Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
- devops
- penetration-testing
- vulnerability
- vulnerability-scanners
Repository Index
81,588 visible repositories in the index
241–264 of 2,306 · Most stars
Reproduce DeFi hacked incidents using Foundry.
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens
CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
- theos
- xcode
- reverse-engineering
- ios
A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
Golang gRPC Middlewares: interceptor chaining, auth, logging, retries and more.
- grpc
- golang
- middleware
- generic-functions
A tool for recompiling Xbox 360 games to native executables.
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
- oauth2
- spring-boot
- spring-cloud
- spring-cloud-alibaba
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Light LDAP implementation
- authentication
- ldap
- opaque
- rust
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Web application fuzzer
Autonomous Hacking Agent for Red Team
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
- waf
- fingerprint
- waffit
- web-application-firewall
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
- agent-framework
- ai-agents
- ai-safety
- compliance
the official Rust and C implementations of the BLAKE3 cryptographic hash function
All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.
- hacking
- termux
- cibersecurity
- all-in-one
Reverse engineering WhatsApp Web.
- node
- whatsapp-web
- encryption
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.
An adversarial example library for constructing attacks, building defenses, and benchmarking both
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity