Find web directories without bruteforce
Repository Index
47,133 repositories indexed
97–120 of 341 · Most stars
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Computer Vision library for human-computer interaction. It implements Head Pose and Gaze Direction Estimation Using Convolutional Neural Networks, Skin Detection through Backprojection, Motion Detection and Tracking, Saliency Map.
- convolutional-neural-networks
- motion-tracking
- color-detection
- face-detection
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Analyze the security of any domain by finding all the information possible. Made in python.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
DOM fuzzer
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Splunk Security Content
- splunk
- detection
- engineering
- responses
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
- awesome-list
- binary-analysis
- ghidra
- malware-analysis
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
What's in your data? Extract schema, statistics and entities from datasets
- python
- privacy
- pii
- npi
A tool for quickly evaluating IAM permissions in AWS.
- aws
- iam
- python
- botocore
ICS/SCADA honeypot
- honeypot
- scada
- ics
- python
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
Security Tool to Look For Interesting Files in S3 Buckets
- s3-bucket
- penetration-testing
- bugbounty
- enumeration
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
ThePhish: an automated phishing email analysis tool
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
- security-audit
- penetration-testing
- penetration-test
- virtual-hosts
Coordinate Claude, Codex and Cursor windows with shared tasks, acknowledgements, prechecks, parallel tests, source-bound proofs and independent review. Built-in skills recall lessons, simplify code and forecast work. Track progress, decisions and evidence in a bilingual local dashboard, with MCP plugins. Browse skills and verified security audits.
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
A collection of fascinating and bizarre Censys Search Queries
- censys
- dorks
- queries
- search