47,133 repositories indexed
25–48 of 180 · Most stars
TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Vulnerability Static Analysis for Containers
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
The FLARE team's open-source tool to identify capabilities in executable files.
An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.
Automated Αll-in-One OS command injection exploitation tool.
Laravel wrapper around OAuth 1 & OAuth 2 libraries.
Sysmon configuration file template with default high-quality event tracing
Open Source Cloud Native Application Protection Platform (CNAPP)
eBPF-based Security Observability and Runtime Enforcement
Split your file into encrypted fragments so that you don't need to remember a passcode
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Volatility 3.0 development
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
A high performance offensive security tool for reconnaissance and vulnerability scanning
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
Laravel Eloquent roles and abilities.