gray-hat-hacking-tools

UnderBOSS is an advanced Android RAT (Remote Administration Tool) with 80+ commands for penetration testing, device surveillance, hardware control, and security assessment. Features include camera access, location tracking, keylogging, flashlight effects, volume manipulation, SMS/Call control, and persistence mechanisms for authorized activity

Advanced SMTP penetration testing framework featuring AI-driven anomaly detection, 2026 CVE database, multi-threaded brute force, email harvesting, TLS certificate analysis, SPF/DKIM/DMARC validation, and interactive TUI. Gray hat tool for professional security assessments and bug bounty hunting.

GOBLIN TSUNAMI - OSINT framework generating 400+ Google Dorks across Instagram, Threads, Facebook & TikTok. Advanced digital footprint analysis with 25+ tracking categories for cybersecurity professionals, threat intelligence, and ethical reconnaissance operations.

HIKRAVEN - Advanced Hikvision Security Assessment Platform for professional penetration testing. Detects 12+ CVEs including CVE-2021-36260 (CRITICAL), tests default credentials, performs network discovery, and generates professional security reports. For authorized security testing only! 🛡️🔒

secMONSTER performs 150+ security tests including XSS, SQLi, RCE, SSRF, LFI, SSTI, XXE, NoSQL, CMDi, CRLF, open redirect, JWT attacks, OAuth/SAML bypass, cloud metadata (AWS/GCP/Azure), container escape, Kubernetes, WebSocket, HTTP/2, DNS rebinding, QUIC, API/GraphQL, AI prompt injection, Web3/DeFi, and comprehensive vulnerability exploitation

SkullVision is a professional-grade cctv hacking framework with 35+ modules, 800+ activities, and 300+ offensive techniques for penetration testing, vulnerability assessment, CCTV security, and credential testing. FOR AUTHORIZED USE ONLY. Professionals only.

SSLBPS is an Android security research project for analyzing APK structure, manifests, Smali code, certificate trust models, and mobile security controls. Built for educational analysis, defensive research, software auditing, and reverse‑engineering learning. Perfect for understanding app architecture, code review, and secure development practices

ParamScout is an advanced HTTP parameter discovery tool that combines intelligent anomaly detection, passive intelligence gathering from Wayback Machine, CommonCrawl, and OTX, with multi-method support (GET, POST, JSON, XML) to uncover hidden and vulnerable parameters in web applications efficiently and stealthily.

TestCardX is a professional-grade credit card testing & validation framework for payment gateway integration, security auditing, and QA. Features Luhn-valid generation, multi-country BIN database, batch processing, parallel execution, and multiple export formats For authorized testing only.

BGP is a Gateway Protocol client supporting 4‑byte ASN, multiprotocol extensions, route refresh, ADD‑PATH, and exponential backoff reconnection. Delivers JSON logs, thread‑safe output, and automatic dependency installation via Python launcher. Ideal for peering, testing, and monitoring BGP sessions in production or lab environments.

PORT808 - Advanced multi-threaded network security scanner with protocol fingerprinting, vulnerability detection, domain intelligence, TLS/HTTP analysis, and comprehensive reporting. Professional-grade tool for authorized penetration testing and security research with 50+ vulnerability signatures.

NombreHUNT is a production-grade phone OSINT framework with 35+ modules, scanning 250+ social platforms, 8 breach databases, dark web monitoring, geolocation, risk assessment & graph analysis. Features async concurrency, SIM swap detection, Google dorking, and comprehensive digital footprint intelligence for cybersecurity investigations.

ProfileYOKAI is a Python-powered Wattpad OSINT and reconnaissance framework built to collect, analyze, and organize publicly available profile intelligence. It streamlines username investigation, profile discovery, metadata extraction, and structured reporting for authorized security research, digital investigations, and OSINT workflows.

SubOracle is an advanced subdomain intelligence and attack surface reconnaissance framework designed for security researchers and penetration testers. It helps identify digital assets, discover subdomains, analyze external footprints, and improve visibility of an organization's online infrastructure through structured reconnaissance workflow.

THUGSAPI - Advanced Web Reconnaissance & APi-Key Bypassing Tool for professional penetration testing, featuring multi-phase analysis, WAF evasion, subdomain takeover detection, GraphQL introspection, JWT decoding, CORS analysis, and comprehensive secret discovery across 50+ security checks.

UGM-133: Advanced 10-Layer DDoS testing tool for security professionals. Multi-vector attack engine with async architecture, IP spoofing, amplification, WebSocket/SIP floods, and slow-layer attacks. Educational cybersecurity research only. Full OSI layer penetration testing simulation. Python-based.

The PixieDust attack is a groundbreaking WPS (Wi-Fi Protected Setup) vulnerability that can crack a router's PIN in seconds! 😱Cracks WPS PINs in seconds, not hours · Offline Attack: Calculates PINs without sending thousands of requests ·

Zhaeva The Boss - Advanced P2P file transfer system with adaptive flow control, multi-layer encryption (AES-256/SSL/RSA), parallel chunk processing, real-time monitoring, and resume support. Secure, fast, and reliable file sharing over any network. Built for cyber-humanized transfer architecture.

DigitalDart is a cutting-edge cybersecurity reconnaissance tool that validates email existence across 30+ providers using SMTP/HTTP/Headless Browser verification. Features async architecture, Tor/proxy support, cyberpunk TUI/CLI, and bulk scanning for OSINT, pentesting, and security audits.

DRAKORYX is an advanced cybernetic CDN detection tool that reveals hidden infrastructure behind websites. It identifies Cloudflare, CloudFront, Fastly, and Akamai protection, discovers origin IPs, and provides comprehensive network analysis for security professionals and penetration testers.