StarBoard

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

Free domain registration and practical DNS learning resources for everyone.

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

Ghidra is a software reverse engineering (SRE) framework

Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)

A GUI client for Windows, Linux and macOS, support Xray and sing-box and others

A multi-platform proxy client based on ClashMeta,simple and easy to use, open-source and ad-free.

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A V2Ray client for Android, support Xray core and v2fly core

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Comfortably monitor your network traffic 🕵️‍♂️

The universal proxy platform

Network-wide ads & trackers blocking DNS server

A platform for building proxies to bypass network restrictions.

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Hunt down social media accounts by username across social networks

ALL IN ONE Hacking Tool For Hackers

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

A pure Unix shell script ACME client for SSL / TLS certificate automation

Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.

Easily and securely send things from one computer to another :crocodile: :package:

Metasploit Framework

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Open Source Identity and Access Management For Modern Applications and Services

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

A simple Python Pydantic model for Honkai: Star Rail parsed data from the Mihomo API.

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Free domain registration and practical DNS learning resources for everyone.

A multi-platform proxy client based on ClashMeta,simple and easy to use, open-source and ad-free.

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

A GUI client for Windows, Linux and macOS, support Xray and sing-box and others

Ghidra is a software reverse engineering (SRE) framework

Hunt down social media accounts by username across social networks

Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)

A V2Ray client for Android, support Xray core and v2fly core

The universal proxy platform

The easiest, most secure way to use WireGuard and 2FA.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

A simple Python Pydantic model for Honkai: Star Rail parsed data from the Mihomo API.

ALL IN ONE Hacking Tool For Hackers

Network-wide ads & trackers blocking DNS server

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

An open source, self-hosted implementation of the Tailscale control server

Open Source Identity and Access Management For Modern Applications and Services

Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.

Comfortably monitor your network traffic 🕵️‍♂️

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

翻墙、免费翻墙、免费科学上网、免费节点、免费梯子、免费ss/v2ray/trojan节点、蓝灯、谷歌商店、翻墙梯子

翻墙-科学上网

Easily and securely send things from one computer to another :crocodile: :package:

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Updated list of public BitTorrent trackers

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

A pure Unix shell script ACME client for SSL / TLS certificate automation

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

Metasploit Framework

Automatic SQL injection and database takeover tool

🕵️‍♂️ All-in-one OSINT tool for analysing any website

A black hole for Internet advertisements

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features

A platform for building proxies to bypass network restrictions.

autonomous red teaming platform; multi-agent offensive-security meta-harness

A shadowsocks client for Android

A tool for secrets management, encryption as a service, and privileged access management

A platform for building proxies to bypass network restrictions.

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Free domain registration and practical DNS learning resources for everyone.

A multi-platform proxy client based on ClashMeta,simple and easy to use, open-source and ad-free.

A GUI client for Windows, Linux and macOS, support Xray and sing-box and others

Ghidra is a software reverse engineering (SRE) framework

Hunt down social media accounts by username across social networks

Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)

A V2Ray client for Android, support Xray core and v2fly core

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The easiest, most secure way to use WireGuard and 2FA.

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

The universal proxy platform

A simple Python Pydantic model for Honkai: Star Rail parsed data from the Mihomo API.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

ALL IN ONE Hacking Tool For Hackers

An open source, self-hosted implementation of the Tailscale control server

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

翻墙-科学上网

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

翻墙、免费翻墙、免费科学上网、免费节点、免费梯子、免费ss/v2ray/trojan节点、蓝灯、谷歌商店、翻墙梯子

Open Source Identity and Access Management For Modern Applications and Services

Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Comfortably monitor your network traffic 🕵️‍♂️

Network-wide ads & trackers blocking DNS server

A black hole for Internet advertisements

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

autonomous red teaming platform; multi-agent offensive-security meta-harness

Updated list of public BitTorrent trackers

Easily and securely send things from one computer to another :crocodile: :package:

A pure Unix shell script ACME client for SSL / TLS certificate automation

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features

Automatic SQL injection and database takeover tool

🕵️‍♂️ All-in-one OSINT tool for analysing any website

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

A platform for building proxies to bypass network restrictions.

A tool for secrets management, encryption as a service, and privileged access management

Metasploit Framework

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

A shadowsocks client for Android

Netty project - an event-driven asynchronous network application framework

A platform for building proxies to bypass network restrictions.

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

A multi-platform proxy client based on ClashMeta,simple and easy to use, open-source and ad-free.

Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)

The universal proxy platform

The easiest, most secure way to use WireGuard and 2FA.

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

A simple Python Pydantic model for Honkai: Star Rail parsed data from the Mihomo API.

Ghidra is a software reverse engineering (SRE) framework

autonomous red teaming platform; multi-agent offensive-security meta-harness

A V2Ray client for Android, support Xray core and v2fly core

A GUI client for Windows, Linux and macOS, support Xray and sing-box and others

Free domain registration and practical DNS learning resources for everyone.

Network-wide ads & trackers blocking DNS server

Hunt down social media accounts by username across social networks

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Open Source Identity and Access Management For Modern Applications and Services

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

An open source, self-hosted implementation of the Tailscale control server

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.

Comfortably monitor your network traffic 🕵️‍♂️

ALL IN ONE Hacking Tool For Hackers

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

翻墙、免费翻墙、免费科学上网、免费节点、免费梯子、免费ss/v2ray/trojan节点、蓝灯、谷歌商店、翻墙梯子

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Easily and securely send things from one computer to another :crocodile: :package:

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

翻墙-科学上网

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Automatic SQL injection and database takeover tool

Metasploit Framework

A pure Unix shell script ACME client for SSL / TLS certificate automation

Updated list of public BitTorrent trackers

A platform for building proxies to bypass network restrictions.

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

A black hole for Internet advertisements

A tool for secrets management, encryption as a service, and privileged access management

A shadowsocks client for Android

A platform for building proxies to bypass network restrictions.

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

A multi-platform proxy client based on ClashMeta,simple and easy to use, open-source and ad-free.

autonomous red teaming platform; multi-agent offensive-security meta-harness

Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)

Ghidra is a software reverse engineering (SRE) framework

The easiest, most secure way to use WireGuard and 2FA.

Hunt down social media accounts by username across social networks

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

A simple Python Pydantic model for Honkai: Star Rail parsed data from the Mihomo API.

The universal proxy platform

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

A V2Ray client for Android, support Xray core and v2fly core

Free domain registration and practical DNS learning resources for everyone.

A GUI client for Windows, Linux and macOS, support Xray and sing-box and others

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

An open source, self-hosted implementation of the Tailscale control server

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Open Source Identity and Access Management For Modern Applications and Services

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

翻墙、免费翻墙、免费科学上网、免费节点、免费梯子、免费ss/v2ray/trojan节点、蓝灯、谷歌商店、翻墙梯子

Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.

翻墙-科学上网

Comfortably monitor your network traffic 🕵️‍♂️

Network-wide ads & trackers blocking DNS server

ALL IN ONE Hacking Tool For Hackers

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

🕵️‍♂️ All-in-one OSINT tool for analysing any website

Easily and securely send things from one computer to another :crocodile: :package:

Automatic SQL injection and database takeover tool

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features

A black hole for Internet advertisements

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

A pure Unix shell script ACME client for SSL / TLS certificate automation

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

A platform for building proxies to bypass network restrictions.

Updated list of public BitTorrent trackers

A tool for secrets management, encryption as a service, and privileged access management

Metasploit Framework

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

A shadowsocks client for Android

Netty project - an event-driven asynchronous network application framework

A platform for building proxies to bypass network restrictions.

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

autonomous red teaming platform; multi-agent offensive-security meta-harness