Top-rated tools trusted by the cybersecurity community
Phishing Framework for OTP codes
Burp Plugin to Bypass WAFs through the insertion of Junk Data.
AdPack is a state-aware Active Directory (AD) attack orchestration framework designed for security professionals. Unlike traditional point-and-shoot tools, AdPack maintains a persistent record of the target environment's topology, identities, and credentials to intelligently guide an operator from initial discovery to domain dominance. AdPack serves as a centralised "brain" for AD engagements, automating the connective tissue between disparate tools like NetExec, Mimikatz, and BloodHound. 1. State Persistence: Tracks hosts, users, groups, credentials, and sessions in a local SQLite database 2. Gap Detection: Analyses current ADState to identify missing prerequisites for advanced phases 3. Evasion-First Orchestration: Supports 11 distinct evasion profiles, ranging from standard in-memory execution to kernel-level PPL bypasses and 0-day exploits 4. Multi-Protocol Validation: Automatically verifies acquired credentials across SMB, LDAP, WinRM, and RDP to determine "Pwn3d!" status and administrative reach
neobotnet is a web intelligence platform that organizes the internet's exposed attack surface the way an attacker would see it. neobotnet maps the parts of a company's cloud and web infrastructure that are exposed to the public internet—the servers, links, and login pages anyone could reach. It indexes all of it and flags weak spots worth a closer look, so security researchers can quickly find and report flaws before attackers do. Think of it as a search engine for web security.
Find tools organized by testing methodology and use case
Videos, podcasts, and articles about penetration testing