tools/security

Software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in suppo…

Android post-exploitation framework

Manage git credentials using gopass

Leak git repositories from misconfigured websites

Scan git repos (or files) for secrets

EncFS manager and mounter with GNOME3 integration

GTK/GNOME application to use GnuPG for signing other peoples’ keys

Password manager designed to make it easy to reconstruct difficult passwords

Modern release of the GNU Privacy Guard, a GPL OpenPGP implementation

Classic (1.4) release of the GNU Privacy Guard, a GPL OpenPGP implementation

LTS release of the GNU Privacy Guard, a GPL OpenPGP implementation

Smart-card daemon to enable the use of PKCS#11 tokens with GnuPG

Modern release of the GNU Privacy Guard, a GPL OpenPGP implementation with symbolic links for gpg …

Lightweight CVE search tool

Dork scanner

Tool for searching Exploits from Exploit Databases, etc

Office 365 enumeration tool

Enumeration tool for publicly exposed Azure Storage blobs

Tool used to brute-force URIs, DNS subdomains, Virtual Host names on target web servers

Tools for user enumeration and password bruteforce

Slightly more awesome Standard Unix Password Manager for Teams

Gopass haveibeenpwnd.com integration

Enables communication with gopass via JSON messages

Gopass Summon Provider

Password Gorilla is a Tk based password manager

Reverse/bind shell generator

Fast web spider written in Go

Tool for API and OWASP attack simulation

SWT based API for managing users and issuing SWT tokens

Tool to get an overview of the list of URLs

Database client and tools for the Go vulnerability database, also known as vuln

Web screenshot utility

Terminal user interface for GnuPG

Define and match graph patterns within binaries

Tool to find GraphQL endpoints using subdomain enumeration

Tool to interact with a GraphQL endpoint

GraphQL Server Engine Fingerprinting utility

Collection of tools that allows capturing TCP/IP packets and filtering them based on Lua policy fi…

Web crawler for the discovery of endpoints and assets

Identify the different types of hashes used to encrypt data and especially passwords

Various tools to generate special DNS records

Tool to automate hash length extension attacks

Proof-of-work algorithm used as spam and denial-of-service counter measure

Fast password cracker

Small utilities that are useful in advanced password cracking

Set of cross-platform tools to compute hashes

Command-line hash-generation utility

Simple entropy daemon

Small tool to capture packets from wlan devices

Tools for capturing wlan traffic and conversion to hashcat and John the Ripper formats

Fingerprinting tool for HTTP requests

Secret storage manager

Himitsu integration for Firefox

CLI to check if the mail is used on different sites

Easy, painless AWS credentials on developer laptops

Advanced Honeypot framework

A security oriented, feedback-driven, evolutionary, easy-to-use fuzzer

Tool to parse Firefox and Chrome HSTS databases into forensic artifacts

Parse and display HTTP traffic from network device or pcap file

Fast and multi-purpose HTTP toolkit

Official Qt frontend of radare2

IBM's Software TPM 2.0, an implementation of the TCG TPM 2.0 specification

PC/SC IFD Handler based on libnfc

Tool to discover, fingerprint and test IPsec VPN servers

Tool to migrate workloads to IMDSv2

Security testing tool for GraphQL

Tool to search a filesystem for indicators of compromise (IoC)

Tool for researching IOCs

Angry IP Scanner - fast and friendly network scanner

Sandbox for securely executing untrusted programs

Dex to Java decompiler

Tool for automated Web application testing

Simple command line wrapper around JD Core Java Decompiler project

Fast Java Decompiler with powerful GUI

John the Ripper password cracker

Merge multiple pcap files together, gracefully

Joomla Vulnerability Scanner

Tool for extracting URLs, paths, secrets, and other data from JavaScript source code

Tool to search for in Javascript hidden subdomains and secrets

Super fast CLI tool to decode and encode JWTs

Tool for attacking JWT

Implementation of various JWx (Javascript Object Signing and Encryption/JOSE) technologies

Next-generation crawling and spidering framework

Keybase filesystem

Secret manager backed by age

In-pod context discovery tool for Kubernetes penetration testing

Tool to automate KeePass discovery and secret extraction

NIST-based CVE lookup store and API powered by Rust

Kerberos bruteforce utility

File encryption done right

Keybase official command-line utility and service

Keybase official GUI

Key and secret workflow (validation, invalidation, etc.)

Hierarchical Deterministic Key Derivation for the Internet Computer

Contextual content discovery tool

Tool to scan subdomains

Tool for pentesting Microsoft Active Directory

KeePass Command Line Interface

Integrates krunner with pass the unix standard password manager (https://www.passwordstore.org/)

Modified version of kerberos tools that support automatic ticket refresh