The repository host gives no description.
Repository Index
59,132 visible repositories in the index
25–48 of 48 · Most stars
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
A framework for layer 2 attacks
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
🔒Unified API for password hashing algorithms
A front-end JavaScript toolkit for creating DNS rebinding attacks.
DDoS attacks over Tor
- ddos
- ddos-tool
- ddos-attack
- ddos-script
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
A USB proxy based on raw-gadget and libusb
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
Agentic LLM CTF to test prompt injection attacks and preventions
Encrypts 64-bit elf files that decrypt at runtime.
- elf64
- linux
- elf-binaries
- elf-parser
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
- hashcat
- jtr
- mdxfind
- ngram
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
- 2fa
- aes-gcm
- dotenv
- encryption
Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
- honeypot
- engineering
- python
- attacker