₦ł₦J₳ Security
Open in Telegram
🛡️ Ninja Security 🥷 🔧 Hacking tools for educational purposes 💡 Learn ethical hacking & digital defense ⚡️ 99% GitHub-based hacking tools & resources 🚨 Empowering the next generation of cybersecurity experts
Show moreThe country is not specifiedTechnologies & Applications46 392
328
Subscribers
No data24 hours
+27 days
+1230 days
Data loading in progress...
Similar Channels
No data
Any problems? Please refresh the page or contact our support manager.
Tags Cloud
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
September '25
September '25
+5
in 0 channels
August '25
+25
in 1 channels
Get PRO
July '25
+34
in 3 channels
Get PRO
June '25
+52
in 2 channels
Get PRO
May '25
+231
in 4 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 09 September | +1 | |||
| 08 September | 0 | |||
| 07 September | +1 | |||
| 06 September | 0 | |||
| 05 September | +1 | |||
| 04 September | 0 | |||
| 03 September | +1 | |||
| 02 September | +1 | |||
| 01 September | 0 |
Channel Posts
Repost from N/a
Active Directory (AD) Penetration Testing Guide
Full Link: https://github.com/ZishanAdThandar/pentest/blob/main/notes/ActiveDirectory.md
Description: A comprehensive guide covering the methodology, techniques, and tools used for attacking and assessing the security of Microsoft Active Directory environments. This is an excellent educational resource for red teamers, penetration testers, and defenders to understand common AD attack vectors.
Secrets Ninja
Full Link: https://github.com/NikhilPanwar/secrets-ninja
Description: A tool for validating API keys, tokens, and credentials across various online services. This is intended for educational use in security audits and penetration testing to help identify and verify the scope of leaked secrets, emphasizing the importance of proper secret management.
Disclaimer: All tools and resources mentioned above are provided for educational purposes only. They should only be used in ethical security testing environments where you have explicit permission to conduct such activities. Understanding these tools is crucial for building effective defenses.
@NinjaSec
| 2 | Ultimate-RAT-Collection
Full Link: https://github.com/yuankong666/Ultimate-RAT-Collection
Description: A large collection of Remote Access Trojan (RAT) builders and samples. This repository is intended for educational purposes, allowing cybersecurity researchers, analysts, and students to study the code, techniques, and behaviors of various malware families to improve detection and mitigation strategies.
SigFinder
Full Link: https://github.com/mlcsec/SigFinder
Description: A tool designed to identify Windows binaries signed with Authenticode digital signatures issued by an internal Certificate Authority (CA) or domain. This is useful for security professionals enumerating paths in WDAC policies or hunting for internally developed Line-of-Business (LOB) applications during security assessments.
MetaRadar
Full Link: https://github.com/Semper-Viventem/MetaRadar
Description: An application for Bluetooth Low Energy (BLE) monitoring that tracks your environment, discovers devices, maps relationships between them, and visualizes device movements. This tool has educational value for understanding wireless reconnaissance, privacy risks associated with BLE, and proximity tracking.
RemoteTLSCallbackInjection
Full Link: https://github.com/Maldeyyv-Academy/RemoteTLSCallbackInjection
Description: A proof-of-concept demonstrating a code injection technique that uses TLS callbacks to execute a payload in a remote process without spawning any new threads. This method, inspired by Threadless Injection, is for educational purposes to study advanced process injection and evasion techniques used in malware.
GraphStrike
Full Link: https://github.com/RedSiege/GraphStrike
Description: A suite of tools that enables Cobalt Strike's HTTPS Beacon to use the legitimate Microsoft Graph API for command and control (C2) communications. This tool is presented for research and educational purposes to demonstrate how attackers can abuse trusted cloud services to bypass network security controls.
Taranis AI
Full Link: https://github.com/taranis-ai/taranis-ai
Description: An advanced Open-Source Intelligence (OSINT) tool that leverages Artificial Intelligence to automate information gathering and situational analysis. It is designed for security researchers and analysts to educate themselves on the use of AI in processing vast amounts of public data for threat intelligence and investigations.
FuzzTest
Full Link: https://github.com/google/fuzztest
Description: A C++ testing framework from Google for writing and executing fuzz tests, which are property-based tests that explore a program's input space to find bugs. This is an educational resource for developers and security engineers to learn about and implement fuzzing to improve software security and robustness.
Private Bug Hunting Methodology
Full Link: https://github.com/WadQamar10/My-Hunting-Methodology-
Description: A personal repository documenting a security researcher's methodology for hunting bugs in private programs. This serves as an educational guide for aspiring bug bounty hunters, providing insights into effective techniques, tools, and thought processes for finding vulnerabilities.
LOLSpoof
Full Link: https://github.com/itaymigdal/LOLSpoof
Description: An interactive shell program that automatically spoofs the command-line arguments of the process it spawns. This allows a user to execute a command (e.g., a malicious PowerShell script) while making the process creation telemetry appear to be running a benign command (e.g., svchost.exe). For educational research into defense evasion and EDR bypass.
DllShimmer
Full Link: https://github.com/Print3M/DllShimmer
Description: A tool designed to weaponize DLL hijacking easily by helping to identify and exploit vulnerable applications. This is intended for educational purposes to help security professionals and penetration testers understand, demonstrate, and defend against DLL sideloading and hijacking attacks. | 67 |
| 3 | CLZero
A fuzzing project specifically for testing HTTP/1.1 CL.0 Request Smuggling attack vectors.
URL: https://github.com/Moopinger/CLZero
Vulnerability Management & Research
MetaHub
An automated tool for contextualizing and evaluating the impact of security findings (e.g., from AWS, GCP, Azure) for effective vulnerability management.
URL: https://github.com/gabrielsoltz/metahub
SiCat
An advanced exploit search tool to quickly find information about vulnerabilities and exploits from online sources and local repositories.
URL: https://github.com/justakazh/sicat
vulnerable-code-snippets
A collection of dockerized code snippets with various vulnerabilities, suitable for practicing code analysis and security testing at all skill levels.
URL: https://github.com/yeswehack/vulnerable-code-snippets
Miscellaneous & Productivity
Pantheon
A GUI application that displays information about network cameras globally and provides integrated live feeds for non-password-protected cameras (for research purposes).
URL: https://github.com/josh0xA/Pantheon
PoiEx
A VS Code extension for visualizing and exploring Infrastructure as Code (IaC), allowing you to create, share, and sync security notes and findings in real-time.
URL: https://github.com/doyensec/PoiEx
i-am
A multi-modal LLM (Large Language Model) powered agent designed to automatically solve CAPTCHAs.
URL: https://github.com/AashiqRamachandran/i-am
RWCTF6th-RIPTC
An exploit proof-of-concept for the "RIPTC" challenge from the Real World CTF 6th edition, useful for studying advanced exploitation techniques.
URL: https://github.com/N1ghtu/RWCTF6th-RIPTC
cybersecurity-roadmap
A comprehensive skills and career roadmap for cybersecurity professionals, covering various paths and necessary skills.
URL: https://github.com/jassics/cybersecurity-roadmap
Hackers Factory
https://t.me/+UCw7mgu6Njc2NjRh | 64 |
| 4 | Disclaimer & Intended Use
Educational Purpose Only: The following tools and resources are intended for educational purposes, security research, and authorized penetration testing. Always ensure you have explicit permission before testing any system that you do not own. Unauthorized access to computer systems is illegal and unethical.
Injection & Post-Exploitation
MemshellKit
A powerful injection tool designed to generate and inject memory shells (memshells) for various Java-based frameworks (e.g., Tomcat, Spring, WebLogic).
URL: https://github.com/W01fh4cker/MemshellKit
ThievingFox
A post-exploitation tool written in C# that gathers credentials by injecting into processes of popular password managers and Windows utilities, hooking internal functions to extract secrets.
URL: https://github.com/Slowerzs/ThievingFox
MultiDump
A post-exploitation tool written in C for stealthily dumping and extracting LSASS memory to avoid triggering Windows Defender, paired with a Python handler.
URL: https://github.com/Xre0uS/MultiDump
RedTeam-Checker
An automation script to monitor compromised machines over time, checking if backdoors or default credentials are still active for persistence.
URL: https://github.com/Drakiat/RedTeam-Checker
Process & Memory Analysis
proctools
A small Windows toolkit for extracting information and dumping sensitive strings (like passwords) from running processes.
URL: https://github.com/mlcsec/proctools
PipeViewer
A GUI tool that displays details about Windows Named Pipes and their permissions, useful for finding pipes with weak security settings.
URL: https://github.com/cyberark/PipeViewer
Windows Security & Evasion
Disable-Windows-Defender
A PowerShell script designed to disable Windows Defender, bypass User Account Control (UAC), and escalate privileges to SYSTEM.
URL: https://github.com/EvilGreys/Disable-Windows-Defender-
nim-shell
A reverse shell written in the Nim programming language, designed to bypass EDR (Endpoint Detection and Response) and Windows Defender detection.
URL: https://github.com/emrekybs/nim-shell
TPM-Sniffing
A repository focused on Trusted Platform Module (TPM) sniffing and security research.
URL: https://github.com/NoobieDog/TPM-Sniffing
Web Application & API Security
apidetector
A powerful and efficient tool for testing exposed Swagger/OpenAPI documentation endpoints across subdomains, with smart capabilities to detect false-positives.
URL: https://github.com/brinhosa/apidetector
pphack
An advanced scanner designed to identify Client-Side Prototype Pollution vulnerabilities.
URL: https://github.com/edoardottt/pphack
SQLi_Sleeps
A simple script to find SQL injection (SQLi) vulnerabilities by detecting time-based delays (sleeps) in server responses.
URL: https://github.com/HernanRodriguez1/SQLi_Sleeps
http-garden
A collection of composable HTTP servers and proxies with scripts to interact with them, making it easier to find and understand web vulnerabilities.
URL: https://github.com/narfindustries/http-garden
frameless-bitb
A novel Browser-In-The-Browser (BITB) phishing technique that does not use iframes, allowing it to bypass framebusters used by sites like Microsoft.
URL: https://github.com/waelmas/frameless-bitb
Network & Protocol Analysis
PacketSpy
A powerful network packet sniffing tool to capture, analyze traffic, inspect HTTP requests/responses, and view raw payload data.
URL: https://github.com/HalilDeniz/PacketSpy
smugglefuzz
An HTTP/2 based scanner for detecting HTTP Request Smuggling and Downgrade attacks.
URL: https://github.com/Moopinger/smugglefuzz | 51 |
| 5 | Space Frontiers
An AI assistant (using models like Gemini, Kimi, Qwen) to search for answers within specific datasets like PubMed, Wikipedia, Telegram, and Reddit.
https://spacefrontiers.org/
Privacy & Anonymity Tools
Antidetect Tools List
A curated list of resources for web browsing anonymity: anti-detect browsers, CAPTCHA solvers, proxies, and tips.
https://github.com/TheGP/untidetect-tools
Knowledge Management & Workflow
Obsidian OSINT Templates (resistec)
Templates & plugins for Obsidian including entity tracking, properties, best practices, and a sample graph.
https://github.com/resistec/obsidian-osint-templates
#osint #obsidian
Obsidian OSINT Templates (WebBreacher)
Templates to help organize information gathering about a domain or person within Obsidian.
https://github.com/WebBreacher/obsidian-osint-templates/
Creator: twitter.com/WebBreacher
Threat Research with Obsidian
A guide and vault template for SOC analysts using Obsidian for threat research and artifact enrichment.
https://github.com/malleVF/Threat-Research-with-Obsidian-for-SOC-Analysts
#obsidian
Specialized Databases & Lookups
Tail Number Lookup
Free online tool for searching aircraft information by their tail number (manufacturer, owner, engine type, etc.).
https://aerobasegroup.com/tail-number-lookup
#aviation #geoint
OSINTCON
A free online OSINT conference. Registration for the November event is open.
https://osintconference.com/
#osint
Hackers Factory
https://t.me/+UCw7mgu6Njc2NjRh | 82 |
| 6 | Web Data & Information Gathering
WebCapture
A Python tool for extracting sensitive data (emails, phones, links, subdomains) from web pages, plus WHOIS and IP info.
https://github.com/drackyjr/WEBCAPTURE
MASTER OSINT TOOLKIT
A comprehensive Python toolkit featuring Wayback Machine lookup, metadata extraction, username recon, data breach search, and more.
https://github.com/techenthusiast167/Master-OSINT-Toolkit-
Common Crawl
A vast corpus of web crawl data. Use to find old versions of sites by searching the index and downloading page archives.
Search: https://index.commoncrawl.org/
Email & PGP Investigation
Keys.OpenPGP.org
Check if an email is connected to a PGP key, which can then be used to search document archives, leaks, and forums.
https://keys.openpgp.org
OSINTMAILER
A Python tool for email info gathering: Gravatar avatar search, reputation check, GitHub registration, and quick Google dork links.
https://github.com/techenthusiast167/OSINTMAILER-
Creator: x.com/CtPrecious
#socmint
Image, Video & Media Analysis
Detect AI
Deep AI image analysis to find copies online, detect visual anomalies/statistical improbabilities, and identify AI-generated content.
https://detectai.live
Creator: x.com/henkvaness
Filmot
Powerful search engine for YouTube video transcripts, indexing over 1.3 billion transcripts from 1.18 billion videos.
https://filmot.com/
#socmint
TattoDo
A massive global database of tattoos from artists, useful as an additional source for identifying people via their tattoos.
https://www.tattoodo.com/
Geospatial Intelligence (GEOINT)
GeoMastr
A huge database of unique objects (bollards, signs, license plates, etc.) found in road photos from different countries.
https://geomastr.com/
#geoint
FlightMapper
A free online tool for creating quick visualizations of flights between airports.
https://flightmapper.io/
#osint #geoint
flightmapper.net
A service for finding direct flights between two points by moving markers on a map (500 km radius).
https://flightmapper.net/
#geoint
Social & People Search (SOCMINT)
FINRA BrokerCheck
A large database of people and companies related to US financial markets, with names, work addresses, and other details.
https://brokercheck.finra.org/
#finint
GEM
A search engine aggregating ads for second-hand clothing from various platforms worldwide. Useful for identifying people by unique clothing items.
https://gem.app/
The Pika's OSINT ToolBox
A massive collection of resources for searching usernames, emails, phones, images, and data across social, gaming, and corporate platforms.
https://github.com/passthesh3ll/The-Pika-s-OSINT-ToolBox
#osint #socmint
Corporate & Document Research
EC Competition Case Search
Search tool for European Commission competition policy decisions (68,506+ cases) by company name, case number, or title.
https://competition-cases.ec.europa.eu/search
#osint
Filesec
An encyclopedia of file extensions detailing the types of attacks they can be used for and on which platforms.
https://filesec.io/
#cybersecurity
Search Engines & Aggregators
Google OSINT CSEs
A curated list of Google Custom Search Engines for OSINT, covering social media, sanctions, documents, webcams, and more.
https://github.com/paulpogoda/OSINT-CSE
Contributor: t.me/pavelbannikov
Kagi
A privacy-focused search engine that aggregates results from different sources with advanced filters and map search. 100 free searches.
https://kagi.com/
#searchengines
Kagi Translator
A high-quality, customizable online translator supporting 230+ languages and dialects (20,000 characters free, no login).
https://translate.kagi.com/ | 51 |
| 7 | Greetings from @NinjaSec: A Message of Solidarity with Fellow Comrades
From the rubble of Gaza to the refugee camps, from Al-Quds to every corner of occupied Palestine—cyber resistance rises. Not with rifles, but with keyboards. Not with tanks, but with truth.
Meet @OpIsraelTeam —Palestinian hacktivists fighting for liberation in the digital trenches. They expose injustice, break sieges of silence, and turn bytes into bullets for freedom. While the world looks away, they code through darkness: some in bombed neighborhoods, others in exile, all with ancestral fire in their hearts.
As the great Ghassan Kanafani reminds us:
_'They stole our land, so we became the land. They stole our history, so we became the history. They stole our voice, so we became the echo that shatters walls.
🇵🇸 When you scroll, they resist. When you follow, you enlist. @OpIsraelTeam
#FreePalestine #CyberResistance #OpIsraelTeam #DigitalIntifada | 26 |
| 8 | 21. Offensive-OSINT-Tools
Curated repository of essential pentesting/red teaming utilities.
GitHub: [wddadk/Offensive-OSINT-Tools](https://github.com/wddadk/Offensive-OSINT-Tools)
22. Advanced SQL Injection
Resource for mastering SQLi discovery, detection, and exploitation.
GitHub: [shreyaschavhan/advanced-sql-injection-for-awae](https://github.com/shreyaschavhan/advanced-sql-injection-for-awae)
23. BlueToolkit
Bluetooth Classic vulnerability testing framework for pentesting/research.
GitHub: [sgxgsx/BlueToolkit](https://github.com/sgxgsx/BlueToolkit)
24. omnisci3nt
Web recon tool for IP/DNS analysis, subdomain discovery, and DMARC checks.
GitHub: [spyboy-productions/omnisci3nt](https://github.com/spyboy-productions/omnisci3nt)
25. crawl4ai
Web crawler extracting structured data for LLM/AI applications.
GitHub: [unclecode/crawl4ai](https://github.com/unclecode/crawl4ai)
26. GraphSpy
Browser-based AAD/O365 initial access and post-exploitation tool.
GitHub: [RedByte1337/GraphSpy](https://github.com/RedByte1337/GraphSpy)
27. IconJector
Windows Explorer DLL injection via icon dialog abuse.
GitHub: [0xda568/IconJector](https://github.com/0xda568/IconJector)
28. okta-terrify
Exploit toolkit abusing compromised Okta/FIDO2 passwordless endpoints.
GitHub: [CCob/okta-terrify](https://github.com/CCob/okta-terrify)
⚠️ Important Note
All tools listed are for educational and authorized security research purposes only. Unauthorized use against systems without explicit permission is illegal and unethical. Always comply with applicable laws and ethical guidelines.
#HackersFactory #NinjaSec | 64 |
| 9 | 1. HexStrike AI
MCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for pentesting, vulnerability detection, and bug bounty automation.
GitHub: [0x4m4/hexstrike-ai](https://github.com/0x4m4/hexstrike-ai)
2. PHOMBER
OSINT framework for reconnaissance, gathering phone numbers, IPs, domain data, and other public target information.
GitHub: [s41r4j/phomber](https://github.com/s41r4j/phomber)
3. Uscrapper
Web data extraction tool for efficiently collecting personal information from surface/deep web sources.
GitHub: [z0m31en7/Uscrapper](https://github.com/z0m31en7/Uscrapper)
4. nowafpls
Burp Suite plugin bypassing WAFs via strategic junk data insertion.
GitHub: [assetnote/nowafpls](https://github.com/assetnote/nowafpls)
5. SafeLine
Lightweight Nginx-based WAF reverse proxy protecting web apps from common exploits.
GitHub: [chaitin/SafeLine](https://github.com/chaitin/SafeLine)
6. RflDllOb
Reflective DLL injector for Windows process manipulation.
GitHub: [oldboy21/RflDllOb](https://github.com/oldboy21/RflDllOb)
7. SigmaPotato
Windows privilege escalation tool leveraging SeImpersonate (Win8+/Server2012+).
GitHub: [tylerdotrar/SigmaPotato](https://github.com/tylerdotrar/SigmaPotato)
8. Disable-TamperProtection
Tamper Protection disabler for Microsoft Defender via SYSTEM/TrustedInstaller abuse.
GitHub: [AlteredSecurity/Disable-TamperProtection](https://github.com/AlteredSecurity/Disable-TamperProtection)
9. PassiveAggression
Techniques for persistent, undetectable AD footholds post-remediation.
GitHub: [huntandhackett/PassiveAggression](https://github.com/huntandhackett/PassiveAggression)
10. Freeway
WiFi auditing toolkit using Scapy for network security assessments.
GitHub: [FLOCK4H/Freeway](https://github.com/FLOCK4H/Freeway)
11. TotalRecall
Windows 11 Recall feature data extraction utility for activity snapshots.
GitHub: [xaitax/TotalRecall](https://github.com/xaitax/TotalRecall)
12. ChromeKatz
In-memory cookie dumper for Chrome, Edge, and Chromium-based browsers.
GitHub: [Meckazin/ChromeKatz](https://github.com/Meckazin/ChromeKatz)
13. snafflepy
LDAP/SMB tool for discovering domain machines and extracting files.
GitHub: [asmtlab/snafflepy](https://github.com/asmtlab/snafflepy)
14. RWX Injector
Shellcode injection via OneDrive.exe process abuse without RWX memory allocation.
GitHub: [Offensive-Panda/RWX_MEMEORY_HUNT_AND_INJECTION_DV](https://github.com/Offensive-Panda/RWX_MEMEORY_HUNT_AND_INJECTION_DV)
15. k8spider
Kubernetes service discovery via DNS (brute-forcing, AXFR, wildcard analysis).
GitHub: [Esonhugh/k8spider](https://github.com/Esonhugh/k8spider)
16. 403jump
Automated bypass for HTTP 403 Forbidden errors during web app testing.
GitHub: [trap-bytes/403jump](https://github.com/trap-bytes/403jump)
17. XnlReveal
Browser extension revealing hidden elements, reflected params, and Wayback archives.
GitHub: [xnl-h4ck3r/XnlReveal](https://github.com/xnl-h4ck3r/XnlReveal)
18. agentic_security
LLM vulnerability scanner with fuzzing, rule-based agents, and API stress testing.
GitHub: [msoedov/agentic_security](https://github.com/msoedov/agentic_security)
19. PPLSystem
COM secret extraction and injection via NT debugging system control.
GitHub: [Slowerzs/PPLSystem](https://github.com/Slowerzs/PPLSystem)
20. GraphShell
Command-line utility for exploring Microsoft Graph API endpoints.
GitHub: [dazzyddos/GraphShell](https://github.com/dazzyddos/GraphShell) | 56 |
| 10 | 13. ADSpider
URL: https://github.com/DrunkF0x/ADSpider
Monitors Active Directory changes in real time by using replication metadata and Update Sequence Number (USN) to filter current properties of objects, rather than retrieving all objects.
14. IHxExec
URL: https://github.com/CICADA8-Research/IHxExec
A process injection alternative tool, providing new methods for executing code within the context of another process.
15. Havoc-C2-SSRF-poc
URL: https://github.com/chebuya/Havoc-C2-SSRF-poc
An exploit that works by spoofing a demon agent registration and check-ins to open a TCP socket on the teamserver, allowing attackers to leak origin IPs of teamservers and more.
16. FileWatchTower
URL: https://github.com/iomoath/FileWatchTower
A security analysis and file monitoring tool that utilizes Sysmon events to track and analyze file changes for security purposes.
@NinjaSec | 84 |
| 11 | Below is a curated list of open-source cybersecurity and network tools, each with a brief description for educational purposes. These tools cover a range of use cases, from brute-forcing and secret detection to network monitoring and payload encoding.
1. Kraken
URL: https://github.com/jasonxtn/Kraken
A powerful Python-based tool designed to centralize and streamline brute-forcing tasks. Kraken provides a suite of utilities for cybersecurity professionals to efficiently perform brute-force attacks across various protocols and services.
2. Shodan Dorks
URL: https://github.com/nullfuzz-pentest/shodan-dorks
This repository offers a collection ofh Shodan "dorks"—search queries that help find vulnerabilities in internet-connected devices like webcams and routers. It's useful for both beginners and professionals in network security.
3. ByeDPIAndroid (yeDPI for Android)
URL: https://github.com/dovecoteescapee/ByeDPIAndroid
An Android application that runs a local VPN service to bypass Deep Packet Inspection (DPI) and censorship, helping users access restricted content.
4. Entropy
URL: https://github.com/EwenQuim/entropy
A command-line tool that scans your codebase for high-entropy lines, which are often indicative of secrets such as API keys or passwords.
5. Secret Leak Detection Tools
- TruffleHog: https://github.com/trufflesecurity/trufflehog
Scans code repositories for secrets, sensitive data, and credentials.
- Rusty Hog: https://github.com/newrelic/rusty-hog
Detects secrets in source code using multiple scanning engines.
- Detect Secrets: https://github.com/Yelp/detect-secrets
A pluggable and extendable tool for detecting secrets within codebases.
- Gitleaks: https://github.com/gitleaks/gitleaks
Fast, lightweight tool for detecting hardcoded secrets in git repositories.
- Git-Secrets: https://github.com/awslabs/git-secrets
Prevents committing secrets and credentials into git repositories.
- Git-Hound: https://github.com/tillson/git-hound
Hunts for exposed API keys and credentials across GitHub.
- Secretlint: https://github.com/secretlint/secretlint
Linter for detecting secrets in files and preventing leaks.
6. Open Source Web Security Scanners
URL: https://github.com/psiinon/open-source-web-scanners
A comprehensive list of open-source web security scanners available on GitHub and GitLab, ordered by popularity (stars). Useful for discovering tools but does not provide in-depth analysis.
7. SGN (Polymorphic Binary Encoder)
URL: https://github.com/EgeBalci/sgn
A polymorphic binary encoder for offensive security, designed to generate statically undetectabley binary payloads. It uses an additive feedback loop to encode binary instructions, similar to Linear Feedback Shift Registers (LFSR).
8. File-Tunnel
URL: https://github.com/fiddyschmitt/File-Tunnel
A tool that allows tunneling TCP connections through a file, enabling unconventional data transfer methods.
9. Sniffnet
URL: https://github.com/GyulyVGC/sniffnet
A network monitoring tool that helps users easily keep track of their internet traffic, providing insights into network usage.
10. NetAlertX
URL: https://github.com/jokob-sk/NetAlertX
A WiFi/LAN intruder detector that scans for devices connected to your network and alerts you if new or unknown devices are found.
11. RemoteSessionEnum
URL: https://github.com/0xv1n/RemoteSessionEnum
A tool for remotely enumerating sessions using undocumented Windows Station APIs, useful for advanced Windows session management and analysis.
12. Bifrost
URL: https://github.com/its-a-feature/bifrost
An Objective-C library and console application to interact with Heimdal APIs for macOS Kerberos, facilitating Kerberos-related operations on macOS. | 59 |
| 12 | Email2Phonenumber
An OSINT tool that allows you to obtain a target's phone number just by having their email address. It automates the process of discovering phone numbers linked to email accounts, which can be useful for investigators and security professionals.
GitHub: https://github.com/martinvigo/email2phonenumber
OpenSquat
OpenSquat is an open-source cybersecurity tool designed to prevent domain hijacking and phishing threats. It helps organizations monitor and detect domain squatting, typosquatting, and phishing campaigns targeting their brands or domains. Results can be saved in JSON and CSV formats.
GitHub: https://github.com/atenreiro/opensquat
androidqf (Android Quick Forensics)
A forensic tool for quickly collecting evidence from Android devices. Originally developed by Claudio Guarnieri and now maintained by Amnesty Security Lab, androidqf helps investigators identify traces of compromise on Android devices.
GitHub: https://github.com/mvt-project/androidqf
WhatsApp OSINT (Online User Detection)
This tool allows you to monitor how long a person has been online on WhatsApp. It can be used to track online activity patterns for investigative or parental control purposes.
GitHub: https://github.com/jasperan/whatsapp-osint?tab=readme-ov-file
Holehe (Email Investigate Tools)
Holehe is a tool that checks if an email address is used on various websites, helping investigators discover accounts linked to a specific email. It's useful for mapping a target's online presence.
GitHub: https://github.com/megadose/holehe
GhostShell
Description:
GhostShell is an interactive shell that uses Proxychains and Tor to execute commands anonymously. It automatically rotates Tor proxy servers for each command, enhancing operational security and anonymity during investigations. Requires Tor and Proxychains to be installed.
GitHub: https://github.com/jakuta-tech/GhostShell?tab=readme-ov-file
See-SURF
A tool to find parameters potentially vulnerable to SSRF (Server-Side Request Forgery) attacks.
URL: https://github.com/In3tinct/See-SURF
Gandalf LLM Pentester
A pentesting tool focused on prompt injection attacks against large language models (LLMs).
URL: https://github.com/MrMoshkovitz/gandalf-llm-pentester
FuncVul
A tool for function-level vulnerability detection in C/C++ and Python code, helping developers and security researchers identify insecure code.
URL: https://github.com/sajalhalder/FuncVul
Jailbreak LLMs
The largest public dataset of jailbreak prompts for LLM research, useful for studying and improving LLM security.
URL: https://github.com/0xSojalSec/jailbreak_llms
OWASP AI Testing Guide
A comprehensive guide for testing AI applications for security, bias, privacy, and risk, maintained by OWASP.
URL: https://github.com/OWASP/www-project-ai-testing-guide
Hackers Factory
https://t.me/+UCw7mgu6Njc2NjRh | 79 |
| 13 | Kagi Translator
A fast, high-quality online translator supporting over 230 languages and many dialects. It allows customization of translation style, formality, gender preferences, and context. Kagi Translate is privacy-focused and claims higher accuracy than Google Translate or DeepL.
URL: https://translate.kagi.com
Nanonets OCR
A Hugging Face space for advanced text recognition in images and PDFs. Excels at reading tilted, blurred, or otherwise hard-to-read text, making it suitable for heavy OCR tasks.
URL: https://huggingface.co/spaces/MohamedRashad/Nanonets-OCR
Kagi Search
A privacy-focused search engine that aggregates results from multiple sources. Offers advanced search filters, various search types (including map search), and 100 free searchers.
URL: https://kagi.com
SpaceFrontiers
An AI assistant for searching answers within specific datasets. Users can select sources like PubMed, BioMed, Wikipedia, Telegram, Reddit, and more.
URL: https://spacefrontiers.org
FileSec.io
An encyclopedia of file extensions that details the types of attacks and platforms associated with each extension. Demonstrates how almost any file can be malicious.
URL: https://filesec.io
OSINT Custom Search Engines
A collection of Google Custom Search Engines for OSINT, including social search, most wanted and sanctioned lists, statistics, Wikileaks, fact-checks, file sharing, webcam search, and Pastebin.
URL: https://github.com/paulpogoda/OSINT-CSE
The Pika's OSINT ToolBox
A comprehensive OSINT toolkit covering username, email, phone, image, social, chat, gaming, location, corporate, hosting, and data breach investigations.
URL: https://github.com/passthesh3ll/The-Pika-s-OSINT-ToolBox
Awesome-security-hardening
A curated collection of security hardening guides, tools, and resources for improving system and application security.
URL: https://github.com/decalage2/awesome-security-hardening
Top25 SSRF Parameters
A list of parameters commonly vulnerable to SSRF, useful for automated security testing with tools like httpx.
URL: https://github.com/lutfumertceylan/top25-parameter/blob/master/ssrf-parameters.txt
PentestAgent
An AI-powered red team assistant for penetration testing. Integrates with tools like Nmap, Metasploit, FFUF, and SQLMap, allowing natural language interaction.
URL: https://github.com/GH05TCREW/PentestAgent
Meta GraphQL Beautifier
A Burp Suite extension to beautify Meta GraphQL requests for easier reading and analysis, addressing a gap in existing beautifiers.
URL: https://github.com/aditisingh2707/Meta-GraphQL-Beautifier
Top GraphQL Injection Tools
A collection of tools for testing and exploiting GraphQL endpoints:
- inql: https://github.com/doyensec/inql
- graphql-query-builder-formatter-systemtextjson: https://github.com/charlesdevandiere/graphql-query-builder-formatter-systemtextjson
- graphql-parser: https://github.com/graphql-rust/graphql-parser
- Shapeshifter: https://github.com/ffMathy/Shapeshifter
- GraphQLmap: https://github.com/swisskyrepo/GraphQLmap
Awesome-AI-Security
A curated list of AI security tools and resources, including research, frameworks, and practical tools for securing AI systems.
URL: https://github.com/0xSojalSec/Awesome-AI-Security
Black Hat USA 2025 Slides
A repository of slides and materials from Black Hat USA 2025, useful for staying updated on the latest cybersecurity research and trends.
URL: https://github.com/onhexgroup/Conferences/tree/main/BlackHat_USA_2025_Slides
Fuzzuli
A simple tool to quickly check for exposed backup and sensitive files on web servers, helping identify potential data leaks.
URL: https://github.com/musana/fuzzuli
Hackers Factory
https://t.me/+UCw7mgu6Njc2NjRh | 60 |
| 14 | 30. Radare2 Cutter
https://cutter.re/
GUI frontend for Radare2, useful for firmware and binary analysis.
Miscellaneous Specialized Tools
31. IntelMQ
https://github.com/certtools/intelmq
Automated threat intelligence collection and processing.
32. BloodHound
https://github.com/BloodHoundAD/BloodHound
Active Directory attack path visualization tool.
33. DeathStar
https://github.com/byt3bl33d3r/DeathStar
Automated AD exploitation tool integrating Empire.
34. EvilClippy
https://github.com/outflanknl/EvilClippy
Tool to craft malicious MS Office documents with obfuscated macros.
35. SharpShooter
https://github.com/mdsecactivebreach/SharpShooter
Payload generation framework for stealthy delivery.
Hackers Factory
https://t.me/+UCw7mgu6Njc2NjRh | 91 |
| 15 | Physical Red Teaming Tools
1. Pwnagotchi
https://pwnagotchi.ai/
AI-powered Wi-Fi hacking device that learns and improves over time.
2. Hak5 Rubber Ducky
https://hak5.org/products/rubber-ducky
USB keystroke injection tool disguised as a flash drive.
3. LAN Turtle
https://shop.hak5.org/products/lan-turtle
Covert network implant for stealthy remote access and MITM.
4. Bash Bunny
https://hak5.org/products/bash-bunny
Multi-function USB attack platform for physical penetration testing.
5. WiFi Pineapple
https://shop.hak5.org/products/wifi-pineapple
Wireless auditing platform for man-in-the-middle and reconnaissance.
6. Proxmark3
https://proxmark.com/
RFID/NFC research and attack tool for physical access control systems.
7. ChameleonMini
https://github.com/emsec/ChameleonMini
RFID emulator for cloning and testing access cards.
8. Lockpick Tools (e.g., Sparrows)
https://www.sparrowslockpicks.com/
Physical lockpicking tools for bypassing mechanical locks.
9. Flipper Zero
https://flipperzero.one/
Portable multi-tool for pentesters with radio protocols, RFID, and more.
10. USBKill
https://usbkill.com/
USB device that can disable or destroy a computer in physical attacks.
Cloud Red Teaming Tools
11. PowerPwn
https://github.com/ZenitySec/PowerPwn
Azure AD and Microsoft 365 offensive tool for cloud environment exploitation.
12. Gato (GitHub Attack Toolkit)
https://github.com/infosecn1nja/Gato
Tool to enumerate and exploit GitHub organization pipelines and secrets.
13. CloudGoat
https://github.com/RhinoSecurityLabs/cloudgoat
AWS exploitation and red team lab environment.
14. Pacu
https://github.com/RhinoSecurityLabs/pacu
AWS exploitation framework for cloud penetration testing.
15. ScoutSuite
https://github.com/nccgroup/ScoutSuite
Multi-cloud security auditing tool.
16. Pacu
https://github.com/RhinoSecurityLabs/pacu
AWS exploitation framework.
17. CloudSploit
https://cloudsploit.com/
Cloud security and configuration scanner.
18. Kube-hunter
https://github.com/aquasecurity/kube-hunter
Kubernetes cluster vulnerability hunter.
19. Kube-bench
https://github.com/aquasecurity/kube-bench
Checks Kubernetes clusters against CIS benchmarks.
20. Cloud Custodian
https://cloudcustodian.io/
Rules engine for managing cloud security and compliance.
IoT and Embedded Device Tools
21. Binwalk
https://github.com/ReFirmLabs/binwalk
Firmware analysis tool for extracting and analyzing embedded device firmware.
22. Firmware Mod Kit
https://github.com/rampageX/firmware-mod-kit
Toolkit for unpacking, modifying, and repacking firmware images.
23. Radare2
https://rada.re/n/
Open-source reverse engineering framework for binaries and firmware.
24. IoT Inspector
https://iot-inspector.com/
Tool for analyzing network traffic from IoT devices.
25. JTAGulator
https://www.grandideastudio.com/jtagulator/
Hardware tool to identify JTAG interfaces on embedded devices.
26. Bus Pirate
https://dangerousprototypes.com/docs/Bus_Pirate
Universal bus interface for hardware hacking.
27. ChipWhisperer
https://chipwhisperer.io/
Side-channel power analysis tool for embedded devices.
28. Frida
https://frida.re/
Dynamic instrumentation toolkit for reverse engineering and debugging.
29. Ghidra
https://ghidra-sre.org/
NSA-developed reverse engineering framework. | 68 |
| 16 | Blue Team
1. Arkime
https://arkime.com/
Large-scale, open-source packet capture and search tool.
2. GRR Rapid Response
https://github.com/google/grr
Remote live forensics and incident response framework.
3. Velociraptor
https://www.velocidex.com/
Endpoint visibility and digital forensics platform.
4. KAPE
https://www.kroll.com/en/services/cyber-risk/incident-response-litigation-support/kroll-artifact-parser-extractor-kape
Rapid triage and evidence collection tool.
5. CyberChef
https://gchq.github.io/CyberChef/
Web app for encryption, encoding, compression, and data analysis.
6. Plaso (log2timeline)
https://github.com/log2timeline/plaso
Automatic creation of timelines from digital evidence.
7. Chainsaw
https://github.com/countercept/chainsaw
Fast Windows event log forensics.
8. Sigma
https://github.com/SigmaHQ/sigma
Generic signature format for SIEM systems.
9. Arkime
https://arkime.com/
Full packet capture and analysis.
10. SysmonTools
https://github.com/SwiftOnSecurity/sysmon-config
Advanced Sysmon configuration for Windows event monitoring.
11. SysmonView
https://github.com/olafhartong/sysmonview
Visualizes Sysmon logs for easier analysis.
12. DeepBlueCLI
https://github.com/sans-blue-team/DeepBlueCLI
PowerShell module for hunting attacks in Windows event logs.
13. RedHunt OS
https://github.com/redhuntlabs/RedHunt-OS
Blue team and adversary emulation virtual machine.
14. HELK (Hunting ELK)
https://github.com/Cyb3rWard0g/HELK
Threat hunting platform based on ELK stack.
15. Arkime
https://arkime.com/
(Repeated for emphasis) Full packet capture and search.
16. OpenCTI
https://www.opencti.io/
Threat intelligence platform for knowledge management.
17. TheHive
https://thehive-project.org/
Scalable, open-source incident response platform.
18. Cortex
https://www.cortex-platform.org/
Automated analysis and response engine.
19. MISP
https://www.misp-project.org/
Threat intelligence sharing platform.
20. Yeti
https://github.com/yeti-platform/yeti
Platform for threat intelligence and hunting.
Hackers Factory
https://t.me/+UCw7mgu6Njc2NjRh | 47 |
| 17 | 27. PowerMemory
https://github.com/giMini/PowerMemory
Extracts credentials from Windows memory using PowerShell.
28. KeeThief
https://github.com/HarmJ0y/KeeThief
Extracts KeePass secrets from memory.
29. Invoke-CredentialPhisher
https://github.com/ustayready/Invoke-CredentialPhisher
Phishing tool for capturing Windows credentials.
30. SharpSpray
https://github.com/cshell-codes/SharpSpray
Credential spraying tool for Active Directory environments.
31. Ghostpack
https://github.com/GhostPack
Collection of advanced red team tools for Windows.
32. SharpDPAPI
https://github.com/GhostPack/SharpDPAPI
DPAPI data extraction tool for Windows.
33. SharpSecDump
https://github.com/ShutdownRepo/SharpSecDump
Dumps hashes and secrets from Windows machines.
34. Invoke-PSImage
https://github.com/peewpw/Invoke-PSImage
Hides PowerShell scripts in images for stealthy delivery.
35. PowerSharpPack
https://github.com/S3cur3Th1sSh1t/PowerSharpPack
Collection of PowerShell offensive tools.
36. SharpRDP
https://github.com/0xthirteen/SharpRDP
Executes commands via RDP without authentication.
37. SharpWMI
https://github.com/vletoux/SharpWMI
Executes commands and payloads via WMI.
38. SharpHound
https://github.com/BloodHoundAD/SharpHound
(Repeated for emphasis) AD enumeration and attack path mapping.
39. Invoke-ACLPwn
https://github.com/fox-it/Invoke-ACLPwn
Exploits Active Directory ACLs for privilege escalation.
40. Invoke-DCOM
https://github.com/rvrsh3ll/Invoke-DCOM
Executes commands remotely via DCOM.
41. SharpLocker
https://github.com/Flangvik/SharpLocker
Credential theft via Windows Credential Locker.
42. SharpHound
https://github.com/BloodHoundAD/SharpHound
(Again, for completeness) AD enumeration.
43. Invoke-PSInject
https://github.com/EmpireProject/Empire/blob/master/data/module_source/management/Invoke-PSInject.ps1
Injects shellcode into memory using PowerShell.
44. SharpMapExec
https://github.com/byt3bl33d3r/SharpMapExec
.NET port of CrackMapExec for Windows.
45. SharpGPOAbuse
https://github.com/FSecureLABS/SharpGPOAbuse
Abuses GPO for privilege escalation in AD.
46. SharpHound
https://github.com/BloodHoundAD/SharpHound
(Final mention) AD enumeration.
Hackers Factory
https://t.me/+UCw7mgu6Njc2NjRh | 58 |
| 18 | Red Team & Pentesting Tools
1. MailSniper
https://github.com/dafthack/MailSniper
Searches Microsoft Exchange email for sensitive data, credentials, and insider intel.
2. Donut
https://github.com/TheWover/donut
Generates shellcode from .NET assemblies, useful for in-memory execution and payload delivery.
3. LAN Turtle
https://shop.hak5.org/products/lan-turtle
Covert USB device for stealthy remote access, network intelligence gathering, and MITM attacks.
4. DVWA (Damn Vulnerable Web Application)
https://dvwa.co.uk/
A deliberately vulnerable web app for practicing web exploitation and testing skills.
5. Invoke-Obfuscation
https://github.com/danielbohannon/Invoke-Obfuscation
PowerShell obfuscation framework to evade detection and bypass security controls.
6. SharpHound
https://github.com/BloodHoundAD/SharpHound
Data collector for BloodHound, focused on Active Directory enumeration.
7. CredNinja
https://github.com/GoSecure/credninja
Multi-threaded credential validation tool for SMB, RDP, and WinRM.
8. DeathStar
https://github.com/byt3bl33d3r/DeathStar
Automated Active Directory exploitation tool using Empire.
9. EvilClippy
https://github.com/outflanknl/EvilClippy
Manipulates MS Office files for macro and payload obfuscation.
10. Rubeus
https://github.com/GhostPack/Rubeus
Advanced Kerberos abuse toolkit for credential extraction and ticket manipulation.
11. Gcat
https://github.com/byt3bl33d3r/gcat
Fully featured backdoor using Gmail as a C2 channel.
12. Koadic
https://github.com/zerosum0x0/koadic
Windows post-exploitation rootkit with a Metasploit-like interface.
13. Seatbelt
https://github.com/GhostPack/Seatbelt
Security-oriented system information gathering tool for Windows.
14. SharpShooter
https://github.com/mdsecactivebreach/SharpShooter
Payload generation framework for delivering malicious payloads via various formats.
15. FudgeC2
https://github.com/Ziconius/FudgeC2
Command and control framework for post-exploitation.
16. EvilURL
https://github.com/UndeadSec/EvilURL
IDN homograph attack tool for phishing and social engineering.
17. Inceptor
https://github.com/klezVirus/inceptor
Payload generation tool for bypassing EDR and AV.
18. PEASS-ng
https://github.com/carlospolop/PEASS-ng
Privilege escalation tools for Windows and Linux.
19. CrackMapExec (CME)
https://github.com/Porchetta-Industries/CrackMapExec
Swiss Army knife for pentesting Windows networks (often overlooked in favor of Metasploit).
20. SharpUp
https://github.com/GhostPack/SharpUp
Privilege escalation enumeration tool for Windows.
21. Egress-Assess
https://github.com/FortyNorthSecurity/Egress-Assess
Tests egress data exfiltration detection and prevention.
22. SessionGopher
https://github.com/Arvanaghi/SessionGopher
Extracts saved session information for RDP, PuTTY, WinSCP, and more.
23. PowerUpSQL
https://github.com/NetSPI/PowerUpSQL
SQL Server discovery, privilege escalation, and post-exploitation tool.
24. Invoke-Phant0m
https://github.com/hlldz/Invoke-Phant0m
Kills Windows event log processes to evade detection.
25. NetRipper
https://github.com/NytroRST/NetRipper
Injects into processes to sniff plaintext credentials from network traffic.
26. SharpHound
https://github.com/BloodHoundAD/SharpHound
Collects data for BloodHound AD attack path analysis. | 69 |
| 19 | #HackersFactory
https://t.me/HackerFactory
https://t.me/+UCw7mgu6Njc2NjRh | 104 |
| 20 | https://t.me/NinjaSec
https://t.me/CyberBulletin
https://t.me/HackersQuotes | 102 |
