79,350 visible repositories in the index
553–576 of 1,127 · Most stars
Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens from Chrome, Edge, Brave & Avast - fileless, user-mode, no admin required.
Datamining Discord changes from the JS files
Wiki-like CTF write-ups repository, maintained by the community. 2014
Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019
NIST Certified SCAP 1.2 toolkit
A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
Open Adversarial Exposure Validation Platform
HACL*, a formally verified cryptographic library written in F*
DetectDee: Hunt down social media accounts by username, email or phone across social networks.
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
A Dynamic Binary Instrumentation framework based on LLVM.
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.
Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
copy & paste-friendly golang crypto
🚀 Try the Learn EVM Explorer we just launched!!!
Gives you one-liners that aids in penetration testing operations, privilege escalation and more
Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal
safely install npm packages by auditing them pre-install stage
Maybe the most detailed analysis of pdd backdoors
jSQL Injection is a Java application for automatic SQL database injection.