87,573 visible repositories in the index
601–624 of 1,542 · Most stars
instahack is a bash & python based script which is officially made to test password strength of Instagram account from termux and kali with bruteforce attack and. it based on tor This tool works on both rooted Android device and Non-rooted Android device. Best Tool For Instagram Bruteforce hacking Tool By Waseem Akram.
Golang OAuth2 server library
Educational, CTF-styled labs for individuals interested in Memory Forensics
Open-source OSINT agent: 21 public-source tools behind natural-language chat, an MCP server and a Claude Code plugin. Passive by default, no keys to start.
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
A simple python library to interact with Microsoft Graph and Office 365 API
Port of TweetNaCl cryptographic library to JavaScript
Situational Awareness commands implemented using Beacon Object Files
403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evidence.
一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services
ESP32-DIV HaleHound Edition for Cheap Yellow Display - Multi-protocol offensive security toolkit
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
OSINT Tool: Generate username lists for companies on LinkedIn
A library for implementing authentication/authorization in Ember.js applications.
Advanced Red Team techniques focused on Rust
Autumn-27/ARTEX 持续维护开源版本 （Internationalized version）
Terminal-based toolkit for GitHub data analysis.
:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
A browser extension for OSINT search
A proposed standard that allows websites to define security policies.
A Modular Penetration Testing Framework