The Network Execution Tool

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

:star: :star: Distributed tcpdump for cloud native environments :star: :star:

Metlo is an open-source API security platform.

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

⭐ ⭐ Use ML to classify flows and packets as benign or malicious. ⭐ ⭐

A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.

Tool for especially scanning nearby devices and execute a given command on its own system while the target device comes in range.

Little Bug Bounty & Hacking Tools⚔️

Execute commands interactively on remote Windows machines using the WinRM protocol

Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK and D3FEND Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

Generate tens of thousands of subdomain combinations in a matter of seconds

Tools & Resources for Cyber Security Operations

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

Nucleimonst3r is a powerful vulnerability scanner that can help Bug Bounty Hunters find low hanging fruit vulnerabilities for known CVEs and exploits but also gather all the technology running behind them for further investigation for a potential target.

Filter and enrich a list of subdomains by level

DPULSE - Tool for complex approach to domain OSINT

CloudSniffer is a powerful tool designed to aid in the discovery of the real IP address of a website protected by Cloudflare. It leverages brute force techniques by testing a list of IP addresses and analyzing the status codes returned by the server to uncover the actual IP address of the target website.

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

A C# based tool for analysing malicious OneNote documents

This application was created as a POC for how to scan your local network traffic for HTTP requests and then inject various javascript cryptocurrency miners into the response payloads

Discovering Typo Squatting on your domains!

A Bumblebee-inspired Crypter

Information Gathering Simplified.

ServiceNow widge-simple-list misconfiguration scanner

Analyzing AD domains for security risks related to user accounts

A collection of Malware Analysis software, materials, libraries, documents, books, resources about malware analysis in Cybersecurity.

A single script to install important Pentesting Tools and wordlists on Debian based Linux OS.

A collaborative hub for Nuclei templates. Contribute, share, and explore powerful vulnerability detection tools!