Repository Index

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

• identification
• security-tools
• webscan
• golang-tools

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

• domain-hunter
• web-title
• domain-discovery
• subject-alternative-name

Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.

• appkit
• cleanmymac
• cleanmymac-alternative
• darwin

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell

Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic report generation.

• osint
• python
• searchphone
• api-scraping

Wiki-like CTF write-ups repository, maintained by the community. 2017

• ctf

Tool for advanced mining for content on Github

• gitminer
• information-gathering-tool
• git-mining-tool

This tool gives information about the phone number that you entered.

• osint
• osint-tool
• advanced-osint-tool
• advanced

:new: The Multi-Tool Web Vulnerability Scanner.

• scanner
• vulnerability-scanners
• scanner-web
• web-vulnerabilities-scanner

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

• certificate-transparency
• certificate-transparency-logs
• information-gathering
• pentesting

Reconnaissance Swiss Army Knife

• recon
• information-gathering
• honeypot-detector
• subdomain-enumeration

ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

• agent-security
• ai-agents
• ai-security
• benchmark

DNS Takeover tool written in Go

• go
• golang
• hostile
• subdomain

Open-source ESP32-powered tool to scan, jam, spoof, and master BLE, Wi-Fi, and 2.4GHz networks.

• arduino
• nrf24l01
• hack
• hacktoberfest

Platform for emulation and dynamic analysis of Linux-based firmware

Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.

• hacktoberfest
• authentication
• auth
• authorization

Compatibility with the password_* functions that ship with PHP 5.5

Windows kernel and user mode emulation.

• malware-analysis
• emulation

Minimalistic web app designed for sending private and secure notes.

• end-to-end-encryption
• minimalist
• note
• pastebin

A suite of tools to automate software compliance checks.

• package-manager
• dependencies
• dependency-graph
• license

Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:

• pwnbox
• rogueap
• wifi-hacking
• wifi-security

GameHub Lite is a community-maintained modified version of GameHub for education purposes

• android-emulator-pc
• emulation
• emuready
• gamehub

A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.

• browser-automation
• debugging
• deobfuscation
• js-reverse

Materials for Windows Malware Analysis training (volume 1)

• windows-malware-analysis
• malware-analysis
• malware-research