A collection of AWS penetration testing junk
Repository Index
47,133 repositories indexed
361–384 of 991 · Most stars
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
- csrf-protection
- gorilla
- middleware
- golang
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
- android-unpacker
- gdb
- qemu
- reverse-engineering
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
Interactive Delphi Reconstructor
A Laravel 5.8 API Boilerplate to create a ready-to-use REST API in seconds.
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
A static analyzer for PE executables.
- malware
- static
- analysis
- pe
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
AVML - Acquire Volatile Memory for Linux
- rust
- memory-forensics
- linux-security
Laravel Ban simplify blocking and banning Eloquent models.
- laravel
- eloquent
- cog
- trait
Protect against malicious open source packages 🤖
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
A Rust implementation of the Noise Protocol Framework
- cryptography
- crypto
- noise-protocol-framework
- noise-protocol
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).
- cryptography
- rust
- boringssl
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
- steam
- steamguard-cli
- linux-utility
- sda
A server side OAuth2 Bundle for Symfony
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.