SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.
- metasearch
- search
- python
- searxng
Repository Index
61,275 visible repositories in the index
1–24 of 31 · Most stars
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
- osint
- osint-resources
- asdb
- cctv
Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
- decompiler
- vulnerability-scanners
- malware-analysis
- security-audit
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
TranslatedWeChatOpenDevTool: Force-enable developer tools for WeChat mini programs
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
Tool to gather Threat Intelligence indicators from publicly available sources
Python tool for aircraft Doppler audio geolocation using historical ADS-B flight data (Source-available)
- ads-b
- airplane
- doppler-effect
- geolocation
JShell - Get a JavaScript shell with XSS.
AVClass malware labeling tool
Share sensitive info without leaving a trace in your chat logs or email accounts.
Wavestone's web interface for password cracking with hashcat
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
Markov-chains for linguistically-correct password cracking
NTP logger/honeypot
What do we say to JavaScript? Not today! motherfuckingwebsite.com inspired CTF platform.
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.
- wordlist
- wikipedia
- dictionary
- attack