initstring

cloud_enum. Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

linkedin2username. OSINT Tool: Generate username lists for companies on LinkedIn

passphrase-wordlist. Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

dirty_sock. Linux privilege escalation exploit via snapd (CVE-2019-7304)

evil-ssdp. Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

uptux. Linux privilege escalation checks (systemd, dbus, socket fun, etc)

pentest-methodology. Short checklists for penetration testing methodology

lxd_root. Linux privilege escalation via LXD

lyricpass. Password wordlist generator using song lyrics for targeted bruteforce audits / attacks. Useful for penetration testing or security research.

pentest-tools. General stuff for pentesting - password cracking, phishing, automation, Kali, etc.

RTAP. Red Team Assessment Platform - reporting, visualizations, and analytics for cybersecurity red teams

switcheroo. Universal LAN-based SSRF Attack Primitive

pyshell. Simple netcat-like binary for Windows, created with python and py2exe.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

abrt_root. Privilege escalation in Fedora Linux via ABRT (Automatic Bug Reporting Tool): CVE-2025-12744

urban-dictionary-word-list. Script and sample dataset of all urban dictionary entry names (around 1.4 million total)

MemPG. Memorable Passphrase Generator - create secure random passphrases that sound like sentences

attack-flow. Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

gitrob. Reconnaissance tool for GitHub organizations

metasploit-framework. Metasploit Framework

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

dhcp4. DHCP4 library written in Go.

andrankEnum. Tool to get the top android apps for bug bounty purpose

PiHoleBlocklist. PiHole and AGH Blocklists