Fluent System Icons are a collection of familiar, friendly and modern icons from Microsoft.

🔒 End-to-end encrypted cloud for photos, videos and 2FA secrets.

💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Symfony, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead code used only…

Automated Tool for Testing Header Based Blind SQL Injection

NSEC3 Zone Walker

CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

Successor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are normally hindered by annoying anti bot systems …

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

🐬 Pwnagotchi plugin for Wall of Flippers

Create tar/zip archives that can exploit directory traversal vulnerabilities

An easy script/app to create Evil Portals quickly to be used on the Flipper Zero.

Evil portal app for the flipper zero + WiFi dev board

Tunnel TCP connections through a file

A fast tool to scan CRLF vulnerability written in Go

A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.

🔑 Hash type identifier (CLI & lib)

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

Markov Model libraries, optimized for cracking-focused password generations.

Automatic SSRF fuzzer and exploitation tool

Make your URL looooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooonger

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

AWS, Azure, Alibaba and Google bucket scanner

[READ ONLY] Webauthn library

FIDO-U2F / FIDO2 / Webauthn Framework

PHPStan rules for checking validity of links in Nette applications

A collection of Ducky scripts to be used in a Hak5 Rubber Ducky or Flipper Zero

A free software implementation of Symantec's VIP Access application and protocol