Secrets Find0r is a multithreaded SMB share crawler that hunts for exposed credentials and secrets across Windows networks. It enumerates shares, recursively scans files with regex/keyword rules, highlights matched tokens on screen, and exports clean ASCII tables. Supports DOCX/PDF/legacy Office and depth limits.

Advanced mobile security research platform for authorized testing and educational purposes

WebSource Harvester is an educational web-source harvester that crawls a site (BFS, depth-controlled), downloads browser-visible assets (HTML, CSS, JS, images, fonts, PDFs), and rewrites paths so pages work offline, including nested routes. It enforces same-origin limits and is designed for learning, offline analysis, and safe portfolio demos.

Credential Reuse0r is a fast, multithreaded offensive security tool for testing credential reuse across multiple network services, especially in Windows Active Directory environments.

Powerful Python SSH brute force tool with multi-threaded architecture, advanced honeypot detection, real-time statistics, and system reconnaissance. Perfect for authorized security testing and penetration testing.

SMB Inspect0r is a fast multithreaded Python tool to scan networks for accessible SMB shares, supporting both anonymous and authenticated logins. Features include progress tracking, and detailed output of discovered shares.

AD-Descript0r is a Python tool for Active Directory reconnaissance. It authenticates against a Domain Controller, retrieves all usernames and their descriptions, and displays the results in a clean table with colored output

HTTP security auditor — headers, cookies, TLS, redirects & info disclosure. Color-coded terminal report with risk scoring. Bash · Zero dependencies · Bug bounty ready

Organized offensive payloads for CTFs and authorized penetration testing. SQLi · XSS · SSTI · Command Injection · LFI · XXE · SSRF · Auth Bypass — every payload includes context, platform notes and WAF bypass variants.

Advanced network stress testing tool for controlled environments. Multi-protocol packet generation (UDP/TCP/ICMP/IPv6/ARP) with built-in safety validation, audit logging, and real-time statistics. Designed for authorized network testing and educational purposes only.

Shellcode Weaver is a professional security research and educational tool designed for authorized testing and learning about shellcode generation, analysis, and mutation. Written in Python, it serves as a comprehensive toolkit for security professionals, researchers, and students who need to understand low-level code execution and security testing

Offensive payload generator: reverse shells, web shells, XSS/SQLi/CMDi/LFI payloads with encoding variants

Real-time subdomain enumeration and HTTP probing dashboard for Attack Surface Management

Post-exploitation keylogger with C2 listener for authorized red team engagements

Authorized Android TLS inspection toolkit for Frida hooks, native library fingerprints, and pinning review.

A python coded feature-rich reverse shell C2 proof-of-concept with encrypted WebSocket communication, advanced credential harvesting, browser data extraction with decryption, desktop surveillance, VSS-based file access, and comprehensive reconnaissance capabilities. For authorized security testing and educational purposes.

Rev-AI is an advanced reverse shell implementation that leverages AI (DeepSeek API) to generate Linux commands based on natural language queries. It provides a secure communication channel between a target system and a command server with automatic reconnection capabilities.

Discover 200+ CTF and bug bounty payloads with 8 categories for fast testing, research, and exploit development

Audit HTTP security headers and web settings with webcheck for fast bug bounty and pentest checks