Open Source Security Arsenal

fsociety fsociety Hacking Tools Pack – A Penetration Testing Framework

awesome-pentest A collection of awesome penetration testing resources, tools and other shiny things

sqlmc Official Kali Linux tool to check all urls of a domain for SQL injections :)

TrafficEye This tool is designed to help penetration testers and network administrators identify potential security threats, especially those targeting web applications such as SQL injection, XSS, and WebShells. Its modular desig 该工具适用于 HW 蓝队对网络流量的深入分析，帮助安全研究人员、渗透测试人员及网络管理员等专业人士识别潜在的安全威胁，尤其是针对 Web 应用的攻击（如 SQL 注入、XSS、WebShell 等）。其模块化设计使用户能够根据实际需求自由选择并定制各类功能模块

infersharp Infer# is an interprocedural and scalable static code analyzer for C#. Via the capabilities of Facebook's Infer, this tool detects null dereferences, resource leaks, and thread-safety violations. It also performs taint flow tracking to detect critical security vulnerabilities like SQL injections.

bbqsql SQL Injection Exploitation Tool

Atlas Quick SQLMap Tamper Suggester

ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

open-code-review Fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

sniffnet Comfortably monitor your network traffic 🕵️‍♂️

mitmproxy An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

caddy Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS