Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
- brute-force-attacks
- bruteforce
- credential-testing
- cybersecurity
Repository Index
75,859 visible repositories in the index
529–552 of 1,425 · Most stars
WireTapper is a wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence 📡
Creepy device and browser fingerprinting
- device
- fingerprinting
- browser-fingerprinting
- device-fingerprint
UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
DeepDiff: Deep Difference and search of any Python object/data. DeepHash: Hash of any object based on its contents. Delta: Use deltas to reconstruct objects by adding deltas together.
- python
- tree
- deep-search
- repetition
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
MUCH Improved version of the Python Chasing Your Tail Tool to help you determine if you're being followed
Hack the World using Termux
- termux
- hackers
- bash-script
- termux-tool
Powerful framework for rogue access point attack.
- wifipumpkin3
- accesspoint
- security
- mitm
A script for compiling OpenSSL for iOS Devices (iPhone, iPad, Watch, iPod Touch, AppleTV, MacCatalyst)
- openssl
- ios
- encryption
- iphone
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
- exploit
- exploiting-vulnerabilities
- deserialization
- javadeser
Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI
- entity-framework-core
- visual-studio
- entity-framework
- model-visualization
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles
- python
- libnss3
- extract-passwords
- firefox-decrypt
General Rack Authentication Framework
SSRF (Server Side Request Forgery) testing resources
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- rita
- network-traffic
- threat
- scanning
OAuth 2.0 social authentication providers for ASP.NET Core
- aspnetcore
- oauth2
- social-authentication
Web app that provides basic navigation and annotation of ATT&CK matrices
- cti
- cyber-threat-intelligence
- mitre-attack
- mitre-corporation
A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
❌ Cargo plugin for linting your dependencies 🦀
- cargo
- rust
- crates
- advisories
Provides a tight integration of the Security component into the Symfony full-stack framework
Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in real-time for logistics or safety, redefining how we navigate our surroundings