Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
- post-exploitation
- stealth
- linux
- hacking-tool
Repository Index
85,578 visible repositories in the index
505–528 of 1,070 · Most stars
Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
- extension
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
- bugbounty
- burp-extensions
- burpsuite
- bug-bounty
A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.
- redteam
- security-tools
- fofa
- fofa-api
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
Gives you one-liners that aids in penetration testing operations, privilege escalation and more
- hacking
- hacking-tool
- web-delivery
- metasploit
Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal
- python3
- tui
- data
- recovery
safely install npm packages by auditing them pre-install stage
Maybe the most detailed analysis of pdd backdoors
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
Azure Security Resources and Notes
Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
Manage your GnuPG keys with ease! 🔐
- gnupg
- gpg
- tui
- gpg-tui
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
- cisa-kev
- claude-ai
- cve
- cybersecurity
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
iOS/macOS/Linux Remote Administration Tool
- ios
- macos
- pentest-tool
- pentest-scripts
☕️ Java Security，安全编码和代码审计
- java-sec
- java-vul
- code-audit
Backend controllers and scaffolding for Laravel authentication.
The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.
With Django Hijack, admins can log in and work on behalf of other users without having to know their credentials.
- django
- python
- django-hijack
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
Open-source implementation of a substantial portion of the API of Apple CryptoKit suitable for use on all Swift supported platforms.
- cryptography
- elliptic-curves
- hash-functions
- ciphers
Splunk Security Content
- splunk
- detection
- engineering
- responses