Adversary simulation and Red teaming platform with AI
- metasploit-framework
- post-exploitation
- redteam
- cobalt-strike
Repository Index
81,588 visible repositories in the index
337–360 of 2,306 · Most stars
Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
- empire
- c2
- redteam-infrastructure
- hacktoberfest
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange
🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.
- frida
- android
- xposed
- apk
Reverse Engineer's Toolkit
- reverse-engineering
- malware-analysis
- windows
- inno-setup
Cameradar hacks its way into RTSP videosurveillance cameras
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
Allows you to emulate an Android native library, and an experimental iOS emulation
Patch iOS Apps, The Easy Way, Without Jailbreak.
Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET
- openidconnect
- oauth2
- aspnetcore
- dotnet
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
- android
- backdoor
- python
- reverse-shell
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
- python3
- machine-learning
- face-recognition
- social-media
Grab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.
- hacking
- kali-linux
- hack
- termux
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
- phone-number
- signal
- tracking
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Private front-end for Reddit
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
eBPF-based Security Observability and Runtime Enforcement
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
- gau
- wayback-machine
- hacktoberfest
- security
Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
- golang
- package-inventory
- supply-chain-security
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection