API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
- osint
- social-media
- analyzer
- username
Repository Index
47,133 repositories indexed
1–19 of 19 · Most stars
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
Strategies to Gekko trading bot with backtests results and some useful tools.
- gekko
- strategies
- gekko-strategies
- gekko-backtest
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
DNS Rebinding Exploitation Framework
Hashcat web interface
- hashcat
- cracking
- analytics
- pentesting
Follow stolen crypto hop by hop across Bitcoin, Ethereum, TRON, BNB Chain and Solana. Labels where the money landed, keeps proof for every clue, writes the report.
🤖 Repeat tests. Repeat tests. Repeat tests.
- testing
- test
- test-automation
- data-driven
Creates a readable stream producing cryptographically strong pseudo-random data using `crypto.randomBytes()`
- random-bytes
- random
- crypto
- pseudo-random-generator
Phalcon Mooc an example API + Front End with automated tests
- phalcon
- php
- framework
- mooc
Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.
AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.
- ai-agents
- ai-code-review
- authorization
- bola
🔌 OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.