connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes
- express-jwt
- jwt
Repository Index
57,637 visible repositories in the index
385–408 of 1,432 · Most stars
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
🔣 A collection of GitHub issue, pull request and security templates
- github
- templates
- template
- issues
The world’s 1st book of very detailed iOS App reverse engineering skills :)
List of Awesome CobaltStrike Resources
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
- rust
- security
- pentest
- pentesting
A Security Tool for Bug Bounty, Pentest and Red Teaming.
- vulnerability-scanner
- poc
- penetration-testing
- afrog
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
Godot reverse engineering tools
Decompiler from Java bytecode to Java, used in IntelliJ IDEA.
- java
- decompiler
- reverse-engineering
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
- reverse-engineering
- symbolic-execution
- binary-analysis
- program-analysis
The most popular PHP library for use with the Twitter OAuth REST API.
- twitter-oauth
- php
- twitter-api
- php-library
Free Windows, Mac and Linux cleaner, scanner, and more.
- cleaner
- free
- kudu
- scanner
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
OAuth Proxy
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)