80,339 visible repositories in the index
1–24 of 41 · Most stars
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
The Rogue Access Point Framework
People tracker on the Internet: OSINT analysis and research tool by Jose Pino
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
This tool retrieves tokens for all devices connected to Xiaomi cloud and encryption keys for BLE devices.
This patch removes restriction on maximum number of simultaneous NVENC video encoding sessions imposed by Nvidia to consumer-grade GPUs.
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux
A OSINT tool to obtain a target's phone number just by having his email address
Phishing Campaign Toolkit
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
This app makes it extremely easy to build Django powered SPA's (Single Page App) or Mobile apps exposing all registration and authentication related functionality as CBV's (Class Base View) and REST (JSON)
Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
This tool gives information about the phone number that you entered.
The first fruit of the Nüwa tree — an autonomous AI pentest legion (634-team champion, 8h unattended, 1B tokens beat 4.5B). Not just a tool: evolvable by design. Grow your own fruit on the Nüwa Foundation (Create/Language/History).
Analyzing your wechat message history from android
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
Phishing catcher using Certstream
This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.
An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
ThePhish: an automated phishing email analysis tool