爆破字典
Repository Index
78,351 visible repositories in the index
289–312 of 1,781 · Most stars
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
- android
- backdoor
- python
- reverse-shell
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
- python3
- machine-learning
- face-recognition
- social-media
Grab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.
- hacking
- kali-linux
- hack
- termux
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
- phone-number
- signal
- tracking
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Trying to tame the three-headed dog.
- kerberos
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Steamless is a DRM remover of the SteamStub variants. The goal of Steamless is to make a single solution for unpacking all Steam DRM-packed files. Steamless aims to support as many games as possible.
- drm
- steam
- steamstub-drm
- csharp
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
- gau
- wayback-machine
- hacktoberfest
- security
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
- golang
- package-inventory
- supply-chain-security
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
TranslatedOpen-source SSL certificate management tool; fully automatic certificate application, update, and renewal; wildcard certificate and wildcard domain certificate application; automated certificate deployment to Alibaba Cloud, Tencent Cloud, hosts, Synology, and BaoTa (宝塔); HTTPS certificates, PFX certificates, DER certificates, TLS certificates, nginx certificates with automatic renewal and automatic deployment
- certbot
- letencrypt
- ssl-certificate
- automation
Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.
Tool for partial deblobbing of Intel ME/TXE firmware images
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
Google CTF
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
- case-management
- cyber-security
- endpoint-security
- information-security
Windows Exploit Suggester - Next Generation
Anonymous email forwarding
Phishing Tool & Information Collector
- phishing
- python
- pentesting
- undead
w3af: web application attack and audit framework, the open source web vulnerability scanner.