Educational, CTF-styled labs for individuals interested in Memory Forensics
Repository Index
79,350 visible repositories in the index
529–552 of 1,127 · Most stars
Open-source OSINT agent: 21 public-source tools behind natural-language chat, an MCP server and a Claude Code plugin. Passive by default, no keys to start.
ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques
- nuclei
- nuclei-templates
- fuzzing-templates
- nucleifuzzer
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evidence.
- waf-bypass
- pentesting
- bugbounty
- ctf
hacking-tool termux-tools termux noob-friendly instagram-bot bruteforce-password-cracker wordlist-technique
- hacking
- tool
- hacking-tool
- termux
The new bridge between Burp Suite and Frida!
Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.
Terminal-based toolkit for GitHub data analysis.
- data-analysis
- github-data
- github-osint
:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
A browser extension for OSINT search
- chrome-extension
- security
- threat-intelligence
- osint
A proposed standard that allows websites to define security policies.
- security
- standard
- ietf
- ietf-rfcs
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- ida-plugin
- taint-analysis
- reverse-engineering
- disassembly
Build a database of libc offsets to simplify exploitation
- pwn
- libc
- offsets
- ctf
Transparent SSL/TLS interception
The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by https://kasper-oswald.de. The device is available at https://shop.kasper.it. For further information see the Getting Started Page https://rawgit.com/emsec/ChameleonMini/master/Doc/Doxygen/html/_page__getting_started.html or the Wiki tab above.
- nfc
- card
- contactless
- rfid
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Global threat map. Learn wars, conflicts, military bases and history of nations.
- intelligence
- nato
- osint
- osint-tool
Find exploits in local and online databases instantly
- exploits
- metasploit
- nmap
- pentest
Implementation of the Cedar Policy Language
OSINT power without API key hassle