infosectools

The Network Execution Tool

🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

Metlo is an open-source API security platform.

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

⭐ ⭐ Use ML to classify flows and packets as benign or malicious. ⭐ ⭐

A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

Little Bug Bounty & Hacking Tools⚔️

Tool for especially scanning nearby devices and execute a given command on its own system while the target device comes in range.

A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters to share knowledge, collaborate on techniques, and advance the field of threat hunting.

Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

Tools & Resources for Cyber Security Operations

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

Generate tens of thousands of subdomain combinations in a matter of seconds

Nucleimonst3r is a powerful vulnerability scanner that can help Bug Bounty Hunters find low hanging fruit vulnerabilities for known CVEs and exploits but also gather all the technology running behind them for further investigation for a potential target.

Filter and enrich a list of subdomains by level

DPULSE - Tool for complex approach to domain OSINT

CloudSniffer is a powerful tool designed to aid in the discovery of the real IP address of a website protected by Cloudflare. It leverages brute force techniques by testing a list of IP addresses and analyzing the status codes returned by the server to uncover the actual IP address of the target website.