Tools
TREVORspray
blacklanternsecurity/TREVORspray
TREVORspray is a modular password-spraying tool for security testing. It supports Microsoft 365, Okta, ADFS and other services, with threading, proxy rotation, recon and credential validation features.
Topics
Related projects
RustScan20.7kA modern, fast port scanner that can scan all 65,535 ports in seconds and pipe results into Nmap or custom scripts.
bettercap20.3kA portable all-in-one framework for network reconnaissance and man-in-the-middle attacks across WiFi, Bluetooth LE, CAN-bus, HID, and Ethernet.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
DVWA14kDamn Vulnerable Web Application (DVWA) is a deliberately vulnerable PHP and MariaDB web app for practicing common web vulnerabilities at several difficulty levels. It is widely used by security professionals, students and teachers for legal, hands-on security training.
keeweb13kKeeWeb is a free cross-platform password manager that opens and creates KeePass kdbx vaults. It runs as a desktop app or in the browser, and can store credentials locally or in cloud services such as Dropbox, Google Drive and OneDrive.
osmedeus6.6kA security-focused declarative orchestration engine that defines reconnaissance and scanning pipelines in YAML. It supports distributed workers, scheduling, cloud provisioning, and optional agentic LLM steps for penetration testing.