w3af: web application attack and audit framework, the open source web vulnerability scanner.
Repository Index
47,133 repositories indexed
265–288 of 1,786 · Most stars
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
- authentication
- client-credentials
- httpx
- oauth2
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
Linux Runtime Security and Forensics using eBPF
The Leading Security Assessment Framework for Android.
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
- messaging
- authentication
- key-management
- identity
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
PyInstaller Extractor
- python
- pyinstaller
- decompile
- reverse-engineering
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
Decompiler from Java bytecode to Java, used in IntelliJ IDEA.
- java
- decompiler
- reverse-engineering
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
- reverse-engineering
- symbolic-execution
- binary-analysis
- program-analysis
A cross-version Python bytecode decompiler
- decompiler
- python
- bytecode
Java bytecode engineering toolkit
- java-bytecode
- java
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
Decrypted content of eqgrp-auction-file.tar.xz
- exploits
- shadowbrokers
- equationgroup
- hacking