:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
- aws
- adversary-emulation
- purple-team
- mitre-attack
Repository Index
80,339 visible repositories in the index
601–624 of 1,714 · Most stars
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
- bugbounty
- subdomain-enumeration
- scanner
- enumeration
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
Offline FairPlay App Store IPA decryption with independent key derivation
Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe
- jwt
- jwe
- jws
- jwk
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- pe-sieve
- anti-malware
- malware-analysis
- malware-detection
Reconstruct and validate C/C++ code from compiled programs with AI.
- ai-agent
- autonomous-agent
- binary-analysis
- c-plus-plus
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
- ai
- bug-bounty
- bugbounty-tools
- security-research
Social networking platform with automated content moderation and context-based authentication system
An evil RAT (Remote Administration Tool) for macOS / OS X.
- rat
- reverse-shell
- macos
- macosx
📜 Yet another collection of wordlists
- wordlists
- information
- information-gathering
- password
This app makes it extremely easy to build Django powered SPA's (Single Page App) or Mobile apps exposing all registration and authentication related functionality as CBV's (Class Base View) and REST (JSON)
- authentication
- rest
- social-login
- django
无状态子域名爆破工具
- subdomain
- enumeration
- pentesting
- hacking-tool
A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.
- ai
- burp-extensions
- burpsuite
- cybersecurity
A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
- bugbounty
- bugbounty-tool
- crawler
- dirscanner
WebAuthn, Simplified. A collection of TypeScript-first libraries for simpler WebAuthn integration. Supports modern browsers, Node, Deno, and more.
Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy
The Swiss Army knife for automated Web Application Testing
- golang
- hacking
- bugbounty
- jaeles
Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 45+ vulnerability types, and produces professional reports with compliance mapping.
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
Striker is an offensive information and vulnerability scanner.
- cloudflare
- information-gathering
- recon
- theharvester