Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
Repository Index
79,350 visible repositories in the index
409–432 of 647 · Most stars
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
A public release of the Steal My Bitcoin challenge
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
- wordlist
- rockyou
- rockyou2021
- wordlists
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
passfab-unlocker: Standalone Offline Password Recovery Solution
- automation
- desktop
- developer-tools
- device-recovery
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
🐧 Abuse of Google Colab for cracking hashes.
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
- openam
- sso
- oauth
- saml
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Typed TypeScript SDK for direct and managed social platform integrations, with capability checks, explicit outcomes, and deterministic testing.
- api-integration
- bluesky
- bun
- developer-tools
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
Bluetooth experimentation framework for Broadcom and Cypress chips.
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
Free people-search desktop app: look up a nickname, email, phone or site across 3,100+ public pages and get one readable report.
PoC for jsserver vulnerability in webOS 3.5+(?)
- exploit
- lg
- lgtv
- root