47,133 repositories indexed
241–264 of 432 · Most stars
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
Enable root SSH on BMW MGU head units (iDrive 7 / ID8 BDC3 / ID8 BCP) over ENET - flash the debug image, enroll, persistent SSH with no B7F8E5 DTC, and a unique per-car key.
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
🍍Jeff provides the simplest way to manage web sessions in Go.
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
Things we learned from Capture The Flag hacking competitions we participated in.
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
Universal python API to captcha solving services
This is quick session for net/http in golang. This package is perhaps the best implementation of the session mechanism, at least it tries to become one.
Memory acquisition for Linux that makes sense.
Flash Development Tools
Create adversarial attacks against machine learning Windows malware detectors
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
:hammer: A multiple reverse shell session/client manager via terminal
A secure password manager for iOS and Android platforms
:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
This package provides json web token (jwt) middleware for goLang http servers
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
Open Source SIEM (Security Information and Event Management system).
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.