Repository Index

An OOB interaction gathering server and client library

• appsec
• oast
• dns
• security

Translatedeladmin JPA version: frontend source code. The project is a back-end management system with separated frontend and backend, based on Spring Boot 2.7.18, Spring Boot Jpa, Spring Security, Redis, and Vue

• admin
• element-ui
• vue
• eladmin

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

• compliance
• grc
• soc2
• gdpr

A Javascript RESTFUL API library for connecting with OAuth2 services, such as Google+ API, Facebook Graph and Windows Live Connect

👋🧩Template repository for ReVanced Patches

• revanced
• patches
• reverse-engineering
• dalvik

An open-source framework for Steam Client themes and plugins

• reverse-engineering
• steam
• valve
• millennium

Fetch all the URLs that the Wayback Machine knows about for a domain

Volatility 3.0 development

• digital-investigation
• forensics
• incident-response
• malware

The Deepfake Offensive Toolkit

TranslatedA secure, reliable, simple, free enterprise-grade honeypot

• honeypot
• hunting

Commonly used data structures for Swift

• collection
• container
• deque
• dequeue

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

• penetrationtesting
• pentesting
• pentesting-tools
• penetration-testing

PyInstaller Extractor

• python
• pyinstaller
• decompile
• reverse-engineering

Analyze ELF binaries like a boss 😼🕵️‍♂️

• analysis
• binary
• binary-data
• dynamic-analysis

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

• reverse-engineering
• rop
• rop-exploitation
• rop-gadgets

connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes

• express-jwt
• jwt

TranslatedA comprehensive network security detection and operations tool, designed for fast asset discovery, identification, and detection, building a basic asset information library, and helping the client-side (Party A) security team or security operations personnel effectively reconnoiter and search assets and find existing weak points and attack surfaces.

An JWT based API for managing users and issuing JWT tokens.

• authentication
• jwt
• production

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

• open-source
• pentest
• pentesting
• readteaming

easy-rsa - Simple shell based CA utility

TranslatedGodzilla

🔣 A collection of GitHub issue, pull request and security templates

• github
• templates
• template
• issues

A python script that finds endpoints in JavaScript files

• infosec
• endpoints

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management

• library
• web-framework
• shiro
• java