# A suite of open source tools tailored for offensive security

Security engineers, bug bounty hunters, and red teams.

## Tools

1. [**nuclei**](https://github.com/projectdiscovery/nuclei)  
   Nuclei is a fast, customizable vulnerability scanner powered by the global security community.  
   **Language:** Go  
   **Stars:** 28088  
   **Forks:** 3369

2. [**katana**](https://github.com/projectdiscovery/katana)  
   A next-generation crawling and spidering framework.  
   **Language:** Go  
   **Stars:** 16585  
   **Forks:** 1092

3. [**subfinder**](https://github.com/projectdiscovery/subfinder)  
   Fast passive subdomain enumeration tool.  
   **Language:** Go  
   **Stars:** 13504  
   **Forks:** 1538

4. [**nuclei-templates**](https://github.com/projectdiscovery/nuclei-templates)  
   Community curated list of templates for the nuclei engine to find security vulnerabilities.  
   **Language:** JavaScript  
   **Stars:** 12235  
   **Forks:** 3446

5. [**httpx**](https://github.com/projectdiscovery/httpx)  
   httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes simultaneously.  
   **Language:** Go  
   **Stars:** 9856  
   **Forks:** 1058

6. [**naabu**](https://github.com/projectdiscovery/naabu)  
   A fast port scanner written in Go with a focus on reliability and simplicity.  
   **Language:** Go  
   **Stars:** 5900  
   **Forks:** 670

7. [**interactsh**](https://github.com/projectdiscovery/interactsh)  
   An OOB interaction gathering server and client library.  
   **Language:** Go  
   **Stars:** 4296  
   **Forks:** 457

8. [**proxify**](https://github.com/projectdiscovery/proxify)  
   A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic.  
   **Language:** Go  
   **Stars:** 3016  
   **Forks:** 262

9. [**uncover**](https://github.com/projectdiscovery/uncover)  
   Quickly discover exposed hosts on the internet using multiple search engines.  
   **Language:** Go  
   **Stars:** 2905  
   **Forks:** 264

10. [**dnsx**](https://github.com/projectdiscovery/dnsx)  
    dnsx is a fast and multi-purpose DNS toolkit to run multiple DNS queries of your choice.  
   **Language:** Go  
   **Stars:** 2709  
   **Forks:** 310

11. [**vulnx**](https://github.com/projectdiscovery/vulnx)  
   Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis features.  
   **Language:** Go  
   **Stars:** 2430  
   **Forks:** 179

12. [**shuffledns**](https://github.com/projectdiscovery/shuffledns)  
   MassDNS wrapper written in Go to enumerate valid subdomains using active brute-force techniques.  
   **Language:** Go  
   **Stars:** 1616  
   **Forks:** 215

13. [**notify**](https://github.com/projectdiscovery/notify)  
   Notify is a Go-based assistance package that enables you to stream the output of several security tools.  
   **Language:** Go  
   **Stars:** 1563  
   **Forks:** 158

14. [**nuclei-burp-plugin**](https://github.com/projectdiscovery/nuclei-burp-plugin)  
   Nuclei plugin for BurpSuite.  
   **Language:** Java  
   **Stars:** 1329  
   **Forks:** 133

15. [**public-bugbounty-programs**](https://github.com/projectdiscovery/public-bugbounty-programs)  
   Community curated list of public bug bounty and responsible disclosure programs.  
   **Language:** Go  
   **Stars:** 1294  
   **Forks:** 384

16. [**mapcidr**](https://github.com/projectdiscovery/mapcidr)  
   Utility program to perform multiple operations for a given subnet/CIDR ranges.  
   **Language:** Go  
   **Stars:** 1208  
   **Forks:** 111

17. [**pdtm**](https://github.com/projectdiscovery/pdtm)  
   ProjectDiscovery's Open Source Tool Manager.  
   **Language:** Go  
   **Stars:** 1098  
   **Forks:** 95

18. [**tlsx**](https://github.com/projectdiscovery/tlsx)  
   Fast and configurable TLS grabber focused on TLS based data collection.  
   **Language:** Go  
   **Stars:** 1091  
   **Forks:** 151

19. [**asnmap**](https://github.com/projectdiscovery/asnmap)  
   Go CLI and Library for quickly mapping organization network ranges using ASN information.  
   **Language:** Go  
   **Stars:** 1035  
   **Forks:** 108

20. [**cloudlist**](https://github.com/projectdiscovery/cloudlist)  
   Cloudlist is a tool for listing Assets from multiple Cloud Providers.  
   **Language:** Go  
   **Stars:** 1019  
   **Forks:** 125

21. [**wappalyzergo**](https://github.com/projectdiscovery/wappalyzergo)  
   A high performance Go implementation of Wappalyzer Technology Detection Library.  
   **Language:** Go  
   **Stars:** 1015  
   **Forks:** 162

22. [**cdncheck**](https://github.com/projectdiscovery/cdncheck)  
   A utility to detect various technology for a given IP address.  
   **Language:** Go  
   **Stars:** 957  
   **Forks:** 129

23. [**alterx**](https://github.com/projectdiscovery/alterx)  
   Fast and customizable subdomain wordlist generator using DSL.  
   **Language:** Go  
   **Stars:** 942  
   **Forks:** 70

24. [**urlfinder**](https://github.com/projectdiscovery/urlfinder)  
   A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive data collection.  
   **Language:** Go  
   **Stars:** 863  
   **Forks:** 65