Sign in

Repository Index

71,372 visible repositories in the index

Tags: Security
Tags

A repository shows when it has any selected Tag.

Clear Tags
Filters (1)

Filters

Clear all filters

1–24 of 86 · Most stars

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

  • acme
  • acme-client
  • certbot
  • certificate

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

  • information-gathering
  • osint
  • osint-tools
  • open-source-intelligence

Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.

  • osint
  • osint-resources
  • asdb
  • cctv

TranslatedOneForAll is a powerful subdomain collection tool

  • subdomain
  • subdomain-scanner
  • subdomain-enumeration
  • subdomain-bruteforcing

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

  • waf
  • fingerprint
  • waffit
  • web-application-firewall

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more

  • information-gathering
  • osint
  • osint-tools
  • open-source-intelligence

PRAW, an acronym for "Python Reddit API Wrapper", is a python package that allows for simple access to Reddit's API.