All Tools

422 tools found
hetty

An HTTP toolkit for security research.

9,271
13
GitHub
argus

argus

OSINTReconnaissanceDiscovery

The Ultimate Information Gathering Toolkit

2,713
50
GitHub
SillyRAT

SillyRAT

ExploitationCommand and ControlPersistence

A Python based RAT 🐀 (Remote Access Trojan) for getting reverse shell 🖥️

852
47
GitHub
ImHex

ImHex

Reverse EngineeringMalware AnalysisUtility

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

52,143
40
GitHub
pentestagent

PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

768
71
GitHub
Drana-Infinity

Drana-Infinity

FrameworkAutomationWeb Security

Drana-Infinity is a locally hosted advanced AI assistant designed and developed by IHA089. It’s built specifically for cybersecurity, ethical hacking, and bug bounty research — empowering researchers to analyze, automate, and understand real-world vulnerabilities.

65
217
GitHub
merlin

merlin

Post-ExploitationCommand and ControlFramework

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

5,460
74
GitHub
AD-Ghost

AD-Ghost

Utility

No description available

22
104
GitHub
Osintgraph

Osintgraph

OSINTReconnaissanceSocial Engineering

About Osintgraph is an open-source tool that collects Instagram data, followers, and followees, storing them in Neo4j. It helps you easily map and analyze a target's social network, revealing interests, connections, and affiliations for effective OSINT.

513
182
GitHub
HandleHijacker

HandleHijacker

UtilityDefense EvasionCollection

HandleHijacker is a low-level Windows utility written in Go that lets you inspect running processes, extract files that processes have open, and optionally close handles to those files, that lets us read a content off a locked file, without terminating the process.

25
30
GitHub

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

2,155
175
GitHub
OSINT-for-countries

OSINT-for-countries

OSINTReconnaissanceUtility

Methodology, links, tools for OSINT in different countries

665
122
GitHub
collector

collector

AutomationUtilityFramework

My workflow made with shell script, some API's and tools. ;)

10
258
GitHub

cai

Utility

Cybersecurity AI (CAI), the framework for AI Security

6,554
218
GitHub

injector

ExploitationWeb SecurityContainer Security

Injector a.k.a tr4c1l0rds is a tool to run simultaneous sql injections attacks anonymously using containers.

20
104
GitHub
flowsint

flowsint

OSINTFrameworkDiscovery

A modern platform for visual, flexible, and extensible graph-based investigations.

418
425
GitHub
Invoke-PowerChrome

Invoke-PowerChrome

Credential AccessPassword CrackingPost-Exploitation

Decrypt Chromium based browser passwords with PowerShell.

74
217
GitHub
trufflehog

trufflehog

Utility

Find, verify, and analyze leaked credentials

23,963
268
GitHub

ail-framework

OSINTReconnaissanceFramework

AIL framework - Analysis Information Leak framework

853
320
GitHub
reverse_ssh

SSH based reverse shell

1,301
343
GitHub
venom

venom

Command and ControlPersistenceFramework

Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence

50
106
GitHub
OptixGate

OptixGate

Command and ControlPost-ExploitationPersistence

Open-source multi-purpose remote access tool for Microsoft Windows

159
88
GitHub
fuzzforge_ai

fuzzforge_ai

FuzzingWeb SecurityAutomation

AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing & Offensive Security. Automate vulnerability discovery with intelligent fuzzing, AI-driven analysis, and a marketplace of security tools.

504
111
GitHub
public-bugbounty-programs

public-bugbounty-programs

UtilityReconnaissanceWeb Security

Community curated list of public bug bounty and responsible disclosure programs.

1,241
39
GitHub

Showing 1-24 of 422 tools