74,362 visible repositories in the index
265–288 of 1,235 · Most stars
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
An JWT based API for managing users and issuing JWT tokens.
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
A Security Tool for Bug Bounty, Pentest and Red Teaming.
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Digging Deeper....
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
command line management for Google Workspace
Free Windows, Mac and Linux cleaner, scanner, and more.
A simple ruby authentication solution.
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
A JSON Web Token authentication plugin for the Django REST Framework.
Continuously jam all wifi clients/routers
TranslatedKscan is an all-round scanner developed purely in Go, with features such as port scanning, protocol detection, fingerprint recognition, and brute-force cracking. It supports 1,200+ protocols, 10,000+ protocol fingerprints, 20,000+ application fingerprints, and more than 10 brute-force cracking protocols.
A list of AI agents and robots to block.
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
企业级的 Go 语言实战项目：认证和授权系统（带配套课程）
Decrypted content of eqgrp-auction-file.tar.xz
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Your web application for managing personal data.
A tool to dump the login password from the current linux user
OAuth Proxy