A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Repository Index
47,133 repositories indexed
289–312 of 373 · Most stars
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Words list generator to crack security tokens
Security-hardened MCP server for Docker with read-only defaults, restart deny-lists, and secret redaction
Saídas criativas para chamadas de vídeo no Windows, com processamento local. Instalador e executável único.
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Nosis is a lightweight personal agent runtime: per-session execution boundaries with OS-level sandboxing, computer use, a full built-in toolset, Skill / Plugin / MCP extensions, one runtime shared by GUI and TUI, and file-persisted sessions, plans, and memory.
- agent-framework
- agent-runtime
- agent-skills
- ai-agent
Dependency Combobulator
- security
- secure-coding
- sdlc
- dependency-confusion
Potiron - Normalize, Index and Visualize Network Capture
- tshark
- network-capture
- graph
- pcap
Airut is a system for running Claude Code tasks from email and Slack. It handles workspace provisioning, container isolation, network sandboxing, session persistence, and cleanup — a secure foundation for autonomous agentic development.
A simple fuzzer for the MQTT protocol
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
- python
- pyramid
- flask
- sqlalchemy
Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
- action-proposals
- agentic-ai
- agents
- ai
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
The Security Analyst’s Guide to Suricata
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
Distributed Honeypot
- distributed
- honeypot
- deception
- security