LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
Repository Index
84,085 visible repositories in the index
25–48 of 53 · Most stars
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
- netcat
- ncat
- nc
- port-forwarding
A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
- reverse-engineering
- linux-kernel
- linux
- vmlinux
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
A repository full of malware samples.
- malware
- malware-samples
- malware-sample
- virus
Unlocking the Full Potential of OPC UA with Typescript and NodeJS - http://node-opcua.github.io/
- iot-platform
- opc-ua
- node-opcua
- nodejs
A collection of essential and foundational cybersecurity knowledge, thoughtfully organized for easy comprehension.
Angular Full Stack project built using Angular, Express, Mongoose and Node. Whole stack in TypeScript.
Full Toolkit for Next-Level Domain Analysis
Fullstack authentication and accounts-management for Javascript.
Full featured multi arch/os debugger built on top of PyQt5 and frida
- frida
- pyqt5
- reverse-engineering
- cracking
Coherence is a full featured, configurable authentication system for Phoenix
- elixir
- phoenix-framework
- authentication
- hex
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
TranslatedFull-Chain Sentinel (全链哨兵, "full-chain sentinel") is a cybersecurity Agent that integrates web penetration testing, Android app security testing, iOS app security testing, batch target probing for offensive and defensive operations, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
- agent
- blue-team
- cybersecurity
- cybersecurity-tools
MCP (Model Context Protocol) server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools -- designed to be plugged into Claude, Cursor, or any MCP-compatible client.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
- enterprise-software
- kubernetes
- audit-logs
- enterprise-ready
Merge multiple pcap files together, gracefully.
- pcap
- merge
- tcpdump-capture
- packet-processing
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.
- bgv
- ckks
- cryptography
- fhe
Rar-Password-Unlocker-Full-Version: Brute-Force, Mask, and Dictionary Attack Security Auditor
- dictionary-attack
- file-compression-tools
- password-recovery-tools
- rar-password-unlocker-latest-version
McAfee Total Protection full-version security suite: antivirus, ransomware defense, identity protect
- identity-theft
- mcafee
- online-security
- pc