The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
47,133 repositories indexed
289–312 of 991 · Most stars
The Offensive Manual Web Application Penetration Testing Framework.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
NIST Certified SCAP 1.2 toolkit
Hashtopolis - distributed password cracking with Hashcat
Phishing catcher using Certstream
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
CSRF protection middleware for Go.
Automated static analysis tools for binary programs
Remote Desktop Protocol in Twisted Python
An Elixir Authentication System for Plug-based Web Applications
Kippo - SSH Honeypot
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
The best way to build Electron apps with security in mind.
TranslatedBased on an in-depth REA teardown, a high-fidelity recreation of the official Claude desktop UI. Recreates 30 independent React components and 8 hardcore interaction physics algorithms, and comes with a 3000+ line reverse-engineering analysis manual.
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
Robust, modular, and extendable user authentication system
One rule to crack all passwords. or atleast we hope so.
self-hosted tag-based time tracking
detect stegano-hidden data in PNG & BMP
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.