Directory
Published directory entries matching your search.
byp4xx is an open source security tool written in the Go programming language, intended for bypassing 40X HTTP status responses during web testing. Its features include HTTP verb tampering, custom header modification, User-Agent switching, extension handling, and testing of default credentials, with resources relevant to bug bounty workflows.
Promptfoo is a tool for testing AI prompts, agents and RAG systems. It supports red teaming, penetration testing and vulnerability scanning for AI, enables performance comparison across models including GPT, Claude, Gemini and DeepSeek, uses simple declarative configuration, and integrates with command line and CI/CD workflows.
Cyfrin is a blockchain security firm helping protocols and institutions reduce risk through smart contract audits, formal verification, penetration testing, incident response, and security and risk advisory. It also provides security research and enterprise education and certifications.
A free domain research tool that discovers hosts related to a domain and looks up DNS records. It presents visible hosts from an attacker's perspective for red and blue teams, and is intended for reconnaissance, penetration testing, bug bounties, threat analysis and network OSINT.
Dorks-collections-list is a GitHub repository that compiles lists of dorks for various search engines and services. It includes categories such as Google, Shodan, Censys, VirusTotal, and many others, providing links to external repositories and articles. The collection supports cybersecurity activities including OSINT, penetration testing, and bug bounty hunting. It is maintained by the user cyb_detective.
FailSafe builds autonomous penetration testing and continuous offensive security systems for applications, APIs, cloud infrastructure, and AI. Its SWARM platform deploys threat-model-driven AI agents that discover, chain, and exploit vulnerabilities, with findings mapped to MITRE ATT&CK, OWASP, and NIST CSF.
🔍 Chrome扩展，为安全研究和渗透测试提供Google/百度/Bing高级搜索语法快捷执行。一键Dorking、批量提取URL、智能过滤黑名单，大幅提升信息收集效率。 🔍 Chrome extension for security research and penetration testing. One-click advanced search (Dorking) on Google/Baidu/Bing, bulk URL extraction, smart blacklist filtering. Boost OSINT efficiency.
The Kali NetHunter App Store is an installable catalogue of Android applications for penetration testing and forensics. Its client allows users to browse, install and keep track of updates on their device. The page also links related NetHunter components, including the NetHunter app, terminal emulator and KeX desktop experience client.
metagoofil is a Python security tool that searches Google for specific file types hosted on a target website, with optional local download of discovered files. It is intended for open source intelligence gathering, penetration testing, and identifying files organizations publicly expose to search indexers. It is a maintained fork of the original metagoofil project, preinstalled by default on Kali Linux, and deliberately excludes built-in metadata analysis in favor of external tools like exiftool.
Metasploit is a penetration testing framework developed as a collaboration between the open source community and Rapid7. It is used to find security issues, verify vulnerability mitigations and manage security assessments. The Metasploit Framework is open source, and Metasploit Pro is a commercial product with support. Documentation and community channels are available for help.
SiteDorks is an open-source Python tool that automates search engine dork queries across Google, Bing, Ecosia, DuckDuckGo, Yandex and Yahoo. It includes default lists of 638 categorized dorkable websites and bug bounty programs, supports custom site lists, and allows query splitting for search engines with character limits. The tool is designed for reconnaissance, penetration testing and security research tasks.
Softstack is a Germany-based Web3 service partner offering smart contract audits, software development and consulting. Its services include smart contract auditing, penetration testing, dApp development and Web3 regulations consulting. The company presents itself as a service partner for software development, cybersecurity and consulting in Web3.
SpiderSuite is a web crawling and security testing platform for security professionals, penetration testers and researchers. It offers specialized crawlers, traffic interception, request crafting and fuzzing, along with source and graph views of crawl data, plus import and export in formats such as HAR, WARC, CSV and JSON.
