Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.
Volunteer DoS tool via HTML + JS
Made to be user friendly and simple to use - as to maximize the amount of people able to help.
Running the HTML locally on your device will run a DoS attack on Russian and Belarussian websites (gov, mil, banks, propaganda sites), through complete volunteering...
Dismap – Asset discovery and identification tool
Dismap positioning is an asset discovery and identification tool; its characteristic function is to quickly identify Web fingerprint information and locate asset types. Assist the red team to quickly locate the target asset information, and...
It is a tool for reverse engineering 3rd party, closed, binary Android apps. It can decode resources to the nearly original form and rebuild them after making some modifications; it makes possible to debug smali code step by step. Also, it makes working with the app easier because of...
uDork
uDork is a script written in Python that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on.
It does NOT make attacks against any server, it only uses predefined dorks and/or...
Jarbou3 is rat tool with coded in python with C&C which can accept multiple connections from clients
Features
C&C server which can accept multiple clients
builder
Undetectable
Steal chrome passwords
Steal Discord Token
Persistence
download + upload files
...
jwt-hack is a tool for hacking/security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brute force).
Hidden content
proxify
Swiss Army Knife Proxy for rapid deployments. Supports multiple operations such as request/response dump, filtering, and manipulation via DSL language, upstream HTTP/Socks5 proxy. Additionally, a replay utility allows to import the dumped traffic (request/responses with correct domain...
StegoCracker
What is steganography
Steganography is the art of hiding a secret message within a normal message. This is used to transfer some secret message to another person; with this technique, no one else in between will know the secret message you wanted to convey.
This art of hiding...
HawkScan
Security Tool for Reconnaissance and Information Gathering on a website. (python 2.x & 3.x)
This script uses “WafW00f” to detect the WAF in the first step.
This script uses “Sublist3r” to scan subdomains.
This script uses “waybacktool” to check in the waybackmachine.
Features...
What is Spray365?
Spray365 is a password spraying tool that identifies valid credentials for Microsoft accounts (Office 365 / Azure AD). How is Spray365 different from the many other password spraying tools that are already available? Spray365 enables passwords to be sprayed from an “execution...
Security Tool for Reconnaissance and Information Gathering on a website. (python 2.x & 3.x)
This script uses “WafW00f” to detect the WAF in the first step.
This script uses “Sublist3r” to scan subdomains.
This script uses “waybacktool” to check in the waybackmachine.
Features
URL...
HexorBase is a database application designed for administering and auditing multiple database servers simultaneously from a centralized location, it is capable of performing SQL queries and bruteforce attacks against common database servers (MySQL, SQLite, Microsoft SQL Server, Oracle...
BlackDex
BlackDex is an Android unpack tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.
This project supports almost all the Android systems above 5.0, it has a high...
Anubis, a subdomain enumerator, and information gathering tool.
It collates data from a variety of sources to provide one of the most comprehensive tools for subdomain enumeration. It pulls subdomains from public sources, indexed search results, and AnubisDB, a centralized, open API for...
A passive reconnaissance tool for known URLs discovery – it gathers a list of URLs passively using various online sources.
Features
Collect known URLs:
Fetches from AlienVault’s OTX, Common Crawl, URLScan, Github, and the Wayback Machine.
Fetches disallowed paths from...
Obfuscapk – A black-box obfuscation tool for Android apps.
Obfuscapk is a modular Python tool for obfuscating Android apps without needing their source code, since apktool is used to decompile the original apk file and to build a new application, after applying some obfuscation techniques on...
WPrecon (WordPress Recon)
Wprecon (WordPress Recon), is a vulnerability recognition tool in CMS WordPress, 100% developed in Go.
Features
Detection WAF
Fuzzing Backup Files
Fuzzing Passwords
Random User-Agent
Plugin(s) Enumerator
Theme(s) Enumerator
Scripts...
XeroChat— a white label self-hosted PHP script— is a multichannel marketing software, mostly for Facebook messenger marketing. With XeroChat, you can build fully interactive and highly responsive chatbots smoothly and comfortably. The application has a full-featured Ecommerce platform. On the...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.