Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
- active-directory
- powershell
- redteaming
- penetration-testing
Repository Index
87,573 visible repositories in the index
337–360 of 976 · Most stars
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
- bash
- exploitation
- exploitation-tool
- hacking
Web3/Solidity based wargame
Tools for handling firmwares of DJI products, with focus on quadcopters.
- firmware
- dji
- elf
- ambarella
Magical authentication for Rails 3 & 4
- ruby
- rails
- authentication
Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml
Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
- bypass-cloudflare
- bypass-hostname
- bypass-waf
- dnssec
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
- vault
- kubernetes
- kubernetes-secrets
- golang
Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
Handle roles and permissions in your Laravel application
- laratrust
- laravel
- roles
- authorization
🐳 The CUTEST visualnovel / galgame forum! Built with Nuxt4, GO Fiber and PostgreSQL. Kun Visual Novel forum 6th generation! 开源, 免费, 零门槛, 最先进的 Galgame 论坛社区!
- forum
- galgame
- jwt
- pinia
A JavaScript/TypeScript implementation of the complete Secure Hash Standard (SHA) family (SHA-1, SHA-224/256/384/512, SHA3-224/256/384/512, SHAKE128/256, cSHAKE128/256, and KMAC128/256) with HMAC.
- sha
- sha-1
- sha-2
- sha-3
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
Binary Analysis Platform
- binary-analysis
- reverse-engineering
- program-analysis
- static-analysis
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- crack
- zip
- multithread
- attack
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
- penetration-testing
- pentesting
- active-directory
- hacking
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
:cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中
- poc
- exp
- payload
- medusa
dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!
Small tool to capture packets from wlan devices.
- pcap
- wifi-security
- raspberry-pi
- pcapng
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
- blueteam
- active-directory
- activedirectory
- acl
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- fakenet-ng
- traffic-redirection
- malware-analysis
- mandiant-flare
Bruteforce attack on Facebook account using python script
- brute-force-attacks
- python
- facebook-account
- facebook-bruteforce