Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
Repository Index
47,133 repositories indexed
25–48 of 135 · Most stars
The recursive internet scanner for hackers. 🧡
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
Malicious traffic detection system
Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
- rsa-attack
- rsa
- cryptography
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
Rack middleware for blocking & throttling
- rack-attack
- ruby
- rack-middleware
- rack
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
Rapidly Search and Hunt through Windows Forensic Artefacts
- attack
- rust
- security
- threat-hunting
The repository host gives no description.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Wireless keystroke injection attack platform
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors