radare2 by radareorg

UNIX-like reverse engineering framework and command-line toolset

updated at Nov. 17, 2024, 1:24 a.m.

488 +1

20,710 +33

3,006 +3

zaproxy by zaproxy

The ZAP by Checkmarx Core project

updated at Nov. 17, 2024, 1:08 a.m.

396 +0

12,745 +26

2,273 +6

mitmproxy by mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

updated at Nov. 17, 2024, 12:42 a.m.

624 +0

36,847 +91

4,041 +6

xortool by hellman

A tool to analyze multi-byte xor cipher

updated at Nov. 17, 2024, 12:14 a.m.

48 +0

1,398 +3

173 +1

capstone by capstone-engine

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

updated at Nov. 16, 2024, 10:18 p.m.

299 +0

7,608 +17

1,555 -1

dnSpy by dnSpy

.NET debugger and assembly editor

updated at Nov. 16, 2024, 9:23 p.m.

991 -1

26,649 +42

5,110 +7

sniffglue by kpcyrd

Secure multithreaded packet sniffer

updated at Nov. 16, 2024, 8:03 p.m.

20 -1

1,128 +0

95 -1

de4dot by de4dot

.NET deobfuscator and unpacker.

updated at Nov. 16, 2024, 7:55 p.m.

514 +0

6,975 +10

2,692 +0

js-beautify by beautifier

Beautifier for javascript

updated at Nov. 16, 2024, 6:47 p.m.

211 +0

8,634 +6

1,384 -2

Empire by EmpireProject

Empire is a PowerShell and Python post-exploitation agent.

updated at Nov. 16, 2024, 6:05 p.m.

489 +0

7,460 +13

2,820 +2

metasploit-framework by rapid7

Metasploit Framework

updated at Nov. 16, 2024, 5:56 p.m.

2,055 +1

34,189 +46

13,986 +12

VHostScan by codingo

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

updated at Nov. 16, 2024, 5:05 p.m.

38 +0

1,201 +3

231 +0

Dependencies by lucasg

A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

updated at Nov. 16, 2024, 5:03 p.m.

157 +1

9,140 +29

751 +3

NoSQLMap by codingo

Automated NoSQL database enumeration and web application exploitation tool.

updated at Nov. 16, 2024, 2:04 p.m.

105 +0

2,922 +8

581 +1

bugbounty-cheatsheet by EdOverflow

A list of interesting payloads, tips and tricks for bug bounty hunters.

updated at Nov. 16, 2024, 11:49 a.m.

240 +1

5,942 +16

1,553 +2

habu by portantier

Hacking Toolkit

updated at Nov. 16, 2024, 2:01 a.m.

42 +0

886 +2

152 +0

awesome-pentest-cheat-sheets by coreb1t

Collection of the cheat sheets useful for pentesting

updated at Nov. 15, 2024, 9:19 p.m.

182 +0

3,887 +7

771 +2

NodeGoat by OWASP

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

updated at Nov. 15, 2024, 5:46 p.m.

78 +0

1,885 +0

1,664 +6

protobuf-inspector by jmendeth

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

updated at Nov. 15, 2024, 4:01 p.m.

25 +0

966 +2

97 +0

phpsploit by nil0x42

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

updated at Nov. 15, 2024, 2:39 p.m.

104 +0

2,221 +8

440 +1