metasploit-framework by rapid7

Metasploit Framework

created at Aug. 30, 2011, 6:13 a.m.

2,042 +2

32,759 +44

13,668 +33

juice-shop by juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

created at Sept. 19, 2014, 2:53 p.m.

154 +0

9,502 +24

9,251 +74

sqlmap by sqlmapproject

Automatic SQL injection and database takeover tool

created at June 26, 2012, 9:52 a.m.

1,088 -2

30,519 +63

5,532 +8

dnSpy by dnSpy

.NET debugger and assembly editor

created at July 1, 2015, 4:05 p.m.

981 +2

25,457 +50

4,893 +9

jadx by skylot

Dex to Java decompiler

created at March 18, 2013, 5:08 p.m.

814 +1

39,000 +175

4,622 +7

PowerSploit by PowerShellMafia

PowerSploit - A PowerShell Post-Exploitation Framework

created at May 26, 2012, 4:08 p.m.

781 +0

11,462 +12

4,564 +6

mitmproxy by mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

created at Feb. 16, 2010, 4:10 a.m.

622 +4

34,307 +82

3,892 +6

mimikatz by gentilkiwi

A little tool to play with Windows security

created at April 6, 2014, 6:30 p.m.

914 +0

18,703 +40

3,555 +11

dbeaver by dbeaver

Free universal database tool and SQL client

created at Oct. 21, 2015, 8:26 a.m.

512 -1

37,313 +84

3,235 +3

masscan by robertdavidgraham

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

created at July 28, 2013, 5:35 a.m.

655 +0

22,603 +29

2,985 +4

radare2 by radareorg

UNIX-like reverse engineering framework and command-line toolset

created at July 3, 2012, 7:42 a.m.

486 +0

19,600 +41

2,935 +3

Empire by EmpireProject

Empire is a PowerShell and Python post-exploitation agent.

created at Aug. 5, 2015, 6:25 p.m.

489 +1

7,281 +6

2,774 +5

de4dot by de4dot

.NET deobfuscator and unpacker.

created at Sept. 20, 2011, 1:50 a.m.

511 +0

6,718 +9

2,636 +4

jd-gui by java-decompiler

A standalone Java Decompiler GUI

created at March 25, 2015, 5:28 a.m.

513 +0

13,519 +25

2,331 +3

x64dbg by x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

created at April 11, 2015, 8:48 p.m.

2,746 -1

43,151 +41

2,293 +5

zaproxy by zaproxy

The ZAP core project

created at June 3, 2015, 4:55 p.m.

396 -1

11,970 +16

2,189 +6

dex2jar by pxb1988

Tools to work with android .dex and java .class files

created at March 16, 2015, 9:13 a.m.

442 +0

11,846 +24

2,059 +4

amass by owasp-amass

In-depth attack surface mapping and asset discovery

created at July 10, 2018, 4:05 p.m.

208 +0

11,169 +29

1,816 +2

NodeGoat by OWASP

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

created at Oct. 21, 2013, 7:14 p.m.

78 +0

1,826 +1

1,561 +7

bugbounty-cheatsheet by EdOverflow

A list of interesting payloads, tips and tricks for bug bounty hunters.

created at July 13, 2017, 4:50 p.m.

236 +0

5,555 +20

1,507 +4