Andrew Horton

WhatWeb. Next generation web scanner

Android-PIN-Bruteforce. Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

username-anarchy. Username tools for penetration testing

urlcrazy. Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

bing-ip2hosts. bingip2hosts is a Bing.com web scraper that discovers websites by IP address

Stop-tracking-me-on-reddit. Reddit is tracking every out-going link you click. Even if you are not logged in, every news article, image, or website you visit from Reddit is being recorded. Use this extension to block the tracking.

LyricMind. LyricMind is an AI-powered cognitive firewall that analyzes song lyrics to protect against unconscious absorption of harmful content. Using customizable frameworks and LLMs, it detects risky patterns and integrates with music players to trigger protective actions when thresholds are exceeded.

huginn. Create agents that monitor and act on your behalf. Your agents are standing by!

mitm_relay. Hackish way to intercept and modify non-HTTP protocols through Burp & others.

sig-security. 🔐CNCF Special Interest Group on Security -- secure access, policy control, privacy, auditing, explainability and more!

altdns. Generates permutations, alterations and mutations of subdomains and then resolves them

n8n_tools. Tools for n8n

kube-bench. Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

aws-eks-best-practices. PDF version of Amazon EKS Best Practices Guide for Security in Releases

metasploit-framework. Metasploit Framework