SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
Repository Index
78,850 visible repositories in the index
409–432 of 1,115 · Most stars
DeepDiff: Deep Difference and search of any Python object/data. DeepHash: Hash of any object based on its contents. Delta: Use deltas to reconstruct objects by adding deltas together.
- python
- tree
- deep-search
- repetition
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
MUCH Improved version of the Python Chasing Your Tail Tool to help you determine if you're being followed
Hack the World using Termux
- termux
- hackers
- bash-script
- termux-tool
Powerful framework for rogue access point attack.
- wifipumpkin3
- accesspoint
- security
- mitm
A script for compiling OpenSSL for iOS Devices (iPhone, iPad, Watch, iPod Touch, AppleTV, MacCatalyst)
- openssl
- ios
- encryption
- iphone
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
- exploit
- exploiting-vulnerabilities
- deserialization
- javadeser
Generates permutations, alterations and mutations of subdomains and then resolves them
Search and browse documents and data; find the people and companies you look for.
- python
- data-search
- graph-database
- journalism
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- rita
- network-traffic
- threat
- scanning
Web app that provides basic navigation and annotation of ATT&CK matrices
- cti
- cyber-threat-intelligence
- mitre-attack
- mitre-corporation
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
Provides a tight integration of the Security component into the Symfony full-stack framework
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
- security-tools
- monitor
- bugbounty
- security-automation
Conference presentation slides
- blackhat
- cybersecurity
- cybersecurity-conference
- offensivecon
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
- aws
- adversary-emulation
- purple-team
- mitre-attack
Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe
- jwt
- jwe
- jws
- jwk
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
A simple vaultless password manager in Go
- password-manager
- password-generator
- password-store
- keychain
Activation & Lifecycle State Maintenance Toolkit