A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
Repository Index
71,865 visible repositories in the index
289–312 of 1,218 · Most stars
Android Reverse-Engineering Workbench for VS Code
- apktool
- apk-decompiler
- apk-editor
- smali
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
- git-secret
- git
- git-addons
- gpg
Linux enumeration tool for pentesting and CTFs with verbosity levels
- hacking
- pentesting
- privilege-escalation
- linux-enumeration
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
- burpsuite
- intruder
- payloads
- fuzz-lists
Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.
ipsets dynamically updated with firehol's update-ipsets.sh script
- blocklists
- ipset
- ipset-lists
- attacks
A highly specialized reverse-engineering pipeline designed to structurally transplant original Vanilla character models into the EverQuest Online Adventures: Frontiers (PS2) game engine, resolving complex Vector Unit 1 (VU1) shader bugs, Emotion Engine (EE) memory overflows, and PS2 CDVDman hardware faults.
- assets
- eqoa
- eqoa-frontiers
- game
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
- pe-format
- hooking
- pe-dumper
- pe-analyzer
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
🔍 Search anyone's digital footprint across 300+ websites
- digital-footprint
- digital-footprint-lookup
- osint
- osint-framework
iOS/macOS Research Swiss Army Knife
Portable Executable reversing tool with a friendly GUI
- pe-file
- pe-format
- pe-analyzer
- pe-analyzer-gui
My simple Swiss Army knife for http/https troubleshooting and profiling.
- https-troubleshoting
- http-requests
- httptracer
- redirect-urls
Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.
- android
- apk
- frida
- reverse-engineering
Playstation 2 Static Recompiler & Runtime Tool to make native PC ports
- ps2
- recompile
- reverse-engineering
- tool
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
- scanner
- crawler
- information-gathering
- admin-scanner
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
- endpoints
- endpoint-discovery
- bugbounty
- crawler
Deserialization payload generator for a variety of .NET formatters
Advanced vulnerability scanning with Nmap NSE
- vulnerability
- vulnerability-scanners
- vulnerability-detection
- vulnerability-identification