Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
- ai
- bug-bounty
- bugbounty-tools
- security-research
Repository Index
71,235 visible repositories in the index
217–240 of 502 · Most stars
A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
WebAuthn, Simplified. A collection of TypeScript-first libraries for simpler WebAuthn integration. Supports modern browsers, Node, Deno, and more.
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
The repository host gives no description.
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
- authentication
- automatic
- call
- coerce
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
- bash
- exploitation
- exploitation-tool
- hacking
Stateless login-with microservice for OAuth
- oauth
- microservice
Role and Attribute based Access Control for Node.js
- access-control
- abac
- rbac
- roles
Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
- android
- frida
- certificate
- interception
A collection of JavaScript engine CVEs with PoCs
- javascript
- cve
- vulnerability
Next.js SDK for signing in with Auth0
One Time Password (OTP) / 2FA for Node.js and Browser - Supports HOTP, TOTP and Google Authenticator
- hotp
- hmac
- otp
- authenticator
Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml
Encrypt and Decrypt files securely in your browser.
- encryption
- file-encryption
- javascript
- client-side
Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
A JavaScript/TypeScript implementation of the complete Secure Hash Standard (SHA) family (SHA-1, SHA-224/256/384/512, SHA3-224/256/384/512, SHAKE128/256, cSHAKE128/256, and KMAC128/256) with HMAC.
- sha
- sha-1
- sha-2
- sha-3
🐳 The CUTEST visualnovel / galgame forum! Built with Nuxt4, GO Fiber and PostgreSQL. Kun Visual Novel forum 6th generation! 开源, 免费, 零门槛, 最先进的 Galgame 论坛社区!
- forum
- galgame
- jwt
- pinia
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
- penetration-testing
- pentesting
- active-directory
- hacking
Bruteforce attack on Facebook account using python script
- brute-force-attacks
- python
- facebook-account
- facebook-bruteforce
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
WarBerryPi - Tactical Exploitation