A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
Repository Index
74,860 visible repositories in the index
337–360 of 1,237 · Most stars
⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips
- pentesting
- pentesting-tools
- pentesting-windows
- security
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
- security
- pentesting
- infosec
- exploits
SIMD, SWAR & GPU kernels for strings: search, hashing, sorting, edit distances, UTF-8 segmentation & ciphers for C, C++, CUDA, Python, Rust, Go, Swift, JS, C# & Java 🦖
Laravel Eloquent roles and abilities.
- laravel
- authorization
- eloquent
- php
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
- devise
- rails
- authentication
- api
Open-source AI-powered offensive security harness for automated penetration testing.
- agents
- ai-hacking
- ai-penetration-testing
- ai-pentesting
Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.
- cpe
- cve
- cvss
- exploit-database
Elixir Authentication
- elixir
- jwt
- authentication
- plug
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
- hacking
- penetration-testing
- pentesting-tools
- powershell
🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。
- vulfocus
- docker
- vulnerability-environment
- vulfocus-docker
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
- python
- python-library
- olefile
- malware-analysis
Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors
- file-infector
- bdf
- python
- capstone
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
- forensics
- java
Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.
- adb
- android-device
- android
- android-debug-bridge
👻Stowaway -- Multi-hop Proxy Tool for pentesters
Potentially dangerous files
- list
- web
- vulnerability
- files
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
- ai-pentesting
- autonomous-agents
- bug-bounty
- kali-linux
Open source social sign on PHP Library. HybridAuth goal is to act as an abstract api between your application and various social apis and identities providers such as Facebook, Twitter and Google.
- php
- social-login
- social-networks
Mimikatz implementation in pure Python
Connect any AI model to 1200+ integrations (MCP, CLI, API)
- agent
- agentic-ai
- agentic-workflow
- container