Open Source Security Arsenal

In-depth attack surface mapping and asset discovery

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A fast, simple, recursive content discovery tool written in Rust.

Directory/File, DNS and VHost busting tool written in Go

Fast web fuzzer written in Go

Nikto web server scanner

Automatic SQL injection and database takeover tool

An OOB interaction gathering server and client library

is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

A next-generation crawling and spidering framework.

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Fast passive subdomain enumeration tool.