generate CobaltStrike's cross-platform payload
Repository Index
72,362 visible repositories in the index
457–480 of 1,233 · Most stars
Source 2 Viewer is an all-in-one tool to browse VPK archives, view, extract, and decompile Source 2 assets, including maps, models, materials, textures, sounds, and more.
Security sensor for realtime threat detection and protection
Semi-automatic OSINT framework and package manager
- osint
- intelligence
- osint-framework
- certificate-transparency
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
- brute-force-attacks
- bruteforce
- credential-testing
- cybersecurity
WireTapper is a wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence 📡
age-encrypted secrets for NixOS and Home manager
Abracadabra 魔曰，古文风文本加密工具
- chinese
- chinese-characters
- encoding
- encryption
Hack the World using Termux
- termux
- hackers
- bash-script
- termux-tool
RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs.
- tv
- webos
- exploit
- cve-2022-23727
A script for compiling OpenSSL for iOS Devices (iPhone, iPad, Watch, iPod Touch, AppleTV, MacCatalyst)
- openssl
- ios
- encryption
- iphone
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
- exploit
- exploiting-vulnerabilities
- deserialization
- javadeser
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles
- python
- libnss3
- extract-passwords
- firefox-decrypt
Generates permutations, alterations and mutations of subdomains and then resolves them
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- rita
- network-traffic
- threat
- scanning
Web app that provides basic navigation and annotation of ATT&CK matrices
- cti
- cyber-threat-intelligence
- mitre-attack
- mitre-corporation
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
❌ Cargo plugin for linting your dependencies 🦀
- cargo
- rust
- crates
- advisories
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
- vulnerability-assessment
- vulnerabilities
- scanning
- pentesting
An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!