Repository Index

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

• osint
• social-network
• identification
• socmint

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

• static-analysis
• dynamic-analysis
• mobsf
• android-security

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods

• ddos
• ddos-attacks
• ddos-tool
• attack

Web path scanner

• fuzzer
• fuzzing
• python
• security

The Rogue Access Point Framework

• wifiphisher
• wifi
• rogue
• access-point

An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.

• claude-code
• geoguessr
• geolocation
• osint

Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.

• authentication
• client-credentials
• httpx
• oauth2

Tool for advanced mining for content on Github

• gitminer
• information-gathering-tool
• git-mining-tool

The most complete open-source tool for Twitter intelligence analysis

• osint
• socmint
• socialmedia
• twitter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

• threat-hunting
• purpleteam
• python3
• windows-eventlog

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

:honey_pot: A fake Django admin login screen page.

• python
• django

Extract and aggregate threat intelligence.

• ioc
• indicators-of-compromise
• threatintel
• threat-intelligence

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

:hammer: Manage your website via terminal

• php
• security-tools
• python
• pentest

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

:hammer: A multiple reverse shell session/client manager via terminal

• socket
• python
• ctf
• attack-defense

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

• http2
• race-condition
• race-conditions
• scapy

A medium interaction printer honeypot 🍯

• honeypot
• infosec

Minimal, consistent Python API for building integrations with malware sandboxes.

• sandbox
• malware-analysis
• api-client
• library

High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server

CTF in a box. Minimal setup required. (not production-ready yet)

brute force SSH public-key authentication

• ssh
• penetration-testing
• remote-admin-tool
• ssh-key