:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
- oscp
- offensive-security
- report
- oscp-prep
Repository Index
82,088 visible repositories in the index
457–480 of 2,327 · Most stars
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
企业级的 Go 语言实战项目：认证和授权系统（带配套课程）
- go
- project
- gin
- golang
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
Knock Subdomain Scan
- bugbounty
- knockpy
- penetration-testing
- security
Decrypted content of eqgrp-auction-file.tar.xz
- exploits
- shadowbrokers
- equationgroup
- hacking
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
State-of-the-art native debugging tools
- hypervisor
- hyperdbg
- debugger
- ept
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
A tool to dump the login password from the current linux user
- post-exploitation
- password-extraction
Bitwarden-compatible server running on Cloudflare Workers
- bitwarden
- cloudflare-workers
- password-manager
- self-hosted
OAuth Proxy
A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card "wirelessly", even on standard magstripe (non-NFC/RFID) readers. It can disable Chip&PIN and predict AMEX card numbers with 100% accuracy.
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
Microsoft Authentication Library (MSAL) for JS
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
An experiment.
- rust
- cryptography
- security
Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
Android Reverse-Engineering Workbench for VS Code
- apktool
- apk-decompiler
- apk-editor
- smali
Snoop — инструмент разведки на основе открытых данных (OSINT world)
- osint
- termux
- username-search
- username-checker