rtw88

santet-online

searx

Private Search Engine

shellphish

Phishing Tool for 18 social media: Instagram, Facebook, Snapchat, Github, Twitter, Yahoo, Protonmail, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers, Gitlab, Pinterest

shellterlabsctf

Repositorio criado para armazenar e compartilhar experiencias e resolucoes dos desafios propostos no portal do shellterlabs.com

sherlock

🔎 Hunt down social media accounts by username across social networks

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sql-injection-payload-list

🎯 SQL Injection Payload List

ssl-kill-switch2

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

stego-toolkit

Collection of steganography tools - helps with CTF challenges

striker

Striker is an offensive information and vulnerability scanner.

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

theharvester

E-mails, subdomains and names Harvester - OSINT

tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

tools

:wrench: Tools of the trade

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

url-tracker

Change monitoring app that checks the content of web pages in different periods.

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

webhunt

Web App bug hunting

webmap

WebMap-Nmap Web Dashboard and Reporting (FIX by Ome)

webshell

This is a webshell open source project

webshell-1

Webshell && Backdoor Collection

xsstrike

Most advanced XSS detection suite.