Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
- post-exploitation
- stealth
- linux
- hacking-tool
88,573 visible repositories in the index
457–480 of 991 · Most stars
Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
PHP Captcha library
Find interesting Amazon S3 Buckets by watching certificate transparency logs.
Leapp is the DevTool to access your cloud
A framework for secure and scalable network traffic analysis - https://netcap.io
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.
JSON Object Signing and Encryption library for PHP.
Obfuscation library based on C++20 and metaprogramming
Azure Security Resources and Notes
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
Automated static analysis tools for binary programs
A repository full of malware samples.
A network sniffer that logs all DNS server replies for use in a passive DNS setup
Azure Red Team tool for graphing Azure and Azure Active Directory objects
Python reference implementation of The Update Framework (TUF)
Indicators of Compromise from Amnesty International's cyber investigations
Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.
latest version of scanners for IIS short filename (8.3) disclosure vulnerability
Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.