Open Source Security Arsenal

ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

open-code-review Fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

sniffnet Comfortably monitor your network traffic 🕵️‍♂️

mitmproxy An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

caddy Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

cs-video-courses List of Computer Science courses with video lectures.

Awesome-Hacking A collection of various awesome lists for hackers, pentesters and security researchers

the-book-of-secret-knowledge A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Take a list of domains and probe for working HTTP and HTTPS servers

Fetch all the URLs that the Wayback Machine knows about for a domain

Find domains and subdomains related to a given domain

SQL powered operating system instrumentation, monitoring, and analytics.