Repository Index

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

• wordlist
• password
• password-strength
• password-safety

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

A captcha library that generates audio and image CAPTCHAs.

• captcha

OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd

• apache-httpd
• openid-connect
• openidconnect-client
• openidc

A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.

• steam
• steamguard-cli
• linux-utility
• sda

A server side OAuth2 Bundle for Symfony

• php
• symfony
• symfony-bundle
• oauth2

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

• fastapi
• flask
• django
• content-security-policy

PHP 5.3+ oAuth 1/2 Client Library

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.

TranslatedDeepSeek Harness integrated armor-breaking security analysis plugin: aggregating all domains of Android · Web · Native · Protocol · Malware · AI-Security (9 bundles + 1 preset)

• dsh-plugin
• cordis
• deepseek-harness
• dsh

PagerDuty's Incident Response Documentation.

• pagerduty
• incident-response
• documentation
• oncall

Limit access to your Laravel applications by using invite codes

• php
• laravel
• laravel-package
• doorman

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

• pentesting
• hacking
• hacking-tool
• pentest-tool

Find exploit tool

• exploit-database
• python
• pentest-tool
• exploits

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

• wordlist
• rockyou
• rockyou2021
• wordlists

:key: Hash type identifier (CLI & lib)

• security-tools
• hash
• identify
• digest

cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf

BCrypt.Net - Bringing updates to the original bcrypt package

• blowfish
• bcrypt
• c-sharp
• algorithm

Hacking Toolkit

• network-analysis
• networking
• scapy
• python3

Detect deauthentication frames using an ESP8266

• arduino
• esp8266
• deauth
• attack

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

• pypi
• monitoring-tool
• network-analysis
• malware-analysis