47,133 repositories indexed
25–48 of 54 · Most stars
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
Automated Attack Simulation in the Cloud, complete with detection use cases.
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
An easy-to-use and lightweight API wrapper for Censys APIs.
DDoS attacks over Tor
Model extraction attacks on Machine-Learning-as-a-Service platforms.
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
Attacking MQTT systems with Mosquittos (scalability and load testing utilities for MQTT environments)
Create adversarial attacks against machine learning Windows malware detectors
:hammer: A multiple reverse shell session/client manager via terminal
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses | 500+ Papers | Perception, Cognition, Planning, Interaction, Agentic System
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
A graph reliability toolbox based on PyTorch and PyTorch Geometric (PyG).
brute force SSH public-key authentication
This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.
Google Summer of Code 2012 project, supported by The Honeynet Project organization.