~/hackyfeed $

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

DNS Takeover tool written in Go

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

👻Stowaway -- Multi-hop Proxy Tool for pentesters

Social engineering tool [Access Webcam & Microphone & Location Finder] With {Py,JS,PHP}

:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:

Collection of steganography tools - helps with CTF challenges

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

🕵 Tracking things, so you don't have to

SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.

iOS全局自动化 代码混淆 工具！支持cocoapod组件代码一并 混淆，完美避开hardcode方法、静态库方法和系统库方法！

Automatic SSTI detection tool with interactive interface

SSRF (Server Side Request Forgery) testing resources

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

SSH-MITM - ssh audits made simple

Automatic SQL injection and database takeover tool

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.

SpiderSuite releases, wiki and roadmap

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)

Lovingly referred to as the Swiss Army Knife of PC gaming, Special K does a bit of everything.

🪅 Windows User Space Emulator

⛏️ Extract accounts info from personal pages on various sites for OSINT purpose