Tools

Lightweight, modern web auditing proxy and Burp Suite alternative. Free plan available.

The reference wordlist collection: usernames, passwords, URLs, fuzzing payloads and more.

Online reverse shell generator for dozens of languages, with listeners and encoding.

Privilege escalation enumeration scripts for Linux, Windows and macOS.

Finds and verifies leaked secrets (API keys, tokens) in Git repos, S3, Docker and more.

Maintained successor of CrackMapExec. Swiss army knife for Windows and Active Directory network pentesting.

NVIDIA's LLM vulnerability scanner: prompt injection, jailbreaks, data leakage.

Automated scanning framework for pentesters and bug bounty.

Dynamic infrastructure framework for distributed scanning.

NSA reverse engineering suite. Free and powerful decompiler, cross-platform.

Automated script for WiFi network audits. Simple interface.

Tool for analyzing, extracting and reverse engineering firmware.

Forces TCP connections through proxies. Anonymity and evasion.

Workflow engine for offensive security. Highly customizable.

Multi-threaded automated enumeration tool for pentesting.

Automation script for bug bounty. Runs multiple tools.

The standard toolkit for web application security testing. Intercepting proxy and automated scanner.

The TCP/IP swiss army knife. Reads and writes data across network connections.

Link analysis and data enrichment tool. Visualizes relationships between people, domains and emails.

Free and open source web security scanner. Alternative to Burp Suite with CI/CD integration.