Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Repository Index
77,852 visible repositories in the index
1–24 of 27 · Most stars
Prevents you from committing secrets and credentials into git repositories
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Linux privilege escalation auditing tool
- exploits
- privilege-escalation-exploits
- kernel-exploitation
- applicable-exploits
A repository with 3 tools for pwn'ing websites with .git repositories available
ipsets dynamically updated with firehol's update-ipsets.sh script
- blocklists
- ipset
- ipset-lists
- attacks
Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
- mitigation
- meltdown
- spectre
- cve-2017-5753
My simple Swiss Army knife for http/https troubleshooting and profiling.
- https-troubleshoting
- http-requests
- httptracer
- redirect-urls
EMBA - The firmware security analyzer
- firmware
- linux
- embedded-linux
- security-tools
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。
- docker-image-builder
- vulnerability
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
- bash
- exploitation
- exploitation-tool
- hacking
obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.
- getssl
- certificate
- ssl-certificate
- acme-server
Java Vulnerability Exploitation Platform
- javasecurity
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
- pentesting
- fuzzing
- bruteforce
- bugbounty
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
- netcat
- ncat
- nc
- port-forwarding
Educational, CTF-styled labs for individuals interested in Memory Forensics
Build a database of libc offsets to simplify exploitation
- pwn
- libc
- offsets
- ctf
Find exploits in local and online databases instantly
- exploits
- metasploit
- nmap
- pentest
The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.
Collaborative Incident Response platform
- forensic
- incident-response
- csirt-tooling
- python
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting