OSINT tool for finding profiles by username
- osint
- username
- python
- fast
Repository Index
78,351 visible repositories in the index
313–336 of 958 · Most stars
Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming.
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
- penetration-testing
- pentesting-tool
- reporting
- reporting-tool
A Coverage Explorer for Reverse Engineers
- ida-pro
- idapython
- hexrays
- code-coverage
Phishing Campaign Toolkit
- king-phisher
- python
- phishing
- security
A Python program to scrape secrets from GitHub through usage of a large repository of dorks.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
CTF challenge (mostly pwn) files, scripts etc
CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
- cms
- content-management-system
- cms-framework
- wordpress
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
- attack-range
- attack-simulation
- adversary
- simulation
UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
DeepDiff: Deep Difference and search of any Python object/data. DeepHash: Hash of any object based on its contents. Delta: Use deltas to reconstruct objects by adding deltas together.
- python
- tree
- deep-search
- repetition
MUCH Improved version of the Python Chasing Your Tail Tool to help you determine if you're being followed
Hack the World using Termux
- termux
- hackers
- bash-script
- termux-tool
Powerful framework for rogue access point attack.
- wifipumpkin3
- accesspoint
- security
- mitm
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
- exploit
- exploiting-vulnerabilities
- deserialization
- javadeser
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles
- python
- libnss3
- extract-passwords
- firefox-decrypt
Generates permutations, alterations and mutations of subdomains and then resolves them
Search and browse documents and data; find the people and companies you look for.
- python
- data-search
- graph-database
- journalism
SSRF (Server Side Request Forgery) testing resources
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
各种漏洞poc、Exp的收集或编写
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.