The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
The recursive internet scanner for hackers. 🧡
A cross-version Python bytecode decompiler
- decompiler
- python
- bytecode
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
Parsing ELF and DWARF in Python
- debugging
- dwarf
- elf
- elf-binaries
Super timeline all the things
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
macOS (& ios) Artifact Parsing Tool
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
- cybersecurity
- cybersecurity-tools
- incident-response
- security
Enable root SSH on BMW MGU head units (iDrive 7 / ID8 BDC3 / ID8 BCP) over ENET - flash the debug image, enroll, persistent SSH with no B7F8E5 DTC, and a unique per-car key.
- developer-mode
- idrive
- idrive7
- root
SuperGhidra: Autonomous Agent Reverse Engineering, Lock-Free Ghidra Daemon & C++ Recovery Suite
- arm64
- binary-analysis
- decompiler
- disassembler
CLI utility and Python module for analyzing log files and other data.
- log-analysis
- log-parser
- cli
- security
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
A Single Library Parser to extract meta information,static analysis and detect macros within the files.
- malware-analysis
- pdf-parsing
- pe-executable
- office-files