Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
Your Everyday Threat Intelligence
Find web directories without bruteforce
The most complete open-source tool for Twitter intelligence analysis
Awesome Django authorization, without the database
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Analyze the security of any domain by finding all the information possible. Made in python.
Phishing catcher using Certstream
yarGen is a generator for YARA rules
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
DOM fuzzer
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
The repository host gives no description.
Splunk Security Content
- splunk
- detection
- engineering
- responses
Kippo - SSH Honeypot
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
What's in your data? Extract schema, statistics and entities from datasets
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
ICS/SCADA honeypot
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
A tool to analyze multi-byte xor cipher