File upload vulnerability scanner and exploitation tool.
- python3
- pentesting
- exploitation
- takeover
Repository Index
79,350 visible repositories in the index
433–456 of 1,693 · Most stars
Swift based OAuth library for iOS
- oauthswift
- oauth
- oauth2-client
- oauth-client
Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
A collection of all the data i could extract from 1 billion leaked credentials from internet.
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
EasyHook - The reinvention of Windows API Hooking
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
ARTEX - AI autonomous penetration testing system (English translation; upstream: Autumn-27/ARTEX, AGPL-3.0)
an SSO and OAuth / OIDC login solution for Nginx using the auth_request module
minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
HElib is an open-source software library that implements homomorphic encryption. It supports the BGV scheme with bootstrapping and the Approximate Number CKKS scheme. HElib also includes optimizations for efficient homomorphic evaluation, focusing on effective use of ciphertext packing techniques and on the Gentry-Halevi-Smart optimizations.
- helib
- privacy-enhancing-technologies
- cryptography
- privacy-by-design
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
- webpack
- scanner
- python3
- cybersecurity
Secure sharing of secrets, passwords and files
- password-share
- encryption-decryption
- file-upload
- onetimelink
Wi-Fi Exploitation Framework
- kali-linux
- wifi
- bash
- wef
SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.
- steamkit2
- c-sharp
- nuget
- steam
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
Open source obfuscation tool for .NET assemblies
- c-sharp
- obfuscation
- obfuscator
- obfuscate
Boilerplate configuration for nginx and certbot with docker-compose
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
- ai-agents
- bug-bounty
- cybersecurity
- offensive-security
Dynamic Instrumentation Tool Platform
:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
- exploits
- cve
- cve-2021-33739
- cve-2021-26868
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics