Repository Index

My proof-of-concept exploits for the Linux kernel

• linux-kernel
• kernel-exploitation
• exploit
• privilege-escalation

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

• osint
• recon
• reconnaissance
• cybersecurity

AutoPentestX – Automated Pentesting & Vulnerability Reporting Tool

• automated-security-testing
• cybersecurity
• ethical-hacking---penetration-testi
• ethical-hacking-tools

This Script will help you to gather information about your victim or friend.

• kali-linux
• parrot
• osnit
• hacking

A fast tool to scan CRLF vulnerability written in Go

• crlf-injection
• golang
• vulnerability-scanning
• vulnerability-scanner

The repository host gives no description.

GUAC aggregates software security metadata into a high fidelity graph database.

• security
• software-supply-chain
• software-supply-chain-security
• supply-chain

tirreno is an open-source framework for in-house security. Event tracking, risk scoring and threat detection for your system.

• fraud-detection
• intelligence
• antispam
• fraud

An integrated BurpSuite vulnerability detection plug-in.

Authorization framework for Ruby/Rails applications

• rails
• authorization
• ruby
• hacktoberfest

Angular Full Stack project built using Angular, Express, Mongoose and Node. Whole stack in TypeScript.

• angular
• angularjs
• mongodb
• express

Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at [email protected]

Manage secrets with Bash and GnuPG symmetric encryption

• password-manager
• password
• gpg
• gnupg

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

• google-chrome
• hindsight
• chrome
• forensics

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

• cisa-kev
• cve
• cve-poc
• cvss

Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.

• ai
• cybersecurity
• cybersecurity-tools
• llms

Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!

• authentication
• nuxt
• users
• session

IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes

• ida
• idapython
• ida-plugin
• hex-rays-decompiler

CORS Misconfiguration Scanner

• cors
• cors-misconfiguration-scanner
• cors-scanner
• vulnerability-scanner

Firefox fork with compiler optimizations and patches from Librewolf, Waterfox, and GNU IceCat.

• browser
• firefox
• mercury
• optimization

Static asset revisioning by appending content hash to filenames: `unicorn.css` → `unicorn-d41d8cd98f.css`

• gulp-plugin
• rev
• javascript
• hash

Spoof TLS/JA3 fingerprints in GO and Javascript

• ja3
• tls
• golang
• fingerprint

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

• security
• owasp
• owasp-top-10
• cybersecurity

Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems.

• open-source-licensing
• open-source-vulnerabilities