88,573 visible repositories in the index
313–336 of 1,752 · Most stars
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
🔣 A collection of GitHub issue, pull request and security templates
Diaphora, the most advanced Free and Open Source program diffing tool.
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
Digging Deeper....
A Security Tool for Bug Bounty, Pentest and Red Teaming.
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
A Complete Osint Tool :mag:
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
Protect your data against global mass surveillance programs.
Free Windows, Mac and Linux cleaner, scanner, and more.
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
TranslatedKscan is an all-round scanner developed purely in Go, with features such as port scanning, protocol detection, fingerprint recognition, and brute-force cracking. It supports 1,200+ protocols, 10,000+ protocol fingerprints, 20,000+ application fingerprints, and more than 10 brute-force cracking protocols.
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Knock Subdomain Scan
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
State-of-the-art native debugging tools
UNIX-like reverse engineering framework and command-line toolset.