The Official USB Rubber Ducky Payload Repository
- badusb
- ducky-payloads
- duckyscript
- hak5
Repository Index
78,351 visible repositories in the index
25–48 of 146 · Most stars
AI-powered bug bounty hunting toolkit that works with or without subscription.
- ai-security
- bug-bounty
- bugcrowd
- claude-ai
UEFI firmware image viewer and editor
The ultimate WinRM shell for hacking/pentesting
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
- xss
- security
- bugbounty
- bugbounty-tool
Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
- empire
- c2
- redteam-infrastructure
- hacktoberfest
Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange
Execution rails for agents. Equip your AI to work with sensitive enterprise systems. Give agents precise permissions and custom tools that work faster with fewer tokens.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
- decompiler
- vulnerability-scanners
- malware-analysis
- security-audit
AI powered OSINT engine to discover and map 7,700+ social media identities across the web
A fully automated HTTPS server powered by Nginx, Let's Encrypt and Docker.
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
- penetrationtesting
- pentesting
- pentesting-tools
- penetration-testing
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
- library
- web-framework
- shiro
- java
Decompiler from Java bytecode to Java, used in IntelliJ IDEA.
- java
- decompiler
- reverse-engineering
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
AI-powered penetration testing assistant using local LLM on linux (Parrot OS)
Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
- encryption
- cryptography
- homomorphic-encryption
Privilege Escalation Enumeration Script for Windows
- pentest-tool
- windows
- windows-privilege-escalation
- privilege-escalation
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
Fast and powerful SSL/TLS scanning library.
- python
- ssl
- scans
- ssllabs
Automation for internal Windows Penetrationtest / AD-Security
- pentesting
- automation
- adsecurity
- privilege-escalation
Assembly and source viewer with goodies.
A powerful and useful hacker dictionary builder for a brute-force attack
- password-generator
- wordlist-generator
- social-engineering-attacks
- password-wordlist