Repository Index

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

• python
• security
• man-in-the-middle
• tls

JumpServer is an Open-source Privileged Access Management (PAM) platform with AI-powered capabilities, providing DevOps and IT teams a unified workspace to securely access SSH, RDP, Kubernetes, databases, websites, RemoteApp, VirtualApp, and more.

• python
• ssh-server
• django
• terminal

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

• nginx
• modsecurity
• docker
• security

The recursive internet scanner for hackers. 🧡

• hacking
• neo4j
• osint
• osint-framework

Securely and anonymously share files, host websites, and chat with friends using the Tor network

• tor
• file-sharing
• onionshare
• onion-service

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

• auditing
• security
• ssh

Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function

• security
• python
• aws
• lambda

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

• hacktoberfest
• rdp
• pentest
• honeypot

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

• security-audit
• penetration-testing
• penetration-test
• virtual-hosts

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Easily bring your Python applications online with the world's lightest GUI toolkit.

• web
• gui
• webgpio
• python3

Routopsy - Hacking Routers with Routers

• network
• pentest
• security

Templates to pin Claude and Google Pay to one static residential proxy on Clash Party, Shadowrocket, and FlClash.

Mock an SSH server and define all commands it supports (Python, Twisted)

• mock
• ssh
• python
• hylang

🐳 Dockerized SSH bastion to proxy SSH connections to arbitrary containers.

• kubernetes
• ssh-server
• ssh-tunnel
• gateway

brute force SSH public-key authentication

• ssh
• penetration-testing
• remote-admin-tool
• ssh-key

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

• fuzzing
• network
• ids
• firewall

Continuous Delivery of static websites to IPFS

• ipfs
• continuous-delivery
• python

IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]

• cve
• security
• hacking
• exploit

Open-source Modbus RTU/TCP slave simulator for the LRI AEM-60DC8 industrial DC monitor — 147 holding registers, 8 DC channels, 6 baudrates. SCADA/PLC integration testing without hardware.