• SubDomain Bank

    A subdomain is a subset or subdivision of a main domain within the Domain Name System (DNS) hierarchy. In simpler terms, it’s a way to organize and categorize content or services under a specific section of a website.

  • TCH Hydra

    A free and open source “proof of concept” password cracker tool. THC Hydra is available for Windows, macOS, and Linux and supports protocols such as FTP, SMTP, and HTTP-GET.

  • TCP Dump

    A free and open-source command-line network packet analyzer. Users can specify a particular filter to search for packets that match this description

  • TheHive

    A Scalable, Open Source and Free Security Incident Response Platform. It provides a comprehensive environment for managing and responding to security incidents, offering features such as case management, task tracking, and observables analysis. TheHive is utilized by security teams to streamline incident response processes, enhance collaboration, and improve overall cybersecurity capabilities.

     

  • Threat-composer

    A simple threat modeling tool to help humans to reduce time-to-value when threat modeling.

  • TYK

    Tyk Open Source API Gateway written in Go, supporting REST, GraphQL, TCP and gRPC protocols.

  • W3af

    Web application attack and audit framework, the open source web vulnerability scanner.

  • WeirdAAL

    An AWS attack library. It’s designed to identify security misconfigurations and potential vulnerabilities within an Active Directory infrastructure.

  • WifiPhisher

    A free and open-source rogue access point framework for Wi-Fi security testing. Wifiphisher lets users run man-in-the-middle and web phishing attacks to capture user credentials and spread malware.

  • Xcrawl3r

    A CLI utility to recursively crawl webpages. A command-line interface (CLI) based utility to recursively crawl webpages. It is designed to systematically browse webpages’ URLs and follow links to discover linked webpages’ URLs.

  • xss_vibes

    A modern tool written in Python that automates your xss findings.