Tools
juice-shop
juice-shop/juice-shop
OWASP Juice Shop is a deliberately insecure web application covering the OWASP Top 10 and many real-world flaws. It serves as a training target for security awareness, CTF events and tool testing, and can be run locally via npm, Docker or packaged distributions.
Topics
Related projects
wstg10.3kThe OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.
RustScan20.7kA modern, fast port scanner that can scan all 65,535 ports in seconds and pipe results into Nmap or custom scripts.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
osmedeus6.6kA security-focused declarative orchestration engine that defines reconnaissance and scanning pipelines in YAML. It supports distributed workers, scheduling, cloud provisioning, and optional agentic LLM steps for penetration testing.
NetExec6kA network execution and penetration testing tool for validating credentials and running commands across SMB, WinRM, LDAP and other protocols, maintained by the community as the successor to CrackMapExec.
evil-winrm5.6kEvil-WinRM is a WinRM shell built for hacking and penetration testing. It supports pass-the-hash, Kerberos, in-memory script and assembly loading, file transfer and other post-exploitation conveniences.