Repository Index

Binary Analysis Platform

• binary-analysis
• reverse-engineering
• program-analysis
• static-analysis

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

• ms-office
• malware
• macro
• vba

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

• penetration-testing
• pentesting
• active-directory
• hacking

Crack legacy zip encryption with Biham and Kocher's known plaintext attack.

• crack
• zip
• multithread
• attack

:cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

• poc
• exp
• payload
• medusa

obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.

• getssl
• certificate
• ssl-certificate
• acme-server

Since 2011, IPBan is the worlds most trusted, free security software to block hackers and botnets. With both Windows and Linux support, IPBan has your dedicated or cloud server protected. Upgrade to IPBan Pro today and get a discount. Learn more at ↓

• rdp
• windows
• ipban
• security

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

• devirtualization
• vtil
• vmprotect

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

• blueteam
• active-directory
• activedirectory
• acl

Bruteforce attack on Facebook account using python script

• brute-force-attacks
• python
• facebook-account
• facebook-bruteforce

WarBerryPi - Tactical Exploitation

Hack Instagram From Termux With Help of Tor

• hacking-tool
• termux-tools
• termux
• noob-friendly

Detection tools for the June 2026 atomic-lockfile AUR supply-chain attack. Consolidated from community Gists.

Java Vulnerability Exploitation Platform

• javasecurity

A tool for analyzing the size of compiled Go binaries, offering cross-platform support, detailed breakdowns, and multiple output formats.

• binary
• golang
• symbol
• visualization

Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索等

• java-asm
• java-decompiler
• static-analysis
• vulnerability

Jwt.Net, a JWT (JSON Web Token) implementation for .NET

• jwt
• json
• c-sharp
• authorization

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

• ctid
• cybersecurity
• threat-informed-defense
• mitre-attack

Master Federated Learning in 2 Hours—Run It on Your PC!

• non-iid
• federated-learning
• personalization
• pytorch

A post exploitation framework designed to operate covertly on heavily monitored environments

• shad0w
• c2
• red-team
• c

密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（聚合测绘，FO FA，Hunter，Quake,Zoomeye,DayDayMap,censys,shodan, 零零信安），指纹识别，敏感信息采集，文件扫描、端口扫描、弱口令破解、jwt密钥爆破、Sessionkey,heapdump, 微信小程序，密码本，随机用户，社工字典,AI渗透（MCP、代码审计）等功能

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

• rop
• exploitation
• binary
• gadget-finder

Cyber Threat Intelligence Repository expressed in STIX 2.0

• stix
• cti
• cyber-threat-intelligence
• attack