Statistics for topic enumeration

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Web path scanner

In-depth attack surface mapping and asset discovery

A fast, simple, recursive content discovery tool written in Rust.

A drop-in replacement for native enum. Like native enum, but much better!

Full and natural support for enumerations as Django model fields.

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

In-depth attack surface mapping and asset discovery

Web path scanner

A drop-in replacement for native enum. Like native enum, but much better!

Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

Full and natural support for enumerations as Django model fields.

A tool for enumerating usernames from text, files, or websites

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Nebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps Comp...

In-depth attack surface mapping and asset discovery

Web path scanner

A drop-in replacement for native enum. Like native enum, but much better!

Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern

Nebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps Comp...

Speedy probe-based UDP service scanner

Full and natural support for enumerations as Django model fields.

Autonomous Privilege Escalation using AI

Information Gatherer & Webapps Exploiter

Speedy probe-based UDP service scanner

Speed up your pentest enumeration

Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

In-depth attack surface mapping and asset discovery

Web path scanner

Tools and Techniques for Red Team / Penetration Testing

Autonomous Privilege Escalation using AI

A drop-in replacement for native enum. Like native enum, but much better!

Speedy probe-based UDP service scanner

The tool 𝗲𝗻𝘂𝗺𝘅 is a framework built for Kali Linux that uses a plethora of existing pentesting tools as plugins in order to simplify and standardize the enumeration stage at a simplistic level. I...

Pinny Notes is a sticky note application with a button to "pin" a note making it always on top above other windows. A number of other handy tools are also available via the right click menus.