Repository Index

A workshop about Malware Development

• hacktoberfest
• malware
• malware-development
• workshop

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

• cli
• cve
• exploit
• exploit-database

Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.

• pwn
• ctf
• tips

Root shell exploit for several Xiaomi routers: 4A Gigabit, 4A 100M, 4, 4C, 3Gv2, 4Q, miWifi 3C...

• openwrt
• xiaomi
• routers
• firmware

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

• ai-security
• bug-bounty
• claude
• ctf

A framework for secure and scalable network traffic analysis - https://netcap.io

• network
• security
• monitoring
• detection

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

• bugbounty
• burp-extensions
• burpsuite
• bug-bounty

Linux Exploit Suggester; based on operating system release number

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

• cve
• security
• hacktoberfest
• vulnerabilities

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

• libtomcrypt
• cryptography
• c
• encryption

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

• hacking
• hacking-tool
• web-delivery
• metasploit

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

• python3
• tui
• data
• recovery

safely install npm packages by auditing them pre-install stage

• npm
• package-manager
• security-audit
• command-line-tool

jSQL Injection is a Java application for automatic SQL database injection.

• java
• sql-injection
• ctf-tools
• spring-boot

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

• hacktoberfest
• rdp
• pentest
• honeypot

like ~~grep~~ UBER, but for binaries

• grep
• binary
• objdump
• elf

ODAT: Oracle Database Attacking Tool

• oracle-database
• pentest-tool
• pentest
• privilege-escalation

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

• casbin
• python
• pycasbin
• access-control

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

• cisa-kev
• claude-ai
• cve
• cybersecurity

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

• azure
• defender-for-endpoint
• dfir
• kql

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

• vulnerability-scanner
• vulnerability-detection
• vulnerability-exploit
• vulnerability-assessment

A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.