pefile is a Python module to read and work with PE (Portable Executable) files
Repository Index
79,350 visible repositories in the index
289–312 of 647 · Most stars
溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）
Launch a subprocess with environment variables using data from @HashiCorp Consul and Vault.
- golang
- consul
- vault
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
AWSGoat : A Damn Vulnerable AWS Infrastructure
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
- llm-guardrails
- llm-security
- llm-jailbreaks
- llm-scanner
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
Open-source cookie consent manager and GDPR cookie banner for React, Next.js, Vue and JavaScript. Google Consent Mode v2 and IAB TCF.
- cmp
- cookie-banner
- typescript
- ccpa
A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440)
- password-cracking
- machine-learning
- deep-learning
- gan
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
Kubernetes-native security toolkit
- cloud-native
- golang
- kubernetes
- operator
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
- python
- security
- security-vulnerability
- travis
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
To learn common smart contract vulnerabilities using Foundry!
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
Awesome Django authorization, without the database
- python
- django
- permissions
- rules
IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations
- binary-analysis
- decryption
- deobfuscation
- hexrays
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
- netcat
- ncat
- nc
- port-forwarding
Google Dorks | Google helps you to find Vulnerable Websites that Indexed in Google Search Results. Here is the latest collection of Google Dorks. A collection of 13.760 Dorks. Author: Jolanda de Koff
- dorks
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.