A suite of open source tools tailored for offensive security

A suite of open source tools tailored for offensive security

Security engineers, bug bounty hunters, and red teams.

nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security ...

Go
28088 3369

katana

A next-generation crawling and spidering framework.

Go
16585 1092

subfinder

Fast passive subdomain enumeration tool.

Go
13504 1538

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabi...

JavaScript
12235 3446

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes u...

Go
9856 1058

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Design...

Go
5900 670

interactsh

An OOB interaction gathering server and client library

Go
4296 457

proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS...

Go
3016 262

uncover

Quickly discover exposed hosts on the internet using multiple search engines.

Go
2905 264

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of yo...

Go
2709 310

vulnx

Modern CLI for exploring vulnerability data with powerful search, filtering, and ana...

Go
2430 179

shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce ...

Go
1616 215

notify

Notify is a Go-based assistance package that enables you to stream the output of sev...

Go
1563 158

nuclei-burp-plugin

Nuclei plugin for BurpSuite

Java
1329 133

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

Go
1294 384

mapcidr

Utility program to perform multiple operations for a given subnet/CIDR ranges.

Go
1208 111

pdtm

ProjectDiscovery's Open Source Tool Manager

Go
1098 95

tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

Go
1091 151

asnmap

Go CLI and Library for quickly mapping organization network ranges using ASN informa...

Go
1035 108

cloudlist

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

Go
1019 125

wappalyzergo

A high performance go implementation of Wappalyzer Technology Detection Library

Go
1015 162

cdncheck

A utility to detect various technology for a given IP address.

Go
957 129

alterx

Fast and customizable subdomain wordlist generator using DSL

Go
942 70

urlfinder

A high-speed tool for passively gathering URLs, optimized for efficient and comprehe...

Go
863 65