A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
- phone-number
- signal
- tracking
Repository Index
57,637 visible repositories in the index
313–336 of 1,432 · Most stars
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Trying to tame the three-headed dog.
- kerberos
Private front-end for Reddit
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Steamless is a DRM remover of the SteamStub variants. The goal of Steamless is to make a single solution for unpacking all Steam DRM-packed files. Steamless aims to support as many games as possible.
- drm
- steam
- steamstub-drm
- csharp
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
- gau
- wayback-machine
- hacktoberfest
- security
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
- golang
- package-inventory
- supply-chain-security
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
A WiFi security auditing software
- gui
- security
- security-audit
- wifi
Split your file into encrypted fragments so that you don't need to remember a passcode
GRR Rapid Response: remote live forensics for incident response
Tool for partial deblobbing of Intel ME/TXE firmware images
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
- case-management
- cyber-security
- endpoint-security
- information-security
This tool retrieves tokens for all devices connected to Xiaomi cloud and encryption keys for BLE devices.
- xiaomi
- xiaomi-vacuum
- roborock
Unlocker for VMWare macOS
Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/
AI-safe .env files: Schemas for agents, Secrets for humans.
- configuration
- dotenv
- env
- env-vars
Repository of yara rules
This repository contains the scanner component for Greenbone Community Edition.
- openvas
- vulnerability
- vulnerability-scanners
- vulnerability-detection
Execution rails for agents. Equip your AI to work with sensitive enterprise systems. Give agents precise permissions and custom tools that work faster with fewer tokens.