Take it like a gift

Sherlock
Sherlock

Hunt down social media accounts by username across social networks.

CLZero
CLZero

A project for fuzzing HTTP/1.1 CL.0 Request Smuggling attack vectors.

haklistgen
haklistgen

Turns any junk text into a usable wordlist for brute-forcing.

BaRMIe
BaRMIe

Enumerating and attacking Java Remote Method Invocation services.

LibAFL
LibAFL

Advanced fuzzing librar. Slot your fuzzers together and extend their features using Rust.

hauditor
hauditor

Analyze the security headers returned by a web page and report dangerous configurations.

jsleak
jsleak

Find secrets, paths or links in the source code.

ADReaper
ADReaper

Enumerate an Active Directory environment with LDAP queries.

Apidor
Apidor

Tool for automating the search for IDOR vulnerabilities in web applications and APIs.

dvcs-ripper
dvcs-ripper

Rip web accessible version control systems: svn, git...

jwt-cracker
jwt-cracker

Simple JWT token brute force cracker.

endoflife.date
endoflife.date

Informative site with EoL dates of everything.

fibratus
fibratus

Modern tool for Windows kernel exploration and tracing with a focus on security.

kerbrute
kerbrute

Bruteforce and enumerate Active Directory accounts through Kerberos pre-authentication.

attack_range
attack_range

Create vulnerable instrumented local or cloud environments to simulate attacks.