A suite of open source tools tailored for offensive security

A suite of open source tools tailored for offensive security

Security engineers, bug bounty hunters, and red teams.

nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security ...

Go
27973 3359

katana

A next-generation crawling and spidering framework.

Go
16544 1089

subfinder

Fast passive subdomain enumeration tool.

Go
13456 1534

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabi...

JavaScript
12197 3438

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes u...

Go
9822 1054

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Design...

Go
5885 670

interactsh

An OOB interaction gathering server and client library

Go
4280 455

proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS...

Go
3011 261

uncover

Quickly discover exposed hosts on the internet using multiple search engines.

Go
2900 264

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of yo...

Go
2705 310

vulnx

Modern CLI for exploring vulnerability data with powerful search, filtering, and ana...

Go
2425 178

shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce ...

Go
1613 215

notify

Notify is a Go-based assistance package that enables you to stream the output of sev...

Go
1562 156

nuclei-burp-plugin

Nuclei plugin for BurpSuite

Java
1329 133

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

Go
1290 384

mapcidr

Utility program to perform multiple operations for a given subnet/CIDR ranges.

Go
1199 111

pdtm

ProjectDiscovery's Open Source Tool Manager

Go
1097 94

tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

Go
1091 151

asnmap

Go CLI and Library for quickly mapping organization network ranges using ASN informa...

Go
1034 107

cloudlist

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

Go
1018 125

wappalyzergo

A high performance go implementation of Wappalyzer Technology Detection Library

Go
1012 161

cdncheck

A utility to detect various technology for a given IP address.

Go
953 129

alterx

Fast and customizable subdomain wordlist generator using DSL

Go
941 70

urlfinder

A high-speed tool for passively gathering URLs, optimized for efficient and comprehe...

Go
860 65