OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- security-audit
- build-tool
- maven-plugin
- jenkins-plugin
Repository Index
67,762 visible repositories in the index
25–48 of 169 · Most stars
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
- gtfobins
- exploit
- privesc
- privilege-escalation
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
- authentication
- nextjs
- oauth
- auth0
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
- devops
- penetration-testing
- vulnerability
- vulnerability-scanners
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
- automated-pentesting
- bruteforce
- cybersecurity
- e-paper
The Network Execution Tool
- hacking
- pentest
- pentest-tool
- pentest-tools
An open-source network stresser tool but it's Hatsune Miku
- ddos
- ddos-attack-tools
- ddos-attacks
- ddos-tool
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
- osint
- osint-tool
- python
- osint-tools
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
- authorization
- policy-as-code
- policy
- realtime
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
- php
- hashids
- database-ids
- php-library
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
- aws-security
- penetration-testing
- aws
- security
An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.
- frida
- android
- xposed
- apk
Cameradar hacks its way into RTSP videosurveillance cameras
Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.
This patch removes restriction on maximum number of simultaneous NVENC video encoding sessions imposed by Nvidia to consumer-grade GPUs.
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more
- information-gathering
- osint
- osint-tools
- open-source-intelligence
NestJS boilerplate. Auth, TypeORM, Mongoose, Postgres, MongoDB, Mailing, I18N, Docker.
🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
- oscp
- offensive-security
- report
- oscp-prep