Repository Index

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

• post-exploitation
• hacking
• backdoor
• stealth

LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)

• rootkit
• lkm-rootkit
• c
• kernel

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

• sudo-exploitation
• abuse-sudo
• ctf
• exploits

Provides a tight integration of the Security component into the Symfony full-stack framework

• php
• symfony
• component
• symfony-component

Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in real-time for logistics or safety, redefining how we navigate our surroundings

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

• wlan
• wpa
• wpa2
• raspberry-pi

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

• security-tools
• monitor
• bugbounty
• security-automation

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

• aws
• adversary-emulation
• purple-team
• mitre-attack

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

• bugbounty
• subdomain-enumeration
• scanner
• enumeration

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

• ai-agents
• ai-security
• bug-bounty
• claude-code

The repository host gives no description.

Reconstruct and validate C/C++ code from compiled programs with AI.

• ai-agent
• autonomous-agent
• binary-analysis
• c-plus-plus

网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

• cve-2017-7921
• cve-2020-25078
• dahua
• dlink

📜 Yet another collection of wordlists

• wordlists
• information
• information-gathering
• password

Daily feed of bad IPs (with blacklist hit scores)

• security
• blacklist
• threats
• iptables

This app makes it extremely easy to build Django powered SPA's (Single Page App) or Mobile apps exposing all registration and authentication related functionality as CBV's (Class Base View) and REST (JSON)

• authentication
• rest
• social-login
• django

Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 45+ vulnerability types, and produces professional reports with compliance mapping.

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

• poc
• vulnerability-scanner
• poc-bomber
• cve

Mobile Edge-Dynamic Unified Security Analysis

• malware
• dynamic-analysis
• frida-snippets
• android-malware

captcha of base64 image string

• captcha
• image-captcha
• audio-captchas
• captcha-generator

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

• payload
• xss
• blind
• php

Striker is an offensive information and vulnerability scanner.

• cloudflare
• information-gathering
• recon
• theharvester