Tools

bishopfox/sj

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

byt3hx/jsleak

Concurrent CLI tool for discovering secrets, API keys, and links in JavaScript files during web reconnaissance, with custom regex pattern support and…

yuyudhn/tldhunt

Bash-based domain availability checker that scans WHOIS records across multiple TLDs to find unregistered domains for red teaming and phishing…

nu11secur1ty/insect

High-performance web path discovery and directory brute-forcing tool. Discovers hidden files, directories, and endpoints using customizable…

daddycocoaman/dumpscan

Finding secrets in kernel and user memory

dominicbreuker/pspy

Monitor linux processes without root permissions

piotr-kniaz/eslockdecryptor

Utility for recovering ES File Explorer encrypted files (.eslock)

reneoliveirajr/wp_cve-2020-35489_checker

WordPress Sites Vulnerability Checker for CVE-2020-35489 - "Educational Use Only"

pixilated730/nextjs-exploit-

CVE-2025-29927

s_r_e_e_r_a_j/ftpbuster

FTPBuster is a powerful command-line brute-forcing tool designed to brute-force FTP, SFTP, and explicit FTPS servers by performing dictionary-based…

s_r_e_e_r_a_j/ziprarhunter

ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.

0zer0d4y/fuegotest

A CLI tool for detecting CVE-2023-20048 vulnerability in Cisco Firepower Management Center.

cyborgsecurity/poisonapple

CLI tool for applying and removing macOS persistence mechanisms, designed for threat emulation and red team operations. Supports 17 techniques…

m31r0n/sniprecover-cli

Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303

hueristiq/xurlfind3r

Passive URL discovery tool that collects domain-associated URLs from multiple public sources via command-line, supporting stdin/stdout and JSONL…

hueristiq/xsubfind3r

Passive subdomain discovery tool that aggregates results from multiple online sources via CLI, supporting stdin/stdout, JSONL output, and API key…

0x11dfe/file-unpumper

Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.