tools/security

GUI Firewall Management Application

Single Packet Authorization (and Port Knocking) server/client

Tool to fetch URLs from HTML attributes

Extendable Pentesting Framework for the Automotive Domain

Tool to fetch known URLs

Script for generating HOTP/TOTP keys (and QR code)

A simple yet robust commandline random password generator

Shamir's secret-sharing method in the Galois Field GF(2**8)

Tool to find and fix various types of hardcoded secrets and infrastructure-as-code misconfiguratio…

Tool for detecting and exploiting SQL injection security flaws

Extensible GitHub dorking tool

A software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in sup…

A software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in sup…

Android post-exploitation framework

Manage git credentials using gopass

Leak git repositories from misconfigured websites

Scan git repos (or files) for secrets

EncFS manager and mounter with GNOME3 integration

GTK/GNOME application to use GnuPG for signing other peoples’ keys

A password manager designed to make it easy to reconstruct difficult passwords

Modern release of the GNU Privacy Guard, a GPL OpenPGP implementation

Classic (1.4) release of the GNU Privacy Guard, a GPL OpenPGP implementation

LTS release of the GNU Privacy Guard, a GPL OpenPGP implementation

A smart-card daemon to enable the use of PKCS#11 tokens with GnuPG

Modern release of the GNU Privacy Guard, a GPL OpenPGP implementation with symbolic links for gpg …

A lightweight CVE search tool

Dork scanner

Tool for searching Exploits from Exploit Databases, etc

Office 365 enumeration tool

Enumeration tool for publicly exposed Azure Storage blobs

Tool used to brute-force URIs, DNS subdomains, Virtual Host names on target web servers

Tools for user enumeration and password bruteforce

The slightly more awesome Standard Unix Password Manager for Teams

Gopass haveibeenpwnd.com integration

Enables communication with gopass via JSON messages

Gopass Summon Provider

Password Gorilla is a Tk based password manager

Reverse/bind shell generator

Fast web spider written in Go

Tool for API and OWASP attack simulation

An SWT based API for managing users and issuing SWT tokens

A JWT based API for managing users and issuing JWT tokens

Tool to get an overview of the list of URLs

The database client and tools for the Go vulnerability database, also known as vuln

Web screenshot utility

Terminal user interface for GnuPG

Define and match graph patterns within binaries

Tool to find GraphQL endpoints using subdomain enumeration

Tool to interact with a GraphQL endpoint

GraphQL Server Engine Fingerprinting utility

Vulnerability scanner for container images and filesystems

A collection of tools that allows capturing TCP/IP packets and filtering them based on Lua policy …

Web crawler for the discovery of endpoints and assets

Identify the different types of hashes used to encrypt data and especially passwords

Various tools to generate special DNS records

Tool to automate hash length extension attacks

Proof-of-work algorithm used as spam and denial-of-service counter measure

Fast password cracker

Small utilities that are useful in advanced password cracking

A set of cross-platform tools to compute hashes

Command-line hash-generation utility

A simple entropy daemon

Small tool to capture packets from wlan devices

Tools for capturing wlan traffic and conversion to hashcat and John the Ripper formats

Fingerprinting tool for HTTP requests

A secret storage manager

Himitsu integration for Firefox

CLI to check if the mail is used on different sites

Easy, painless AWS credentials on developer laptops

Advanced Honeypot framework

A security oriented, feedback-driven, evolutionary, easy-to-use fuzzer

Tool to parse Firefox and Chrome HSTS databases into forensic artifacts

Parse and display HTTP traffic from network device or pcap file

Fast and multi-purpose HTTP toolkit

An official graphical interface of radare2

IBM's Software TPM 2.0, an implementation of the TCG TPM 2.0 specification

PC/SC IFD Handler based on libnfc

Tool to discover, fingerprint and test IPsec VPN servers

Tool to migrate workloads to IMDSv2

Security testing tool for GraphQL

Tool to search a filesystem for indicators of compromise (IoC)

Tool for researching IOCs

Angry IP Scanner - fast and friendly network scanner

Sandbox for securely executing untrusted programs

Dex to Java decompiler

Tool for automated Web application testing

Simple command line wrapper around JD Core Java Decompiler project

Fast Java Decompiler with powerful GUI

John the Ripper password cracker

Merge multiple pcap files together, gracefully

Joomla Vulnerability Scanner

Tool for extracting URLs, paths, secrets, and other data from JavaScript source code

Tool to search for in Javascript hidden subdomains and secrets

Super fast CLI tool to decode and encode JWTs

Tool for attacking JWT

Implementation of various JWx (Javascript Object Signing and Encryption/JOSE) technologies

A next-generation crawling and spidering framework

The Keybase filesystem

A secret manager backed by age

An in-pod context discovery tool for Kubernetes penetration testing