78,851 visible repositories in the index
409–432 of 963 · Most stars
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
Library for training machine learning models with privacy for training data
Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access
Analyzing your wechat message history from android
Microsoft Threat Intelligence Security Tools
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440)
frida工具的缝合怪
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
Personalized, user-focused recommendations for employee information security.
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
A very simple way to find out which SSL ciphersuites are supported by a target.
The most complete open-source tool for Twitter intelligence analysis
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
Awesome Django authorization, without the database
A tool that disconnects Tuya IoT devices from the cloud, allowing them to run completely locally.
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
The SpecterOps project management and reporting engine
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
Autoswagger by Intruder - detect API auth weaknesses
Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards.
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.