Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
A high performance offensive security tool for reconnaissance and vulnerability scanning
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
- git-secret
- git
- git-addons
- gpg
Tailwind scaffolding for the Laravel framework.
Reverse engineering framework in Python
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.
Git All the Payloads! A collection of web attack payloads.
- payload
- payloads
- xss
- sqli
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
- burpsuite
- intruder
- payloads
- fuzz-lists
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
- hackerone
- bugcrowd
- bug
- bounty
ipsets dynamically updated with firehol's update-ipsets.sh script
- blocklists
- ipset
- ipset-lists
- attacks
Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
- mitigation
- meltdown
- spectre
- cve-2017-5753
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
The Hunting ELK
JavaScript library to zip and unzip files supporting parallel compression, web streams, pluggable compression engines, zip64, split files, data encryption, and deflate64 decompression.
- zip
- javascript
- zip64
- browser
🔍 Search anyone's digital footprint across 300+ websites
- digital-footprint
- digital-footprint-lookup
- osint
- osint-framework
iOS/macOS Research Swiss Army Knife
Portable Executable reversing tool with a friendly GUI
- pe-file
- pe-format
- pe-analyzer
- pe-analyzer-gui
Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
Playstation 2 Static Recompiler & Runtime Tool to make native PC ports