A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
- built-at-rc
- age-encryption
Repository Index
78,850 visible repositories in the index
1–24 of 26 · Most stars
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
- gtfobins
- exploit
- privesc
- privilege-escalation
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
- http2
- command-and-control
- c2
- golang
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
- golang
- package-inventory
- supply-chain-security
📦 Make security testing of K8s, Docker, and Containerd easier.
- penetration
- penetration-testing-tools
- kubernetes
- docker
TranslatedKscan is an all-round scanner developed purely in Go, with features such as port scanning, protocol detection, fingerprint recognition, and brute-force cracking. It supports 1,200+ protocols, 10,000+ protocol fingerprints, 20,000+ application fingerprints, and more than 10 brute-force cracking protocols.
- redteam
- scanner
- bruteforce
- brute-force
notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
- ai-agents
- bug-bounty
- cybersecurity
- offensive-security
Quickly discover exposed hosts on the internet using multiple search engines.
- asm
- attack-surface
- bugbounty
- cli
Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
- brute-force-attacks
- bruteforce
- credential-testing
- cybersecurity
Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
- blueteam
- active-directory
- activedirectory
- acl
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
Exploit for CVE-2019-11043
Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
- post-exploitation
- stealth
- linux
- hacking-tool
Ladon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。
- scanner
- portscan
- smbscan
- sshscan
a recon tool that allows searching on URLs that are exposed via shortener services
- recon
- security
- bugbounty
- intelligence
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
Utility that exposes the expiry of TLS certificates as Prometheus metrics
A process monitoring tool that tries to detect exploitation
The repository host gives no description.