A pure Unix shell script ACME client for SSL / TLS certificate automation
- acme
- acme-protocol
- certbot
- shell
Repository Index
55,640 visible repositories in the index
1–24 of 30 · Most stars
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Scripted Local Linux Enumeration & Privilege Escalation Checks
Automated ACME SSL certificate generation for nginx-proxy
Linux privilege escalation auditing tool
- exploits
- privilege-escalation-exploits
- kernel-exploitation
- applicable-exploits
Run GUI applications and desktops in docker and podman containers. Focus on security.
ACME client implemented as a simple shell-script – just add water
- certificate
- signing
- letsencrypt
- acme
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Simple Bash IOC Scanner
Scalpel is an open source data carving tool. It is not being actively maintained.
Password cracking rules and masks for hashcat that I generated from cracked passwords.
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
Scans for accessibility tools backdoors via RDP
A Suricata Docker image.
- suricata
- ids
- nsm
- docker
Script for automating Linux memory capture and analysis
A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
Custom password cracking rules for Hashcat and John the Ripper
- password-cracking
- hashcat
- johntheripper
- jtr
Simplified CA and device cert manager for strongSwan VPN