce\",\"shell\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59470\",\"name\":\"webanalyze\",\"slug\":\"webanalyze\",\"description\":\"Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/rverton/webanalyze\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e87\",\"name\":\"webanalyze\",\"slug\":\"webanalyze\",\"description\":\"Uncovers technologies used on websites to automate mass scanning.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/rverton/webanalyze\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"scanner\",\"technologies\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e8a\",\"name\":\"webhook\",\"slug\":\"webhook\",\"description\":\"A lightweight incoming webhook server to run shell commands.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/adnanh/webhook\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"automation\",\"webhooks\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e8b\",\"name\":\"webhook.site\",\"slug\":\"webhook.site\",\"description\":\"Easily test HTTP webhooks with this handy tool that displays requests instantly.\",\"category\":\"network\",\"source\":\"https://github.com/webhooksite/webhook.site\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"online\",\"requests\",\"utils\",\"webhooks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e8c\",\"name\":\"webhookd\",\"slug\":\"webhookd\",\"description\":\"A very simple webhook server launching shell scripts.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ncarlier/webhookd\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"automation\",\"webhooks\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e8e\",\"name\":\"webpalm\",\"slug\":\"webpalm\",\"description\":\"A tool that traverses a website and generates a tree of all the webpages and their links.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/XORbit01/webpalm\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e91\",\"name\":\"webscreenshot\",\"slug\":\"webscreenshot\",\"description\":\"A simple script to screenshot a list of websites.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/maaaaz/webscreenshot\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"screenshots\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e92\",\"name\":\"websy\",\"slug\":\"websy\",\"description\":\"Keep an eye on your targets to get quickly notified for any change they push on their server.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/0xrishabh/websy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"monitoring\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e93\",\"name\":\"weevely3\",\"slug\":\"weevely3\",\"description\":\"Weaponized web shell.\",\"category\":\"development\",\"source\":\"https://github.com/epinna/weevely3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"http\",\"php\",\"rce\",\"shell\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594bf\",\"name\":\"weggli\",\"slug\":\"weggli\",\"description\":\"Semantic search tool for C and C++ designed to help security researchers identify interesting functionality in large codebase
99s\",\"category\":\"code-analysis\",\"source\":\"https://github.com/weggli-rs/weggli\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sast\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053e97\",\"name\":\"wgen.io\",\"slug\":\"wgen.io\",\"description\":\"Generate rich wordlists for targeted attacks online.\",\"category\":\"resources\",\"source\":\"\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"online\",\"utils\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea0\",\"name\":\"whonow\",\"slug\":\"whonow\",\"description\":\"A malicious DNS server for executing DNS Rebinding attacks on the fly.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/brannondorsey/whonow\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\",\"exploits\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"697aa00e27e94d5b8a025f55\",\"name\":\"whosthere\",\"slug\":\"whosthere\",\"description\":\"Local Area Network discovery tool with a modern Terminal User Interface (TUI) written in Go. Discover, explore, and understand your LAN in an intuitive way.\\n\\nWhosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by attempting TCP/UDP connections to trigger ARP resolution, then reads the ARP cache to identify devices on your Local Area Network. This technique populates the ARP cache without requiring elevated privileges. All discovered devices are enhanced with OUI lookups to display manufacturers when available.\\n\\nWhosthere provides a friendly, intuitive way to answer the question every network administrator asks: \\\"Who's there on my network?\\\"\",\"category\":\"network\",\"source\":\"https://github.com/ramonvermeulen/whosthere\",\"review_youtube_id\":\"ub7V9L-yD1s\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea2\",\"name\":\"wifi-bruteforcer-fsecurify\",\"slug\":\"wifi-bruteforcer-fsecurify\",\"description\":\"Android application to brute force WiFi passwords without requiring a rooted device.\",\"category\":\"network\",\"source\":\"https://github.com/faizann24/wifi-bruteforcer-fsecurify\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"android\",\"bruteforce\",\"passwords\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59822\",\"name\":\"wifijammer\",\"slug\":\"wifijammer\",\"description\":\"Script to jam wifi clients and access points\",\"category\":\"wireless\",\"source\":\"https://github.com/DanMcInerney/wifijammer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea4\",\"name\":\"wifijammer\",\"slug\":\"wifijammer\",\"description\":\"Continuously jam all wifi clients/routers.\",\"category\":\"network\",\"source\":\"https://github.com/DanMcInerney/wifijammer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"wifi\",\"wireless\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea6\",\"name\":\"wifiphisher\",\"slug\":\"wifiphisher\",\"description\":\"The rogue access point framework.\",\"category\":\"network\",\"source\":\"https://github.com/wifiphisher/wifiphisher\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"phishing\",\"wifi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea7\",\"name\":\"wifipumpkin3\",\"slug\":\"wifipumpkin3\",\"description\":\"Powerful framework for rogue access point attack.\",\"category\":\"network\",\"source\":\"https://github.com/P0cL4bs/wifipumpkin3\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"framework\",\"mitm\",\"network\",\"sniffer\",\"spoofing\",\"wifi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea8\",\"name\":\"wifite\",\"slug\":\"wifite\",\"description\":\"Runs existing wireless-auditing tools for you. Stop memorizing command arguments \u0026 switches!\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/kimocoder/wifite2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"passwords\",\"wifi\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b59823\",\"name\":\"wifite2\",\"slug\":\"wifite2\",\"description\":\"Script for auditing wireless networks that runs existing wireless-auditing tools\",\"category\":\"wireless\",\"source\":\"https://github.com/kimocoder/wifite2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ea9\",\"name\":\"wikto\",\"slug\":\"wikto\",\"description\":\"Nikto for Windows with some extra features.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/sensepost/wikto\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59476\",\"name\":\"wikto\",\"slug\":\"wikto\",\"description\":\"Nikto for Windows; web security scanner\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/sensepost/wikto\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eaa\",\"name\":\"wildcrawl\",\"slug\":\"wildcrawl\",\"description\":\"Crawls
99URL to get a better image of what is tied to a website.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/NeverWonderLand/wildcrawl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\",\"ips\",\"subdomains\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eab\",\"name\":\"windapsearch\",\"slug\":\"windapsearch\",\"description\":\"Enumerate users, groups and computers from a Windows domain through LDAP queries.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/ropnop/go-windapsearch\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"activedirectory\",\"domains\",\"ldap\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597d6\",\"name\":\"windapsearch\",\"slug\":\"windapsearch\",\"description\":\"Script to enumerate users, groups and computers from a Windows domain through LDAP queries\",\"category\":\"networking\",\"source\":\"https://github.com/ropnop/windapsearch\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ead\",\"name\":\"windows-kernel-exploits\",\"slug\":\"windows-kernel-exploits\",\"description\":\"A list of Windows kernel exploits.\",\"category\":\"operating-systems\",\"source\":\"https://github.com/SecWiki/windows-kernel-exploits\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"exploits\",\"kernel\",\"resources\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eae\",\"name\":\"windows-privesc-check\",\"slug\":\"windows-privesc-check\",\"description\":\"Standalone executable to check for simple privilege escalation vectors.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/pentestmonkey/windows-privesc-check\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"exploits\",\"privesc\",\"windows\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb6\",\"name\":\"wlgen\",\"slug\":\"wlgen\",\"description\":\"Automate building wordlists for AppSec directory/resource bruting.\",\"category\":\"resources\",\"source\":\"https://github.com/ztgrace/wlgen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"utils\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597da\",\"name\":\"wmiexec-Pro\",\"slug\":\"wmiexec-pro\",\"description\":\"Perform different ways of command execution via WMI protocol (port 135) for AV evasion\",\"category\":\"networking\",\"source\":\"https://github.com/XiaoliChan/wmiexec-Pro\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"amsi\",\"windows\",\"vbs\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb8\",\"name\":\"wmiexec-Pro\",\"slug\":\"wmiexec-pro\",\"description\":\"The new generation of wmiexec.py with all operations performed on port 135 for antivirus evasion.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/XiaoliChan/wmiexec-Pro\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"evasion\",\"privesc\",\"rce\",\"rdp\",\"samba\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eb9\",\"name\":\"wmiexec-RegOut\",\"slug\":\"wmiexec-regout\",\"description\":\"Modify version of impacket wmiexec.py, get output from registry.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/XiaoliChan/wmiexec-RegOut\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"evasion\",\"privesc\",\"rce\",\"rdp\",\"samba\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595fe\",\"name\":\"wordlist.rb\",\"slug\":\"wordlistrb\",\"description\":\"Library for reading, combining, manipulating, and building wordlists, efficiently\",\"category\":\"cracking\",\"source\":\"https://github.com/postmodern/wordlist.rb\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eba\",\"name\":\"wordlistctl\",\"slug\":\"wordlistctl\",\"description\":\"Fetch, install and search wordlist archives from websites and torrent peers.\",\"category\":\"resources\",\"source\":\"https://github.com/BlackArch/wordlistctl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"utils\",\"
99wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b595ff\",\"name\":\"wordlistctl\",\"slug\":\"wordlistctl\",\"description\":\"Fetch, install and search wordlist archives from websites and torrent peers\",\"category\":\"cracking\",\"source\":\"https://github.com/BlackArch/wordlistctl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59600\",\"name\":\"wordlistgen\",\"slug\":\"wordlistgen\",\"description\":\"Generate context-specific wordlists for content discovery from lists of URLs or paths\",\"category\":\"cracking\",\"source\":\"https://github.com/ameenmaali/wordlistgen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ebb\",\"name\":\"wordlistgen\",\"slug\":\"wordlistgen\",\"description\":\"Quickly generate context-specific wordlists for content discovery from lists of URLs or paths.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/ameenmaali/wordlistgen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"directories\",\"endpoints\",\"wordlists\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b594c0\",\"name\":\"wpBullet\",\"slug\":\"wpbullet\",\"description\":\"Static code analysis for WordPress Plugins and Themes (and PHP)\",\"category\":\"code-analysis\",\"source\":\"https://github.com/webarx-security/wpbullet\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ebe\",\"name\":\"wpfinger\",\"slug\":\"wpfinger\",\"description\":\"wpfinger is a red-team WordPress scanning tool.\",\"category\":\"cms\",\"source\":\"https://github.com/LeakIX/wpfinger\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"cves\",\"scanner\",\"wordpress\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59479\",\"name\":\"wrapwrap\",\"slug\":\"wrapwrap\",\"description\":\"Generates a php://filter chain that adds a prefix and a suffix to the contents of a file\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/ambionics/wrapwrap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5947c\",\"name\":\"wsrepl\",\"slug\":\"wsrepl\",\"description\":\"Interactive websocket REPL designed specifically for penetration testing\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/doyensec/wsrepl\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ec4\",\"name\":\"wstunnel\",\"slug\":\"wstunnel\",\"description\":\"Tunneling over websocket protocol - Static binary available.\",\"category\":\"network\",\"source\":\"https://github.com/erebe/wstunnel\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"firewall\",\"network\",\"pivot\",\"proxy\",\"websocket\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ec5\",\"name\":\"wtfis\",\"slug\":\"wtfis\",\"description\":\"Passive hostname, domain and IP lookup tool for non-robots.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/pirxthepilot/wtfis\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"domains\",\"ips\",\"osint\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c2\",\"name\":\"x64dbg\",\"slug\":\"x64dbg\",\"description\":\"Windows debugger\",\"category\":\"reverse-engineering\",\"source\":\"https://github.com/x64dbg/x64dbg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ec6\",\"name\":\"x64dbg\",\"slug\":\"x64dbg\",\"description\":\"An open-source user mode debugger for Windows for reverse engineering and malware analysis.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/x64dbg/x64dbg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"binaries\",\"debug\",\"malware\",\"reverse-engineering\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5947e\",\"name\":\"x8\",\"slug\":\"x8\",\"description\":\"HTTP parameter discovery suite\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/Sh1Yo/x8\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59481\",\"name\":\"xnLinkFinder\",\"slug\":\"xnlinkfinder\",\"description\":\"Discover endpoints and potential parameters for a given target\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/xnl-h4ck3r/xnLinkFinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eca\",\"name\":\"xnLinkFinder\",\"slug\":\"xnlinkfinder\",\"description\":\"A python tool used to discover endpoints and potential parameters for a given target.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/xnl-h4ck3r/xnLinkFinder\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"endpoints\",\"parameters\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ecc\",\"name\":\"xray\",\"slug\":\"xray\",\"description\":\"Security assessment tool that supports common web security issue scanning and custom PoC.\",\"category\":\"auth-perms\",\"source\":\"https://github.com/chaitin/xray\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"allinone\",\"scanner\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed4\",\"name\":\"xss2png\",\"slug\":\"xss2png\",\"description\":\"PNG IDAT chunks XSS payload generator.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/vavkamil/xss2png\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"images\",\"payloads\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053edc\",\"name\":\"xssValidator\",\"slug\":\"xssvalidator\",\"description\":\"A Burp Intruder extender designed for automation and validation of XSS vulnerabilities.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/nVisium/xssValidator\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"burpsuite\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed6\",\"name\":\"xsscrapy\",\"slug\":\"xsscrapy\",\"description\":\"Fast, thorough, XSS/SQLi spider.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/DanMcInerney/xsscrapy\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"sqli\",\"vulnerabilities\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ed9\",\"name\":\"xssor2\",\"slug\":\"xssor2\",\"description\":\"Hack with JavaScript.\",\"category\":\"vulnerabilities\",\"source\":\"https://github.com/evilcos/xssor2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"encoding\",\"online\",\"oob\",\"payloads\",\"xss\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ede\",\"name\":\"xurlfind3r\",\"slug\":\"xurlfind3r\",\"description\":\"A cli utility to find domain's known URLs from curated passive online sources.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/hueristiq/xurlfind3r\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"crawler\",\"endpoints\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5948e\",\"name\":\"xxeserv\",\"slug\":\"xxeserv\",\"description\":\"HTTP and FTP server for OOB XXE attacks\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/staaldraad/xxeserv\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee3\",\"name\":\"xxeserv\",\"slug\":\"xxeserv\",\"description\":\"A mini webserver with FTP support for XXE payloads.\",\"category\":\"network\",\"source\":\"https://github.com/staaldraad/xxeserv\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ftp\",\"http\",\"payloads\",\"server\",\"xxe\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59490\",\"name\":\"xxxpwn\",\"slug\":\"xxxpwn\",\"description\":\"XPath injection tool, designed for blind injection\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/feakk/xxxpwn\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59491\",\"name\":\"xxxpwn_smart\",\"slug\":\"xxxpwn_smart\",\"description\":\"XPath injection tool, fork of xxxpwn adding further optimizations and tweaks, uses predictive text based on a dictionary of words/phrases vs frequencies of occurrence\",\"category\":\"web-application-exploitation\",\"source\":\"https://github.com/aayla-secura/xxxpwn_smart\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b596c5\",\"name\":\"xxxswf\",\"slug\":\"xxxswf\",\"description\":\"Small script for carving, scanning, compressing, decompressing and analyzing SWF files\",\"category\":\"reverse-engineering\",\"source\":\"https://bitbucket.org/Alexander_Hanel/xxxswf/src\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b5954b\",\"name\":\"yar\",\"slug\":\"yar\",\"description\":\"Find secret information (secrets, tokens, passwords) in git repositories\",\"category\":\"osint-and-reconnaissance\",\"source\":\"https://github.com/nielsing/yar\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59700\",\"name\":\"yarAnalyzer\",\"slug\":\"yaranalyzer\",\"description\":\"Creates statistics on a yara rule set and files in a sample directory\",\"category\":\"incident-response\",\"source\":\"https://github.com/Neo23x0/yarAnalyzer\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59702\",\"name\":\"yarGen\",\"slug\":\"yargen\",\"description\":\"YARA rules generator\",\"category\":\"incident-response\",\"source\":\"https://github.com/Neo23x0/yarGen\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2cd9c7341a02b597dd\",\"name\":\"yersinia\",\"slug\":\"yersinia\",\"description\":\"Framework for layer 2 attacks\",\"category\":\"networking\",\"source\":\"https://github.com/tomac/yersinia\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ee6\",\"name\":\"yersinia\",\"slug\":\"yersinia\",\"description\":\"A framework for layer 2 attacks.\",\"category\":\"network\",\"source\":\"https://github.com/tomac/yersinia\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dos\",\"exploits\",\"network\",\"protocols\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eea\",\"name\":\"ysoserial\",\"slug\":\"ysoserial\",\"description\":\"Generates payloads that exploit unsafe Java object deserialization.\",\"category\":\"development\",\"source\":\"https://github.com/frohoff/ysoserial\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"deserialization\",\"exploits\",\"java\",\"payloads\"],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59747\",\"name\":\"ysoserial\",\"slug\":\"ysoserial\",\"description\":\"Tool for generating payloads that exploit unsafe Java object deserialization\",\"category\":\"system-exploitation\",\"source\":\"https://github.com/frohoff/ysoserial\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":true,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eeb\",\"name\":\"ysoserial.net\",\"slug\":\"ysoserial.net\",\"description\":\"Deserialization payload generator for a variety of .NET formatters.\",\"category\":\"development\",\"source\":\"https://github.com/pwntester/ysoserial.net\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"deserialization\",\"dotnet\",\"payloads\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eec\",\"name\":\"zarp\",\"slug\":\"zarp\",\"description\":\"Network attack tool.\",\"category\":\"network\",\"source\":\"https://github.com/hatRiot/zarp\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"network\",\"protocols\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eed\",\"name\":\"zdns\",\"slug\":\"zdns\",\"description\":\"Fast CLI DNS lookup tool.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/zmap/zdns\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"dns\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053eef\",\"name\":\"zgrab\",\"slug\":\"zgrab\",\"description\":\"Fast Go application scanner.\",\"category\":\"network\",\"source\":\"https://github.com/zmap/zgrab2\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"http\",\"network\",\"scanner\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ef0\",\"name\":\"zmap\",\"slug\":\"zmap\",\"description\":\"Fast single packet network scanner designed for Internet-wide network surveys.\",\"category\":\"informations-gathering\",\"source\":\"https://github.com/zmap/zmap\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"ips\",\"network\",\"ports\",\"scanner\",\"utils\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"688d0d5d5bc8deef67053ef2\",\"name\":\"zsteg\",\"slug\":\"zsteg\",\"description\":\"Detect stegano-hidden data in PNG \u0026 BMP.\",\"category\":\"cryptanalysis\",\"source\":\"https://github.com/zed-0xff/zsteg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[\"images\",\"steganography\"],\"usedInReports\":false,\"company\":\"\"},{\"_id\":\"6692ff2bd9c7341a02b59612\",\"name\":\"zsteg\",\"slug\":\"zsteg\",\"description\":\"Tool to detect hidden data in PNG and BMP\",\"category\":\"steganography\",\"source\":\"https://github.com/zed-0xff/zsteg\",\"review_youtube_id\":\"\",\"sponsorship_level\":0,\"keywords\":[],\"usedInReports\":false,\"company\":\"\"}],\"categories\":[{\"slug\":\"cloud\",\"name\":\"Cloud\"},{\"slug\":\"collaboration-and-report\",\"name\":\"Collaboration and Report\"},{\"slug\":\"cryptography\",\"name\":\"Cryptography\"},{\"slug\":\"intentionally-vulnerable-applications\",\"name\":\"Intentionally Vulnerable Applications\"},{\"slug\":\"other\",\"name\":\"Other\"},{\"slug\":\"red-teaming\",\"name\":\"Red Teaming\"},{\"slug\":\"system-exploitation\",\"name\":\"System Exploitation\"},{\"slug\":\"threat-intelligence\",\"name\":\"Threat Intelligence\"},{\"slug\":\"configuration-audit\",\"name\":\"Configuration Audit\"},{\"slug\":\"crisis-management\",\"name\":\"Crisis Management\"},{\"slug\":\"digital-forensics\",\"name\":\"Digital Forensics\"},{\"slug\":\"honeypot-and-decoy\",\"name\":\"Honeypot and Decoy\"},{\"slug\":\"incident-response\",\"name\":\"Incident Response\"},{\"slug\":\"osint-and-reconnaissance\",\"name\":\"OSINT and Reconnaissance\"},{\"slug\":\"reverse-engineering\",\"name\":\"Reverse Engineering\"},{\"slug\":\"vulnerability-assessment\",\"name\":\"Vulnerability Assessment\"},{\"slug\":\"web-application-exploitation\",\"name\":\"Web Application
99Exploitation\"},{\"slug\":\"binary-exploitation\",\"name\":\"Binary Exploitation\"},{\"slug\":\"cracking\",\"name\":\"Cracking\"},{\"slug\":\"defensive\",\"name\":\"Defensive\"},{\"slug\":\"hardware\",\"name\":\"Hardware\"},{\"slug\":\"steganography\",\"name\":\"Steganography\"},{\"slug\":\"adversary-simulation\",\"name\":\"Adversary Simulation\"},{\"slug\":\"code-analysis\",\"name\":\"Code Analysis\"},{\"slug\":\"networking\",\"name\":\"Networking\"},{\"slug\":\"plugins\",\"name\":\"Plugins\"},{\"slug\":\"wireless\",\"name\":\"Wireless\"},{\"slug\":\"auth-perms\",\"name\":\"Auth \u0026 perms\"},{\"slug\":\"bug-bounty\",\"name\":\"Bug bounty\"},{\"slug\":\"cloud-services\",\"name\":\"Cloud \u0026 services\"},{\"slug\":\"cms\",\"name\":\"CMS\"},{\"slug\":\"cryptanalysis\",\"name\":\"Cryptanalysis\"},{\"slug\":\"databases\",\"name\":\"Databases\"},{\"slug\":\"development\",\"name\":\"Development\"},{\"slug\":\"informations-gathering\",\"name\":\"Informations gathering\"},{\"slug\":\"network\",\"name\":\"Network\"},{\"slug\":\"operating-systems\",\"name\":\"Operating systems\"},{\"slug\":\"resources\",\"name\":\"Resources\"},{\"slug\":\"source-code-management\",\"name\":\"Source code management\"},{\"slug\":\"tools-categories\",\"name\":\"Tools categories\"},{\"slug\":\"virtualization\",\"name\":\"Virtualization\"},{\"slug\":\"vulnerabilities\",\"name\":\"Vulnerabilities\"},{\"slug\":\"well-known-products\",\"name\":\"Well known products\"},{\"slug\":\"zzzmisc\",\"name\":\"Misc\"},{\"slug\":\"mobile\",\"name\":\"Mobile\"},{\"slug\":\"fuzzing\",\"name\":\"Fuzzing\"},{\"slug\":\"reconnaissance\",\"name\":\"Reconnaissance\"},{\"slug\":\"learning\",\"name\":\"Learning\"},{\"slug\":\"ai\",\"name\":\"Artificial Intelligence\"},{\"slug\":\"ai-models\",\"name\":\"AI Models\"},{\"slug\":\"ai-skills\",\"name\":\"AI Skills\"},{\"slug\":\"ai-mcp-servers\",\"name\":\"AI MCP Servers\"}]}],\"$L21\"]}]]\n"])</script>
99<script>self.__next_f.push([1,"21:[\"$\",\"div\",null,{\"className\":\"notification is-primary mt-6\",\"children\":[[\"$\",\"strong\",null,{\"children\":\"ð CONTRIBUTE\"}],\": \",[\"$\",\"$L8\",null,{\"href\":\"/add-software\",\"children\":\"Add software\"}]]}]\n"])</script>
99<script id="theme-setup"> 100 (function() { 101 var savedTheme = localStorage.getItem('theme'); 102 var systemTheme = window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'; 103 var theme = savedTheme || systemTheme; 104 document.documentElement.setAttribute('data-theme', theme); 105 })(); 106 </script>
106<script type="module" src="https://static.cloudflareinsights.com/beacon.min.js/v31edd6df95cf4e85bb4c19e7a9bdbcba1788362987495" integrity="sha512-iIg7k2xntmwu6/uSb5tpc/hySgZc4eoL31yB29W6tJFo2akwjPWcEqnCEdJvGexCL0KEQwVYv5BlowfhVz26hg==" data-cf-beacon='{"version":"2024.11.0","token":"7c36f090f49e4e2181b38aacd9b736c0","r":1,"spa":2}' crossorigin="anonymous"></script>
106 107</body></html>
107<script id="theme-setup"> 108 (function() { 109 var savedTheme = localStorage.getItem('theme'); 110 var systemTheme = window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'; 111 var theme = savedTheme || systemTheme; 112 document.documentElement.setAttribute('data-theme', theme); 113 })(); 114 </script>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.