A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

massive SQL injection vulnerability scanner

online port scan scraper

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

A distributed nmap / masscan scanning framework complete with scan scheduling, engine pooling, subsequent scan port diff-ing, and an API client for automation workflows.

JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting abilities to discover information about services. Generate report.

Attack Surface Management since before Attack Surface Management was a thing

Modular file scanning/analysis framework

an easy pentesting tool.

Library used to deskew a scanned document

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

Find subdomains with GPT, for free

Benchmarking repo for secrets scanning

Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository

Anteater - CI/CD Gate Check Framework

Cryptography detection tool

Python3 library and command line for GreyNoise

Nmap custom probes for better detecting SAP services