NepHack Next Level Hacking Resources

ML Model Watermarking - Model ProtectionAI

Detectron2 - Computer Vision for SecurityAI

YOLOv5 - Object Detection for SecurityAI

OpenCV - Computer Vision LibraryAI

Face Recognition - Facial Recognition LibraryAI

FaceSwap - Deepfake Detection & CreationAI

DeepFaceLab - Advanced Deepfake ToolAI

FaceForensics++ - Deepfake Detection DatasetAI

DFDC Deepfake Challenge - Detection ModelsAI

StyleGAN3 - Generative Adversarial NetworksAI

StyleGAN2 - High-Quality Image GenerationAI

Stable Diffusion - Text-to-Image GenerationAI

DALL-E - AI Image GenerationAI

DALL-E 2 PyTorch - Image Generation ImplementationAI

DialoGPT - Conversational AI for Social EngineeringAI

Hugging Face Datasets - ML Datasets for SecurityAI

Weights & Biases - ML Experiment TrackingAI

MLflow - ML Lifecycle ManagementAI

Kubeflow - ML Workflows on KubernetesAI

Ray - Distributed AI & ML FrameworkAI

Dask - Parallel Computing for MLAI

Horovod - Distributed Deep LearningAI

NNI - Neural Network IntelligenceAI

Optuna - Hyperparameter OptimizationAI

Hyperopt - Distributed Asynchronous Hyperparameter OptimizationAI

Auto-sklearn - Automated Machine LearningAI

FLAML - Fast & Lightweight AutoMLAI

H2O.ai - Open Source ML PlatformAI

Weka - Machine Learning WorkbenchAI

RapidMiner - Data Science PlatformAI

KNIME - Analytics PlatformAI

Orange3 - Data Mining & VisualizationAI

Apache Mahout - Scalable ML AlgorithmsAI

Apache SystemML - Large-Scale MLAI

Deeplearning4j - Deep Learning for JavaAI

LightGBM - Gradient Boosting FrameworkAI

XGBoost - Optimized Gradient BoostingAI

CatBoost - Gradient Boosting on Decision TreesAI

Statsmodels - Statistical ModelingAI

PyMC - Probabilistic ProgrammingAI

Stan - Statistical Modeling & ComputationAI

Pyro - Deep Universal Probabilistic ProgrammingAI

TensorFlow Probability - Probabilistic ReasoningAI

BoTorch - Bayesian Optimization in PyTorchAI

GPflow - Gaussian Processes in TensorFlowAI

GPyTorch - Gaussian Processes in PyTorchAI

GPy - Gaussian Processes FrameworkAI

Scikit-Optimize - Sequential Model-Based OptimizationAI

Bayesian Optimization - Global OptimizationAI

Ax - Adaptive Experimentation PlatformAI

Captum - Model Interpretability for PyTorchAI

SHAP - Explainable AIAI

LIME - Local Interpretable Model-Agnostic ExplanationsAI

InterpretML - Machine Learning InterpretabilityAI

Awesome Production ML - Production ML ResourcesAI

Applied ML - Real-World ML ApplicationsAI

ML Systems Design - System Design for MLAI

Awesome MLOps - ML Operations ResourcesAI

Awesome MLOps - MLOps Tools & PracticesAI

🎭 AI Social Engineering & Deepfakes 60 tools ▾

FaceSwap - Deepfake Creation & DetectionAI

DeepFaceLab - Leading Deepfake SoftwareAI

First Order Motion Model - Video SynthesisAI

StyleGAN3 - High-Quality Face GenerationAI

StyleGAN2 - Realistic Face GenerationAI

FaceForensics++ - Deepfake Detection DatasetAI

DFDC Challenge - Deepfake DetectionAI

Fake News Detector - AI-Powered News VerificationAI

DialoGPT - Conversational AIAI

GPT-2 - Text Generation ModelAI

Transformers - Pre-trained Language ModelsAI

Fairseq - Sequence-to-Sequence ToolkitAI

BERT - Bidirectional Encoder RepresentationsAI

AllenNLP - Natural Language ProcessingAI

spaCy - Industrial-Strength NLPAI

NLTK - Natural Language ToolkitAI

Gensim - Topic Modeling & Document SimilarityAI

FastText - Efficient Text ClassificationAI

Stanza - Stanford NLP ToolkitAI

Flair - State-of-the-Art NLPAI

Coqui TTS - Text-to-Speech SynthesisAI

Mozilla TTS - Deep Learning Text-to-SpeechAI

ESPnet - End-to-End Speech ProcessingAI

TorchAudio - Audio Processing for PyTorchAI

Librosa - Audio & Music AnalysisAI

PyDub - Audio ManipulationAI

Real-Time Voice Cloning - Voice SynthesisAI

Resemblyzer - Speaker RecognitionAI

Mimic3 - Neural Text-to-SpeechAI

Tortoise TTS - Multi-Voice Text-to-SpeechAI

VITS - Conditional Variational AutoencoderAI

Tacotron2 - Natural TTS SynthesisAI

WaveGlow - Flow-based Generative NetworkAI

HiFi-GAN - High Fidelity Neural VocoderAI

MelGAN - Generative Adversarial NetworkAI

ParallelWaveGAN - Fast Waveform GenerationAI

WaveNet Vocoder - Neural Audio SynthesisAI

Tacotron - End-to-End Speech SynthesisAI

DeepSpeech - Speech-to-Text EngineAI

Whisper - Robust Speech RecognitionAI

SpeechBrain - Speech Processing ToolkitAI

Kaldi - Speech Recognition ToolkitAI

wav2letter++ - Speech Recognition SystemAI

Lingvo - Neural Network FrameworkAI

SentencePiece - Unsupervised Text TokenizerAI

Tokenizers - Fast & Customizable TokenizationAI

tiktoken - Fast BPE TokeniserAI

Google Research Language - NLP ResearchAI

UniLM - Unified Language ModelAI

LAVIS - Language-Vision IntelligenceAI

CLIP - Connecting Text & ImagesAI

OpenCLIP - Open Source CLIP ImplementationAI

Stable Diffusion - Text-to-Image GenerationAI

DALL-E - Text-to-Image AIAI

DALL-E 2 PyTorch - ImplementationAI

DALL-E Mini - Lightweight Text-to-ImageAI

DALL-E Playground - Interactive InterfaceAI

Stable Diffusion WebUI - User InterfaceAI

InvokeAI - Stable Diffusion ToolkitAI

Open Assistant - Conversational AIAI

GPT4All - Local ChatGPT AlternativeAI

🔍 AI-Powered OSINT & Reconnaissance 80 tools ▾

SpiderFoot - Automated OSINT CollectionAI

theHarvester - Email & Domain IntelligenceAI

Sherlock - Social Media Username HunterAI

Social Mapper - Social Media EnumerationAI

Recon-ng - Web Reconnaissance FrameworkAI

Amass - Network Mapping & Asset DiscoveryAI

reNgine - Automated Reconnaissance FrameworkAI

Osmedeus - Fully Automated ReconnaissanceAI

ReconFTW - Automated Reconnaissance WrapperAI

BBOT - Recursive Internet ScannerAI

Mosint - Email OSINT ToolAI

Holehe - Email Account CheckerAI

h8mail - Email OSINT & Breach HuntingAI

WhatsMyName - Username Enumeration ToolAI

Blackbird - Username OSINT ToolAI

Maigret - Username Investigation ToolAI

FinalRecon - Fast & Simple Python ReconnaissanceAI

pwnedOrNot - HIBP Lookup ToolAI

Th3inspector - All-in-One Information GatheringAI

Harpoon - CLI Tool for Open Source IntelligenceAI

ThreatIngestor - Extract & Aggregate IOCsAI

Twint - Twitter Intelligence ToolAI

Masto - Mastodon OSINT ToolAI

linkedin2username - LinkedIn Username GeneratorAI

UhOh365 - Office365 User EnumerationAI

Oh365UserFinder - Office365 User DiscoveryAI

o365recon - Office365 ReconnaissanceAI

SimplyEmail - Email Reconnaissance ToolAI

HawkScan - Security Tool for ReconnaissanceAI

LittleBrother - Information Gathering ToolAI

DataSploit - OSINT Framework & AutomationAI

Infoga - Email OSINT & Information GatheringAI

RED HAWK - Information Gathering & Vulnerability ScannerAI

Discover - Custom Bash Scripts for Penetration TestingAI

CredNinja - Credential Validation & OSINTAI

GasMask - Information Gathering ToolAI

Awesome OSINT - Curated List of OSINT ResourcesAI

OSINT Framework - Collection of OSINT ToolsAI

OSINT Stuff Tool Collection - OSINT ToolsAI

OSINT Collection - List of OSINT ToolsAI

Gitrob - Reconnaissance Tool for GitHub OrganizationsAI

GitHound - Reconnaissance Tool for GitHub Code SearchAI

GitDorker - Tool to Search GitHub for Sensitive InformationAI

GitHub Dorks - Collection of GitHub DorksAI

gitGraber - Monitor GitHub to Search & Find Sensitive DataAI

GitMiner - Tool for Advanced Mining for Content on GitHubAI

GitGot - Semi-Automated Sensitive Information AssessmentAI

Gittyleaks - Find Sensitive Information for a Git RepoAI

git-all-secrets - Tool to Capture All the Git SecretsAI

TruffleHog - Find Secrets in Git RepositoriesAI

TruffleHog - Searches Through Git Repositories for SecretsAI

detect-secrets - Enterprise Friendly Way of Detecting SecretsAI

git-secrets - Prevents You from Committing SecretsAI

Gitleaks - Detect & Prevent Secrets in Git ReposAI

shhgit - Find GitHub Secrets in Real TimeAI

secrets-patterns-db - Secrets Regex Patterns DatabaseAI

leaky-repo - Scan a Repo for SecretsAI

SecretScanner - Find Secrets & Passwords in Container ImagesAI

KeyHacks - API Key Testing & ValidationAI

SecretFinder - Find Sensitive Data in JS FilesAI

SOPS - Simple & Flexible Tool for Managing SecretsAI

KICS - Keeping Infrastructure as Code SecureAI

Checkov - Static Code Analysis Tool for Infrastructure as CodeAI

Presidio - Data Protection & AnonymizationAI

Censys Python - Python Library for Censys APIsAI

BinaryEdge API Client - Python API ClientAI

Shodan Python - Python Library for ShodanAI

Shodan Seeker - Lightweight Shodan ClientAI

My Shodan Scripts - Collection of Shodan ScriptsAI

Panoptic - Search Engine for ShodanAI

Chaos Client - Go Client to Communicate with Chaos DNS APIAI

Uncover - Quickly Discover Exposed HostsAI

ASNmap - Go CLI & Library for ASN DiscoveryAI

mapcidr - Utility Program to Perform Multiple OperationsAI

Cloudlist - Multi-Cloud Tool for Asset DiscoveryAI

Notify - Stream Output of Several ToolsAI

Alterx - Fast & Customizable Subdomain Wordlist GeneratorAI

tlsx - Fast & Configurable TLS GrabberAI

cdncheck - Utility to Detect CDN EndpointsAI

Proxify - Swiss Army Knife Proxy ToolAI

Interactsh - Out-of-Band Interaction ToolAI

CVEMap - Navigate CVE UniverseAI

PDTM - ProjectDiscovery's Open Source Tool ManagerAI

🛡️ AI Security & Defense 80 tools ▾

Adversarial Robustness Toolbox - AI Security TestingAI

CleverHans - Adversarial Examples LibraryAI

Foolbox - Adversarial Attacks & DefensesAI

TensorFlow Privacy - Differential Privacy MLAI

Opacus - Differential Privacy for PyTorchAI

Presidio - Data Protection & AnonymizationAI

ML Model Watermarking - Model ProtectionAI

Captum - Model Interpretability for PyTorchAI

SHAP - Explainable AIAI

LIME - Local Interpretable Model-Agnostic ExplanationsAI

InterpretML - Machine Learning InterpretabilityAI

Responsible AI Toolbox - AI Fairness & ReliabilityAI

AIX360 - Interpretability & Explainability ToolkitAI

AIF360 - AI Fairness 360 ToolkitAI

Fairlearn - Fairness in Machine LearningAI

ML Fairness Gym - Fairness in ML SystemsAI

Fairness Indicators - Fairness EvaluationAI

LiFT - LinkedIn Fairness ToolkitAI

Aequitas - Bias & Fairness Audit ToolkitAI

Themis - Fairness-Aware Machine LearningAI

Fairness Comparison - Fairness Algorithms ComparisonAI

Responsible AI Widgets - Interactive ML WidgetsAI

DiCE - Diverse Counterfactual ExplanationsAI

CARLA - Counterfactual & Recourse LibraryAI

TensorFlow Model Analysis - Model EvaluationAI

TensorFlow Data Validation - Data ValidationAI

TensorFlow Transform - Data PreprocessingAI

TensorFlow Serving - ML Model ServingAI

Kubeflow - ML Workflows on KubernetesAI

MLflow - ML Lifecycle ManagementAI

Weights & Biases - ML Experiment TrackingAI

Neptune - ML Experiment ManagementAI

ClearML - ML/DL Development & Production SuiteAI

Polyaxon - ML Platform for Reproducible ExperimentsAI

Determined - Deep Learning Training PlatformAI

FloydHub - Cloud Platform for Deep LearningAI

Comet ML - ML Experiment TrackingAI

Guild AI - Experiment Tracking for MLAI

NNI - Neural Network IntelligenceAI

Optuna - Hyperparameter OptimizationAI

Hyperopt - Distributed Asynchronous Hyperparameter OptimizationAI

Ray Tune - Scalable Hyperparameter TuningAI

Auto-sklearn - Automated Machine LearningAI

FLAML - Fast & Lightweight AutoMLAI

SMAC3 - Sequential Model-based Algorithm ConfigurationAI

ConfigSpace - Configuration Space for Hyperparameter OptimizationAI

HpBandSter - Hyperparameter Optimization LibraryAI

Ax - Adaptive Experimentation PlatformAI

BoTorch - Bayesian Optimization in PyTorchAI

GPflow - Gaussian Processes in TensorFlowAI

GPyTorch - Gaussian Processes in PyTorchAI

GPy - Gaussian Processes FrameworkAI

Scikit-Optimize - Sequential Model-Based OptimizationAI

Bayesian Optimization - Global OptimizationAI

Pyro - Deep Universal Probabilistic ProgrammingAI

TensorFlow Probability - Probabilistic ReasoningAI

PyMC - Probabilistic ProgrammingAI

Stan - Statistical Modeling & ComputationAI

Statsmodels - Statistical ModelingAI

Scikit-learn - ML Library for Security AnalyticsAI

XGBoost - Optimized Gradient BoostingAI

LightGBM - Gradient Boosting FrameworkAI

CatBoost - Gradient Boosting on Decision TreesAI

H2O.ai - Open Source ML PlatformAI

Weka - Machine Learning WorkbenchAI

RapidMiner - Data Science PlatformAI

KNIME - Analytics PlatformAI

Orange3 - Data Mining & VisualizationAI

Apache Mahout - Scalable ML AlgorithmsAI

Apache SystemML - Large-Scale MLAI

Apache Spark - Big Data ML for SecurityAI

Ray - Distributed AI & ML FrameworkAI

Dask - Parallel Computing for MLAI

Horovod - Distributed Deep LearningAI

Deeplearning4j - Deep Learning for JavaAI

Awesome Production ML - Production ML ResourcesAI

Applied ML - Real-World ML ApplicationsAI

ML Systems Design - System Design for MLAI

Awesome MLOps - ML Operations ResourcesAI

Awesome MLOps - MLOps Tools & PracticesAI

🧠 Machine Learning Security 200+ Tools

🎭 AI Social Engineering & Deepfakes 60 tools ▾

FaceSwap - Deepfake Creation & DetectionAI

DeepFaceLab - Leading Deepfake SoftwareAI

First Order Motion Model - Video SynthesisAI

StyleGAN3 - High-Quality Face GenerationAI

StyleGAN2 - Realistic Face GenerationAI

FaceForensics++ - Deepfake Detection DatasetAI

DFDC Challenge - Deepfake DetectionAI

Fake News Detector - AI-Powered News VerificationAI

DialoGPT - Conversational AIAI

GPT-2 - Text Generation ModelAI

Transformers - Pre-trained Language ModelsAI

Fairseq - Sequence-to-Sequence ToolkitAI

BERT - Bidirectional Encoder RepresentationsAI

AllenNLP - Natural Language ProcessingAI

spaCy - Industrial-Strength NLPAI

NLTK - Natural Language ToolkitAI

Gensim - Topic Modeling & Document SimilarityAI

FastText - Efficient Text ClassificationAI

Stanza - Stanford NLP ToolkitAI

Flair - State-of-the-Art NLPAI

Coqui TTS - Text-to-Speech SynthesisAI

Mozilla TTS - Deep Learning Text-to-SpeechAI

ESPnet - End-to-End Speech ProcessingAI

TorchAudio - Audio Processing for PyTorchAI

Librosa - Audio & Music AnalysisAI

PyDub - Audio ManipulationAI

Real-Time Voice Cloning - Voice SynthesisAI

Resemblyzer - Speaker RecognitionAI

Mimic3 - Neural Text-to-SpeechAI

Tortoise TTS - Multi-Voice Text-to-SpeechAI

VITS - Conditional Variational AutoencoderAI

Tacotron2 - Natural TTS SynthesisAI

WaveGlow - Flow-based Generative NetworkAI

HiFi-GAN - High Fidelity Neural VocoderAI

MelGAN - Generative Adversarial NetworkAI

ParallelWaveGAN - Fast Waveform GenerationAI

WaveNet Vocoder - Neural Audio SynthesisAI

Tacotron - End-to-End Speech SynthesisAI

DeepSpeech - Speech-to-Text EngineAI

Whisper - Robust Speech RecognitionAI

SpeechBrain - Speech Processing ToolkitAI

Kaldi - Speech Recognition ToolkitAI

wav2letter++ - Speech Recognition SystemAI

Lingvo - Neural Network FrameworkAI

ESPnet - End-to-End Speech ProcessingAI

Coqui TTS - Text-to-Speech SynthesisAI

🔒 Privacy-Preserving ML 60 tools ▾

TensorFlow Privacy - Differential Privacy MLAI

Opacus - Differential Privacy for PyTorchAI

Google Differential Privacy - DP LibraryAI

SmartNoise - Differential Privacy PlatformAI

TensorFlow Federated - Federated LearningAI

FATE - Federated AI Technology EnablerAI

Flower - Federated Learning FrameworkAI

PySyft - Privacy Preserving MLAI

CrypTen - Secure Multi-Party ComputationAI

TF Encrypted - Privacy Preserving ML in TensorFlowAI

Approximate Homomorphic Encryption - Privacy Preserving ComputationAI

Microsoft SEAL - Homomorphic Encryption LibraryAI

HElib - Homomorphic Encryption LibraryAI

Concrete - Fully Homomorphic Encryption CompilerAI

Google FHE - Fully Homomorphic EncryptionAI

HElib - IBM Homomorphic EncryptionAI

FHEW - Fastest Homomorphic Encryption in the WestAI

TFHE - Fast Fully Homomorphic EncryptionAI

🎯 Reconnaissance & OSINT 150+ Tools

🔍 Information Gathering 50 tools ▾

theHarvester - Email & Domain Intelligence

SpiderFoot - Automated OSINT Collection

Sherlock - Social Media Username Hunter

Social Mapper - Social Media Enumeration

Recon-ng - Web Reconnaissance Framework

Amass - Network Mapping & Asset Discovery

Sublist3r - Subdomain Enumeration Tool

Subfinder - Passive Subdomain Discovery

AssetFinder - Domain & Subdomain Discovery

Findomain - Cross-Platform Subdomain Enumerator

HTTPx - Fast HTTP Probe & Web Server Detection

Aquatone - Visual Domain Reconnaissance

GoWitness - Web Screenshot & Crawling Tool

EyeWitness - Web Application Screenshot Tool

RED HAWK - Information Gathering & Vulnerability Scanner

Infoga - Email OSINT & Information Gathering

DataSploit - OSINT Framework & Automation

reNgine - Automated Reconnaissance Framework

Osmedeus - Fully Automated Reconnaissance Framework

ReconFTW - Automated Reconnaissance Wrapper

Discover - Custom Bash Scripts for Penetration Testing

CredNinja - Credential Validation & OSINT

GasMask - Information Gathering Tool

Chaos - DNS Enumeration Tool

Uncover - Quickly Discover Exposed Hosts

ASNmap - Go CLI & Library for ASN Discovery

mapcidr - Utility Program to Perform Multiple Operations

Cloudlist - Multi-Cloud Tool for Asset Discovery

SubOver - Subdomain Takeover Tool

TKO-Subs - Tool to Check Subdomain Takeovers

Subjack - Subdomain Takeover Tool

Nuclei Templates - Community Nuclei Templates

BBOT - Recursive Internet Scanner

Photon - Incredibly Fast Web Crawler

Hakrawler - Web Crawler for Reconnaissance

Waybackurls - Wayback Machine URL Fetcher

GAU - Get All URLs from Various Sources

Katana - Next-Generation Crawling Framework

FavUp - Lookups for Real IP & Servers of Websites

Bug Bounty Toolz - BBH Tools Collection

BBHT - Bug Bounty Hunting Tools

Can I Take Over XYZ - Subdomain Takeover Guide

Interactsh - Out-of-Band Interaction Tool

CRLFuzz - Fast CRLF Vulnerability Scanner

Proxify - Swiss Army Knife Proxy Tool

Notify - Stream Output of Several Tools

Alterx - Fast & Customizable Subdomain Wordlist Generator

tlsx - Fast & Configurable TLS Grabber

📡 Network Discovery 40 tools ▾

Nmap - Network Discovery & Security Auditing

Masscan - High-Speed Port Scanner

RustScan - Modern Port Scanner

Naabu - Fast Port Scanner

ZMap - Internet-Wide Network Scanner

MassDNS - High-Performance DNS Stub Resolver

DNSx - Fast DNS Toolkit

Amass - In-Depth Attack Surface Mapping

Sudomy - Subdomain Enumeration & Analysis

HTTProbe - HTTP/HTTPS Probe Tool

Dirsearch - Web Path Scanner

FFuF - Fast Web Fuzzer

Gobuster - Directory/File & DNS Busting Tool

Feroxbuster - Fast Content Discovery Tool

shuffleDNS - Wrapper Around MassDNS

puredns - Fast Domain Resolver & Subdomain Bruteforcing

SonarSearch - Rapid7 Sonar DNS Database Search

MassDNS - High-Performance DNS Stub Resolver

ZGrab2 - Application Layer Scanner

ZAnnotate - IP Address Annotation Tool

ZIterate - Network Scanning Iterator

ZTag - Banner Grab & Fingerprint Components

ZLint - X.509 Certificate Linter

Censys Python - Python Library for Censys APIs

BinaryEdge API Client - Python API Client

Shodan Python - Python Library for Shodan

Shodan Seeker - Lightweight Shodan Client

My Shodan Scripts - Collection of Shodan Scripts

Bluto - DNS Recon Tool

dnstwist - Domain Name Permutation Engine

Fierce - DNS Reconnaissance Tool

Subbrute - Subdomain Enumeration Tool

Knock - Subdomain Scan

AltDNS - Subdomain Discovery Tool

CloudFlair - Find Origin Servers of Websites Behind CloudFlare

FavUp - Lookups for Real IP & Servers of Websites

goDNSRecon - Fast DNS Enumeration Tool

Chaos Client - Go Client to Communicate with Chaos DNS API

Uncover - Quickly Discover Exposed Hosts

👁️ Social Engineering & OSINT 60 tools ▾

SET - Social Engineer Toolkit

Evilginx2 - Advanced Phishing Framework

SocialFish - Educational Phishing Tool

Gophish - Open-Source Phishing Toolkit

Seeker - Accurate Geolocation Tracker

NexPhisher - Advanced Phishing Tool

Zphisher - Automated Phishing Tool

BlackEye - Complete Phishing Framework

MaskPhish - URL Masking Tool

FinalRecon - Fast & Simple Python Reconnaissance Tool

Mosint - Email OSINT Tool

Holehe - Email Account Checker

h8mail - Email OSINT & Breach Hunting

WhatsMyName - Username Enumeration Tool

Blackbird - Username OSINT Tool

Maigret - Username Investigation Tool

LittleBrother - Information Gathering Tool

pwnedOrNot - HIBP Lookup Tool

Th3inspector - All-in-One Information Gathering

UhOh365 - Office365 User Enumeration

Oh365UserFinder - Office365 User Discovery

o365recon - Office365 Reconnaissance

MSOLSpray - Microsoft Online Password Spraying

o365spray - Office365 Password Spraying

SprayingToolkit - Password Spraying Scripts

MailSniper - Email Reconnaissance & Attack Tool

SimplyEmail - Email Reconnaissance Tool

HawkScan - Security Tool for Reconnaissance

linkedin2username - LinkedIn Username Generator

Masto - Mastodon OSINT Tool

Twint - Twitter Intelligence Tool

Recon-ng - Web Reconnaissance Framework

SpiderFoot - Automated OSINT Collection

ThreatIngestor - Extract & Aggregate IOCs

Harpoon - CLI Tool for Open Source Intelligence

Awesome OSINT - Curated List of OSINT Resources

OSINT Framework - Collection of OSINT Tools

OSINT Stuff Tool Collection - OSINT Tools

OSINT Collection - List of OSINT Tools

Awesome Malware Analysis - Malware Analysis Resources

Awesome Threat Intelligence - Threat Intel Resources

Awesome Threat Modeling - Threat Modeling Resources

Awesome Honeypots - Honeypot Resources

Awesome Security - Security Resources

Awesome InfoSec - Information Security Resources

Awesome Hacking - Hacking Resources

Awesome Hacking - Collection of Hacking Tools

PayloadsAllTheThings - Web Application Security Payloads

FuzzDB - Attack Pattern & Primitive Database

Sn1per - Automated Pentest Framework

RED HAWK - Information Gathering & Vulnerability Scanner

Infoga - Email OSINT & Information Gathering

DataSploit - OSINT Framework & Automation

reNgine - Automated Reconnaissance Framework

Osmedeus - Fully Automated Reconnaissance Framework

ReconFTW - Automated Reconnaissance Wrapper

Discover - Custom Bash Scripts for Penetration Testing

CredNinja - Credential Validation & OSINT

🌐 Web Application Security 200+ Tools

🕷️ Web Vulnerability Scanners 50 tools ▾

Nikto - Web Server Scanner

WPScan - WordPress Security Scanner

DroopeScan - CMS Security Scanner

Nuclei - Fast Vulnerability Scanner

OWASP ZAP - Web Application Security Scanner

SQLMap - Automatic SQL Injection Tool

Commix - Command Injection Exploiter

XSStrike - Advanced XSS Detection Suite

DalFox - Fast XSS Scanner & Parameter Analysis

Gxss - XSS Parameter Discovery Tool

Findom-XSS - Fast DOM XSS Scanner

Arjun - HTTP Parameter Discovery Suite

ParamMeth - Parameter Discovery Tool

ParamSpider - Parameter Mining Tool

Interactsh - Out-of-Band Interaction Tool

SubJS - JavaScript File Analyzer

LinkFinder - Endpoint Discovery Tool

xnLinkFinder - Advanced Endpoint Discovery

Meg - Fetch URLs & Apply Template

GF - Wrapper for Grep Functionality

Gf-Patterns - Grep Patterns for Bug Bounty

qsreplace - Query String Parameter Replacement

Unfurl - URL Analysis & Manipulation Tool

Anew - Tool for Adding New Lines to Files

Template Creator - Nuclei Template Generator

Fuzzing Templates - Nuclei Fuzzing Templates

Nuclei Templates - Community Nuclei Templates

CVEMap - Navigate CVE Universe

PDTM - ProjectDiscovery's Open Source Tool Manager

SimpleHTTPServer - Go Alternative to Python SimpleHTTPServer

CMSeeK - CMS Detection & Exploitation Suite

WAScan - Web Application Scanner

Arachni - Web Application Security Scanner

w3af - Web Application Attack & Audit Framework

Wfuzz - Web Application Fuzzer

TIDoS Framework - Comprehensive Web Application Audit Framework

Striker - Reconnaissance & Vulnerability Scanner

SecretFinder - Tool to Discover Sensitive Data

Silver - Mass Scan IPs for Vulnerable Services

XAttacker - Website Vulnerability Scanner & Auto Exploiter

WAFNinja - Penetration Testing Tool to Bypass WAF

VBScan - OWASP VBScan Project

Wig - WebApp Information Gatherer

WhatWaf - Advanced Firewall Detection Tool

identYwaf - Blind WAF Identification Tool

BlindElephant - Web Application Fingerprinter

Panoptic - Search Engine for Shodan

🎯 Web Exploitation Frameworks 40 tools ▾

Metasploit Framework - Penetration Testing Platform

BeEF - Browser Exploitation Framework

PayloadsAllTheThings - Web Application Security Payloads

FuzzDB - Attack Pattern & Primitive Database

Sn1per - Automated Pentest Framework

Gobuster - Directory/File & DNS Busting Tool

Dirsearch - Web Path Scanner

FFuF - Fast Web Fuzzer

Feroxbuster - Fast Content Discovery Tool

Subfinder - Passive Subdomain Discovery

Amass - In-Depth Attack Surface Mapping

Sublist3r - Subdomain Enumeration Tool

Findomain - Cross-Platform Subdomain Enumerator

AssetFinder - Domain & Subdomain Discovery

Photon - Incredibly Fast Web Crawler

Hakrawler - Web Crawler for Reconnaissance

Waybackurls - Wayback Machine URL Fetcher

GAU - Get All URLs from Various Sources

Katana - Next-Generation Crawling Framework

BBOT - Recursive Internet Scanner

FavUp - Lookups for Real IP & Servers of Websites

Bug Bounty Toolz - BBH Tools Collection

BBHT - Bug Bounty Hunting Tools

Can I Take Over XYZ - Subdomain Takeover Guide

SubOver - Subdomain Takeover Tool

TKO-Subs - Tool to Check Subdomain Takeovers

Subjack - Subdomain Takeover Tool

CRLFuzz - Fast CRLF Vulnerability Scanner

Proxify - Swiss Army Knife Proxy Tool

Notify - Stream Output of Several Tools

Alterx - Fast & Customizable Subdomain Wordlist Generator

tlsx - Fast & Configurable TLS Grabber

cdncheck - Utility to Detect CDN Endpoints

AwesomeXSS - Awesome XSS Stuff

Bug Bounty Cheatsheet - List of Bug Bounty Resources

The Bug Hunter's Methodology - Bug Hunting Methodology

Resources for Beginner Bug Bounty Hunters

King of Bug Bounty Tips - Bug Bounty Tips

🔓 Authentication & Session Management 35 tools ▾

Hydra - Network Logon Cracker

Crowbar - Brute Force Tool

Patator - Multi-Purpose Brute-Forcer

Hashcat - Advanced Password Recovery

John the Ripper - Password Cracker

CUPP - Common User Passwords Profiler

Mentalist - Graphical Tool for Custom Wordlist Generation

CeWL - Custom Word List Generator

Probable-Wordlists - Password Lists for Dictionary Attacks

MSOLSpray - Microsoft Online Password Spraying

o365spray - Office365 Password Spraying

SprayingToolkit - Password Spraying Scripts

BruteSpray - Brute-Forcing from Nmap Output

CredNinja - Credential Validation Tool

PCredz - Extract Credentials from Network Captures

LaZagne - Credentials Recovery Project

Rubeus - Kerberos Interaction & Abuse Tool

Impacket - Network Protocol Implementations

krbrelayx - Kerberos Relay Attacks

John the Ripper - Password Cracker

Hashcat Utils - Small Utilities for Advanced Password Cracking

Hob0Rules - Password Cracking Rules for Hashcat

Password Cracking Rules - Collection of Rules

NSA Rules - Password Cracking Rules

Optimised Hashcat Rules - Optimised Rules for Hashcat

Hashcat Rule - Collection of Hashcat Rules

KoreLogic Rules - Password Cracking Rules

Hate Crack - Automated Password Cracking Tool

NPK - Distributed Hash-Cracking Platform

GoCrack - Password Cracking Management Web Application

Hashtopolis - Multi-Hashcat Wrapper

Kraken - Online Hash Cracker

CynosurePrime - Password Spraying Tool

🛡️ WAF Bypass & Evasion 35 tools ▾

Awesome-WAF - Web Application Firewall Resources

bypass-firewalls-by-DNS-history - Firewall Bypass Technique

WAF-bypass-Cheat-Sheet - WAF Bypass Techniques

WAScan - Web Application Scanner with WAF Detection

WhatWaf - Advanced Firewall Detection Tool

identYwaf - Blind WAF Identification Tool

WAFNinja - Penetration Testing Tool to Bypass WAF

XAttacker - Website Vulnerability Scanner & Auto Exploiter

Silver - Mass Scan IPs for Vulnerable Services

Striker - Reconnaissance & Vulnerability Scanner

SecretFinder - Tool to Discover Sensitive Data

Gf-Patterns - Grep Patterns for Bug Bounty

Findom-XSS - Fast DOM XSS Scanner

Gxss - XSS Parameter Discovery Tool

DalFox - Fast XSS Scanner & Parameter Analysis

XSStrike - Advanced XSS Detection Suite

Commix - Command Injection Exploiter

SQLMap - Automatic SQL Injection Tool

Nuclei - Fast Vulnerability Scanner

TIDoS Framework - Comprehensive Web Application Audit Framework

AwesomeXSS - Awesome XSS Stuff

Bug Bounty Cheatsheet - List of Bug Bounty Resources

The Bug Hunter's Methodology - Bug Hunting Methodology

Resources for Beginner Bug Bounty Hunters

PayloadsAllTheThings - Web Application Security Payloads

FuzzDB - Attack Pattern & Primitive Database

HackVault - Web Hacking Arsenal

Fuzz.txt - Potentially Dangerous Files

PHP iFilter Bypass - PHP Filter Bypass Techniques

WAF Bypass Cheat Sheet - WAF Bypass Techniques

Awesome WAF - Everything About Web Application Firewalls

Bypass Firewalls by DNS History - Firewall Bypass

🔍 API Security Testing 40 tools ▾

Kiterunner - Contextual Content Discovery Tool

SecLists - API Wordlists & Payloads

FuzzAPI - REST API Penetration Testing Tool

Astra - REST API Penetration Testing Tool

OWASP API Security - API Security Resources

Automatic API Attack Tool - API Security Testing

vAPI - Vulnerable API for Security Testing

crAPI - Completely Ridiculous API

Pixi - Vulnerable API for Learning

VAmPI - Vulnerable API Made with Flask

Nuclei Templates - API Security Templates

Hacking-APIs - API Penetration Testing Resources

Awesome API Security - API Security Resources

API Security Checklist - Security Guidelines

RESTler - REST API Fuzzing Tool

API-fuzzer - API Endpoint Fuzzing Tool

mitmproxy2swagger - Generate Swagger from Traffic

KeyHacks - API Key Testing & Validation

SecretFinder - Find Sensitive Data in JS Files

TruffleHog - Find Secrets in Git Repositories

TruffleHog - Searches Through Git Repositories for Secrets

detect-secrets - Enterprise Friendly Way of Detecting Secrets

git-secrets - Prevents You from Committing Secrets

Gitleaks - Detect & Prevent Secrets in Git Repos

shhgit - Find GitHub Secrets in Real Time

Gitrob - Reconnaissance Tool for GitHub Organizations

GitHound - Reconnaissance Tool for GitHub Code Search

GitDorker - Tool to Search GitHub for Sensitive Information

GitHub Dorks - Collection of GitHub Dorks

gitGraber - Monitor GitHub to Search & Find Sensitive Data

GitMiner - Tool for Advanced Mining for Content on GitHub

GitGot - Semi-Automated Sensitive Information Assessment

Gittyleaks - Find Sensitive Information for a Git Repo

git-all-secrets - Tool to Capture All the Git Secrets

secrets-patterns-db - Secrets Regex Patterns Database

leaky-repo - Scan a Repo for Secrets

SecretScanner - Find Secrets & Passwords in Container Images

SOPS - Simple & Flexible Tool for Managing Secrets

KICS - Keeping Infrastructure as Code Secure

🔌 Network Security & Infrastructure 90+ Tools

🌐 Network Scanning & Enumeration 30 tools ▾

Nmap - Network Discovery & Security Auditing

Masscan - High-Speed Port Scanner

RustScan - Modern Port Scanner

Naabu - Fast Port Scanner

ZMap - Internet-Wide Network Scanner

ZGrab2 - Application Layer Scanner

MassDNS - High-Performance DNS Stub Resolver

DNSx - Fast DNS Toolkit

Sudomy - Subdomain Enumeration & Analysis

Chaos - DNS Enumeration Tool

EyeWitness - Web Application Screenshot Tool

Aquatone - Visual Domain Reconnaissance

GoWitness - Web Screenshot & Crawling Tool