使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。
- docker-image-builder
- vulnerability
Repository Index
83,586 visible repositories in the index
385–408 of 1,076 · Most stars
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
Reconstruct and validate C/C++ code from compiled programs with AI.
- ai-agent
- autonomous-agent
- binary-analysis
- c-plus-plus
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
- ai
- bug-bounty
- bugbounty-tools
- security-research
An evil RAT (Remote Administration Tool) for macOS / OS X.
- rat
- reverse-shell
- macos
- macosx
Powerful android apk editor - aapt/aapt2 independent
- android-reverse-engineering
- apk
- apkeditor
- arsc
网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool
- cve-2017-7921
- cve-2020-25078
- dahua
- dlink
Daily feed of bad IPs (with blacklist hit scores)
- security
- blacklist
- threats
- iptables
drizzleDumper是一款基于内存搜索的Android脱壳工具。
- android
- drizzledumper
- unpack
- memory-hacking
This app makes it extremely easy to build Django powered SPA's (Single Page App) or Mobile apps exposing all registration and authentication related functionality as CBV's (Class Base View) and REST (JSON)
- authentication
- rest
- social-login
- django
A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.
- ai
- burp-extensions
- burpsuite
- cybersecurity
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
- bugbounty
- bugbounty-tool
- crawler
- dirscanner
The Swiss Army knife for automated Web Application Testing
- golang
- hacking
- bugbounty
- jaeles
Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 45+ vulnerability types, and produces professional reports with compliance mapping.
A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers
利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点
- poc
- vulnerability-scanner
- poc-bomber
- cve
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
A checker (site and tool) for CVE-2014-0160
针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具
- spring
- spring-boot
- spring-vulnerability
- springboot
HTTP middleware for Go that facilitates some quick security wins.
- golang
- go
- middleware
- security
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
Striker is an offensive information and vulnerability scanner.
- cloudflare
- information-gathering
- recon
- theharvester
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
- authentication
- automatic
- call
- coerce
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
- bash
- exploitation
- exploitation-tool
- hacking