ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
- vulnerability-assessment
- vulnerabilities
- scanning
- pentesting
Repository Index
75,859 visible repositories in the index
553–576 of 1,425 · Most stars
Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.
Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.
- decompiler
- fernflower
- java
- hacktoberfest
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
Modern Honey Network
- hacktoberfest
Conference presentation slides
- blackhat
- cybersecurity
- cybersecurity-conference
- offensivecon
使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。
- docker-image-builder
- vulnerability
A Tool to Visualize Claude Code's LLM Interactions
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
- aws
- adversary-emulation
- purple-team
- mitre-attack
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
- bugbounty
- subdomain-enumeration
- scanner
- enumeration
The repository host gives no description.
Offline FairPlay App Store IPA decryption with independent key derivation
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
A simple vaultless password manager in Go
- password-manager
- password-generator
- password-store
- keychain
Activation & Lifecycle State Maintenance Toolkit
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- pe-sieve
- anti-malware
- malware-analysis
- malware-detection
Reconstruct and validate C/C++ code from compiled programs with AI.
- ai-agent
- autonomous-agent
- binary-analysis
- c-plus-plus
OAuth wrapper for node.js
Social networking platform with automated content moderation and context-based authentication system
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
- ai
- bug-bounty
- bugbounty-tools
- security-research
Powerful android apk editor - aapt/aapt2 independent
- android-reverse-engineering
- apk
- apkeditor
- arsc
ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.
- reverse-engineering
- debugger
- disassembler
- software-analysis
An engine to make Tor network your default gateway
- tor
- anonymity
- network
- nipe
A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.
- ai
- burp-extensions
- burpsuite
- cybersecurity