Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.
- bugbounty
- subdomain
- dns
- dns-resolver
Repository Index
72,862 visible repositories in the index
529–552 of 1,243 · Most stars
Binary Analysis Platform
- binary-analysis
- reverse-engineering
- program-analysis
- static-analysis
Weblogic一键漏洞检测工具，V1.5，更新时间：20200730
- weblogicscan
A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
- ms-office
- malware
- macro
- vba
:cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中
- poc
- exp
- payload
- medusa
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.
- getssl
- certificate
- ssl-certificate
- acme-server
Small tool to capture packets from wlan devices.
- pcap
- wifi-security
- raspberry-pi
- pcapng
dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
- blueteam
- active-directory
- activedirectory
- acl
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- fakenet-ng
- traffic-redirection
- malware-analysis
- mandiant-flare
Discover our Python package designed for algorithmic trading. It brings ICT's smart money concepts to Python, offering a range of indicators for your algorithmic trading strategies.
Efficient and advanced man in the middle framework
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
- oscp
- penetration-testing
- scanner
- security
Detection tools for the June 2026 atomic-lockfile AUR supply-chain attack. Consolidated from community Gists.
A tool for analyzing the size of compiled Go binaries, offering cross-platform support, detailed breakdowns, and multiple output formats.
- binary
- golang
- symbol
- visualization
Master Federated Learning in 2 Hours—Run It on Your PC!
- non-iid
- federated-learning
- personalization
- pytorch
密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（聚合测绘，FO FA，Hunter，Quake,Zoomeye,DayDayMap,censys,shodan, 零零信安），指纹识别，敏感信息采集，文件扫描、端口扫描、弱口令破解、jwt密钥爆破、Sessionkey,heapdump, 微信小程序，密码本，随机用户，社工字典,AI渗透（MCP、代码审计）等功能
红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
- bash-script
- vps
- pentest-tool
- bash
Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
- rop
- exploitation
- binary
- gadget-finder
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
- crawler
- information-gathering
- cms-detector
- cloudflare-detection
The next-generation CTF Swiss Army Knife powered by Rust & Tauri. Features a visual node-based workflow and local AI intelligence for extreme performance and automation.China's first CTFTools framework.
- python
- ctf-tools
- framework
- ctf
ignorant allows you to check if a phone number is used on different sites like snapchat, instagram.
- phone-number
- trio
- snapchat
Know the dangers of credential reuse attacks.
- hacking
- hacking-tool
- pentesting
- credentials