:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
- aws
- adversary-emulation
- purple-team
- mitre-attack
Repository Index
79,350 visible repositories in the index
241–264 of 647 · Most stars
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
- ai
- bug-bounty
- bugbounty-tools
- security-research
网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool
- cve-2017-7921
- cve-2020-25078
- dahua
- dlink
An engine to make Tor network your default gateway
- tor
- anonymity
- network
- nipe
Daily feed of bad IPs (with blacklist hit scores)
- security
- blacklist
- threats
- iptables
A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.
- ai
- burp-extensions
- burpsuite
- cybersecurity
The Swiss Army knife for automated Web Application Testing
- golang
- hacking
- bugbounty
- jaeles
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
- bugbounty
- bugbounty-tool
- crawler
- dirscanner
Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 45+ vulnerability types, and produces professional reports with compliance mapping.
A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers
利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点
- poc
- vulnerability-scanner
- poc-bomber
- cve
The best tool for finding one gadget RCE in libc.so.6
- ctf
- pwnable
- pwn
- glibc
Detect Tactics, Techniques & Combat Threats
针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具
- spring
- spring-boot
- spring-vulnerability
- springboot
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
Striker is an offensive information and vulnerability scanner.
- cloudflare
- information-gathering
- recon
- theharvester
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
- active-directory
- powershell
- redteaming
- penetration-testing
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
- bash
- exploitation
- exploitation-tool
- hacking
Laravel Impersonate is a plugin that allows you to authenticate as your users.
- laravel-package
- impersonate
- php
- user-management
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Role and Attribute based Access Control for Node.js
- access-control
- abac
- rbac
- roles
A collection of JavaScript engine CVEs with PoCs
- javascript
- cve
- vulnerability
A tool to abuse Exchange services
- mapi
- exchange
- shells
- pentesting
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
- vault
- kubernetes
- kubernetes-secrets
- golang