Tools: misc (146)

Fast and customizable subdomain wordlist generator using DSL.

The open source self-hosted web archive. Takes browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, med

Removes the traces left by offensive security tools.

Translate JavaScript to Other Alphabets.

A portable volatile memory acquisition tool for Linux.

Extract and decode base64 strings from files.

High-quality, full-featured hex editor.

Command-line interface for BloodHound v5.

Download BloudHound query lists, deduplicate entries and merge them in one file.

Download and use custom hosts sources to build /etc/hosts

Filter your wordlist according to the specified password policy.

Cold boot & DMA protection

A Panic button for protection against cold boot attacks

Checks the validity of an International Bank Account Number (IBAN).

Tools to copy and merge Cisco Routers Configuration.

Data Exfiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Evade AV Detection.

A ast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust.

The Credential mapper - Tool that was created to bring awareness to the dangers of credential reuse.

A TCP/UDP symmetric encryption tunnel wrapper

A CLI tool & library to enhance and speed up script/exploit writing for CTF players.

Unofficial api for cve.mitre.org.

Calculates density for files of any file-system-path to finally output an accordingly descending ordered list.

A tool for recovering passwords from pixelized screenshots.

A reversible DER and BER pretty-printer.

Remove illegal dhcp servers with IP-pool underflow.

A tool to link a domain with registered organisation names and emails, to other domains.

Digital Speech Decoder.

Digital Speech Decoder - Florida Man Edition.

A script to dump files and folders remotely from a Windows SMB share.

Remove duplicates from massive wordlist, without sorting it (for dictionnary-based password cracking).

Rip web accessible (distributed) version control systems: SVN/GIT/...

A plausible deniable cryptography tool that supports a dynamic number of files and requires a password for each file.

Gui for the elettra crypto application.

Pseudorandom number sequence test.

Modular framework that takes advantage of poor upgrade implementations by injecting fake updates.

Modular framework that takes advantage of poor upgrade implementations by injecting fake updates

Irregular methods on regular expressions.

Extracts hosts (IP/Hostnames) from files.

Convolutional neural network for analyzing pentest screenshots.

Fake mail server that captures e-mails as files for acceptance testing.

Scripts and snippets for ffuf payloads.

High-precision indoor positioning framework.

A tool that transforms Firefox browsers into a penetration testing suite.

Flare processes an SWF and extracts all scripts from it.

Generates lists of IP addresses.

A country to IP addresses generator.

A wrapper around grep, to help you grep for things.

Train a model and detect gibberish strings with it.

A script that clones Github repositories of users and organizations automatically.

A tool that Reads any gMSA password blobs the user can access and parses the values.

A tool to generate obfuscated one liners to aid in penetration testing.

Search gtfobins and lolbas files from your terminal.

Offline command line lookup utility for GTFOBins and LOLBAS.

A conformance testing tool for HTTP/2 implementation.

First IDE for Nmap Script (NSE) Development.

Simple http put perl script.

A tool for grabbing screenshots and HTML of large numbers of websites.

Hexadecimal & URL (en/de)coder.

Freeware Hex Editor and Disk Editor.

Grep word in pdf or image based on OCR.

A Small tool to package javascript into a valid image file.

A tool for collecting and processing security feeds using a message queuing protocol.

Obfuscate a python code 2 and 3.

An ids evasion tool, used to anonymously inundate intrusion detection logs with false positives in order to obfuscate a

Fetches IPv4 ranges of given country in host and cidr format.

A simple tool to convert the IP to a DWORD IP.

Write any JavaScript with 6 Characters: []()!+.

Literate programmer's editor, outliner, and project manager.

A penetration tester productivity tool designed to allow easy and straightforward data consolidation, querying, external

Utility program to perform multiple operations for a given subnet/CIDR ranges.

Auto Scanning to SSL Vulnerability.

An open-source SNMP MIB parser (or SMI parser) written in Java. It can be used to read SNMP MIB files as well as simple

A command-line program which decodes (or generates) audio modem tones at any specified baud rate, using various framing

Tool to generate YARA rules based on binary code.

A module to read and analyze the MRT format data.

Manage the metasploit framework database.

Modular personalized dictionary generator.

Experimental Python wrapper for OpenSSL

Converts/manipulates/extracts data from a nmap scan output.

Minimal script to help find script into the nse database.

Gives you one-liners that aids in penetration testing and more.

Generates a risk score based on the results of a Nuclei scan using OpenAI's GPT model.

Markdown Templates for Offensive Security exam reports.

CLI & library to search for default credentials among thousands of Products / Vendors.

Frontend to explore the internals of a PDF document with Origami

Complex payload encoder.

A python implementation of a grep friendly ftrace wrapper.

Converts .plist files between binary and UTF (editable) text formats.

Snort rule management.

Snort rule management

A target specific wordlist generating tool for social engineers and security researchers.

Rust-based password mutator for brute force attacks.

Generate and verify pwnedpasswords check digits.

A useful hacker dictionary builder for a brute-force attack.

PyInstaller community hooks.

A command line tool and module for Google Street View Image API.

Small library to parse TLS records

Simple dictionary with LRU behaviour.

Irregular methods on regular expressions.

A command line tool and module for Google Street View Image API.

Python bindings for Tidy HTML parser/cleaner.

Simple script for generating Malformed QRCodes.

Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query

Rawsec Inventory search CLI to find security tools and resources.

A miscellaneous collection of command-line tools related to pen-testing and reversing.

Digital Bond's ICS Enumeration Tools.

CLI tool to automate pentest reporting with SysReptor.

A rogue MySQL server written in Python.

A Record and Replay Framework

A database of common, interesting or useful commands, in one handy referable form.

Machine-learn password mangling rules.

A simple crossplatform IDE for NASM, MASM, GAS and FASM assembly languages.

Can fuck network with no DHCP.

A logfile monitoring tool with support for event correlation, written in perl

A Testing Environment for Manual Security Testers.

Find possible locations of shadows around the world.

An offensive approach to the anatomy of improperly written OS command injection sanitisers.

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

Utility for creating archives with path traversal elements for ZipSlip attacks.

FUSE filesystem to mount squashfs archives

Check the status of a server while fuzzing or DDoSing

An advanced utility to test the quality of WWW session identifiers and other tokens that are meant to be unpredictable.

Suricata Verification Tests - Testing Suricata Output.

A tool for extracting files from network traffic.

Tool to create a temporary email address in 1 Second and receive emails.

A lame tool to prod the oracle tnslsnr process (1521/tcp).

Word list generator to crack security tokens.

Tool based upon pcapdiff by the EFF.

User Agent String Tester

CLI tool for the generation of downloader oneliners for UNIX-like or Windows systems.

Pull out bits of URLs provided on stdin.

Unicode Security Toolkit.

A curses URL parser for text files.

Pentest Tool to generate usernames/logins based on supplied names.

Tool for managing information security.

Open Source Cross Linked and Aggregated Local Vulnerability Database main repository.

A Python library and command line tools to provide interactive log visualization.

The Witchcraft Compiler Collection

Full-featured LDAP client running as web application.

WhatsApp Parser Tool.

A command to search port names and numbers.

Remotely execute commands on Windows NT/2000/XP/2003 systems.

A suite of tools for the Wake on LAN feature of network attached computers.

Fetch, install and search wordlist archives from websites.

A simple wordlist generator and mangler written in python.

Yet another yogurt. Pacman wrapper and AUR helper written in go.