An step by step fuzzing tutorial. A GitHub Security Lab initiative
Repository Index
47,133 repositories indexed
49–72 of 92 · Most stars
Network Analysis Tool
Automated NoSQL database enumeration and web application exploitation tool.
Like nmap for mapping wifi networks you're not connected to, plus device tracking
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
Crack password hashes without the fuss :cat2:
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Automated Red Team Infrastructure deployement using Docker
ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军
Generate smart and powerful wordlists
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
A collection of android Exploits and Hacks
:key: Hash type identifier (CLI & lib)
Hacking Toolkit
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Security Auditor Utility for GraphQL APIs
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE
A front-end JavaScript toolkit for creating DNS rebinding attacks.
DNS Rebinding Exploitation Framework
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF