Tools: web (68)

Aliasr is a modern and feature-rich TUI launcher for penetration testing commands inspired by Arsenal but with significantly improved functionality.

A simple tool for filtering and manipulating text data / such as log files and other outputs.

Terminal session recorder

Extendable version manager with support for ruby python go etc

An OSINT tool to search fast for accounts by username across 581 sites.

Bolt crawls the target website to the specified depth and stores all the HTML forms found in a database for further processing.

A Swiss Army knife for bypassing web application firewalls and filters.

OSINT tool for estimating when a web page was written.

CeWL alternative in Python

A Go client to communicate with Chaos dataset API from ProjectDiscovery.

Find and exploit vulnerabilities in mobile applications.

Curlie is a frontend to curl that adds the ease of use of httpie without compromising on features and performance

Do The Right eXtraction - don't remember what set of tar flags or where to pipe the output to extract it? no worries!

Credentials management for Exegol

🌸 A command-line fuzzy finder

GenUsername is a Python tool for generating a list of usernames based on a name or email address.

GeoPincer is a script that leverages OpenStreetMap's Overpass API in order to search for locations.

tool to generate wordlists of passwords containing cities at a defined distance around the client city.

a command-line tool to retrieve a user's email from Github.

glow is a tool to render Markdown inside the terminal.

Make JSON greppable!

Password cracking rules for Hashcat based on statistics and industry patterns

Tool for exploiting HTTP methods (e.g. PUT / DELETE / etc.)

holehe but for phone numbers.

Get information about an IP address or hostname.

This exploitation script is meant to be used by pentesters against active JDWP service / in order to gain Remote Code Execution.

Extract URLs / paths / secrets and other interesting data from JavaScript source code.

a command-line tool for working with JSON Web Tokens (JWTs)

Cross-platform password manager

Fancy cat for Markdown

Scan Moodle sites for information and vulnerabilities.

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

hyperextensible Vim-based text editor

Password cracking rules and masks for hashcat

A python module to explore the object tree to extract paths to interesting objects in memory.

a powerful subdomain collection tool.

Rockyou for web fuzzing

One rule to crack all passwords. A revamped - optimised and updated version of the original OneRuleToRuleThemAll hashcat rule

large hashcat rulesets generated from real-world compromised passwords

TODO

A CLI to generate PHP filters chain / get your RCE without uploading a file if you control entirely the parameter passed to a require or an include…

API platform for testing APIs

Prototype pollution finder tool for javascript. pp-finder lets you find prototype pollution candidates in your code.

A utility for quickly generating IP ranges or enumerating hosts within a specified range.

A command-line tool for searching the pwndb database of compromised credentials.

Extremely fast and scalable Python FTP server library

a reconnaissance tool for performing information gathering on a target.

rlwrap is a small utility that wraps input and output streams of executables / making it possible to edit and re-run input history

Utility for testing whether a website's robots.txt file is correctly configured.

File synchronization tool for efficiently copying and updating data between local or remote locations

A command line search tool for Exploit-DB

Collection of Symfony exploits and PoCs.

a tool for testing SSL/TLS encryption on servers

THR (The Hacker Recipes) is aimed at providing technical guides on various hacking topics.

Tig is an ncurses-based text-mode interface for git.

Tool to generate a timing profile for a given command.

Token Exploiter is a tool designed to analyze GitHub Personal Access Tokens.

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails / phone numbers and more.

Personal knowledge management system (successor to Trilium).

Simple replacement for Python's SimpleHTTPServer.

Tool for quickly downloading files to a remote machine based on the target operating system

urldedupe is a c++ tool to quickly pass in a list of URLs and get back a list of deduplicated (unique) URL and query string combination.

WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography

Yet Another LinkedIn Scraper

Yarn is a package manager that doubles down as project manager.

Download videos from YouTube and other sites.

A youtube-dl fork with additional features and fixes

Zehef is an osint tool to track emails