Find leaked secrets via github search

Rustcat(rcat) - The modern Port listener and Reverse shell

Linux privilege escalation auditing tool

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A Java GUI Tool for Analyzing Jar (一个用户分析Jar包的GUI工具，可以方便地查看方法调用关系并反编译，支持Spring框架的分析)

Community curated list of templates for the nuclei engine to find security vulnerabilities.

弱口令检测、 漏洞扫描、端口扫描（协议识别，组件识别）、web目录扫描、等保模拟定级、自动化运维、等保工具（网络安全等级保护现场测评工具）内置3级等保核查命令、基线核查工具

OSCP Cheat Sheet

generate code from cURL commands

🚀 Open-Source Serverless Framework for full-stack apps on Firebase and Google Cloud.

A command-line utility for auditing DNS configuration using Zonemaster API

A list of dorks for the Netlas.io search engine, with which you can find millions of objects in the boundless IoE. Contains queries to search for IoT elements, protocols, communication tools, remot…

Static Analyzer for Solidity

Collection of Cyber Threat Intelligence sources from the deep and dark web

BChecks collection for Burp Suite Professional

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

A really simple end-user interface for your BigBlueButton server.

A scope generation tool for Burp Suite & ZAP

Pull out bits of URLs provided on stdin