Dumps secrets remotely using a variety of techniques including DCSync (without running code on DC), …

Fast and multi-purpose DNS toolkit from ProjectDiscovery. Resolves domains, performs wildcard filter…

Detects the use of JavaScript libraries with known vulnerabilities. Available as a CLI tool, browser…

Open-source penetration testing framework designed for social engineering attacks. Features phishing…

Exposing phishing kits seen from phishunt.io…

Speedy, massively parallel, modular login brute-forcer. Supports AFP, CVS, FTP, HTTP, IMAP, MS-SQL, …