Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Repository Index
61,121 visible repositories in the index
25–48 of 154 · Most stars
Simple session middleware for Express
- javascript
- nodejs
- expressjs
- middleware
Modlishka. Reverse Proxy.
- penetration-testing-tools
- mitm
- reverse-proxy
- security-tools
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.
- frida
- android
- xposed
- apk
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.
- android
- reverse-engineering
- smali
- apk-studio
A flask template with Bootstrap, asset bundling+minification with webpack, starter templates, and registration/authentication. For use with cookiecutter.
An enterprise friendly way of detecting and preventing secrets in code.
connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes
- express-jwt
- jwt
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
The boss of http auth.
OAuth Proxy
Private front-end for Reddit
- privacy
- privacy-friendly-alternatives
- privacy-frontend
- rust
Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
- mitigation
- meltdown
- spectre
- cve-2017-5753
Portable Executable reversing tool with a friendly GUI
- pe-file
- pe-format
- pe-analyzer
- pe-analyzer-gui
Rapidly Search and Hunt through Windows Forensic Artefacts
- attack
- rust
- security
- threat-hunting
A powerful and useful hacker dictionary builder for a brute-force attack
- password-generator
- wordlist-generator
- social-engineering-attacks
- password-wordlist
Blazing fast and correct x86/x64 disassembler, assembler, decoder, encoder for Rust, .NET, Java, Python, Lua
- disassembler
- assembler
- x86
- x64
A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
- hacking
- penetration-testing
- pentesting-tools
- powershell
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
A family of header-only, very fast and memory-friendly hashmap and btree containers.
- hash
- tables
- unordered-map
- unordered-set
A modern, open source password manager for individuals and teams.
- javascript
- lit-element
- lit-html
- password-generator
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker