Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
- agent-skills
- claude-code-skills
- ctf
- security
Repository Index
74,860 visible repositories in the index
361–384 of 1,405 · Most stars
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
The repository host gives no description.
Tool to find metadata and hidden information in the documents.
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
- bugbounty
- security
- sqlinjection
- vulnerability
A powerful and useful hacker dictionary builder for a brute-force attack
- password-generator
- wordlist-generator
- social-engineering-attacks
- password-wordlist
Automatic SSRF fuzzer and exploitation tool
- ssrf
- server-side-request-forgery
- exploitation
- vulnerability
A password manager that supports Bitwarden platform and KeePass (KDBX) files. It autofills your logins, supports passkeys, works offline, and runs a Watchtower that finds leaked and reused passwords and other issues.
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
AllinSSL 是一个集证书申请、管理、部署和监控于一体的SSL证书全生命周期管理工具。AllinSSL is an all-in-one SSL certificate lifecycle management tool that integrates certificate application, management, deployment, and monitoring.
- acme
- go
- ssl
- ssl-certificates
OAuth 2.0 server library for the Go programming language.
- oauth2
- oauth2-server
- go-oauth2
- go-oauth2-server
Blazing fast and correct x86/x64 disassembler, assembler, decoder, encoder for Rust, .NET, Java, Python, Lua
- disassembler
- assembler
- x86
- x64
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
- security
- limit
- ratelimter
- bruteforce
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
- security
- pentesting
- infosec
- exploits
SIMD, SWAR & GPU kernels for strings: search, hashing, sorting, edit distances, UTF-8 segmentation & ciphers for C, C++, CUDA, Python, Rust, Go, Swift, JS, C# & Java 🦖
Generate Objective-C headers from Mach-O files.
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
- security
- python3
- tools
- apk
A `.git` folder disclosure exploit
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
- devise
- rails
- authentication
- api
Six Degrees of Domain Admin
Open-source AI-powered offensive security harness for automated penetration testing.
- agents
- ai-hacking
- ai-penetration-testing
- ai-pentesting
notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)
A DNS meta-query spider that enumerates DNS records, and subdomains.