USB Rubber Ducky type scripts written for the DigiSpark.
- digispark
- digispark-scripts
- sketches
- scripts
Repository Index
80,339 visible repositories in the index
673–696 of 1,710 · Most stars
A post exploitation framework designed to operate covertly on heavily monitored environments
- shad0w
- c2
- red-team
- c
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
- bash-script
- vps
- pentest-tool
- bash
Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
- rop
- exploitation
- binary
- gadget-finder
A React Higher Order Component (HOC) for handling Authentication and Authorization with Routing and Redux
The next-generation CTF Swiss Army Knife powered by Rust & Tauri. Features a visual node-based workflow and local AI intelligence for extreme performance and automation.China's first CTFTools framework.
- python
- ctf-tools
- framework
- ctf
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
- crawler
- information-gathering
- cms-detector
- cloudflare-detection
Venom - A Multi-hop Proxy for Penetration Testers
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
- appkit
- cleanmymac
- cleanmymac-alternative
- darwin
Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点
- identification
- security-tools
- webscan
- golang-tools
Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic report generation.
- osint
- python
- searchphone
- api-scraping
domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
- domain-hunter
- web-title
- domain-discovery
- subject-alternative-name
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
- 2fa
- auth0
- authentication
- identity
A standalone, specification-compliant, OAuth2 server written in Golang.
- go
- golang
- oauth2-server
- oauth2
A Go implementation of the 64-bit xxHash algorithm (XXH64)
Python Social Auth - Application - Django
- authentication
- django
- hacktoberfest
- oauth2
This tool gives information about the phone number that you entered.
- osint
- osint-tool
- advanced-osint-tool
- advanced
Tool for advanced mining for content on Github
- gitminer
- information-gathering-tool
- git-mining-tool
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
- poshc2
- c2
- redteam
- nettitude
:new: The Multi-Tool Web Vulnerability Scanner.
- scanner
- vulnerability-scanners
- scanner-web
- web-vulnerabilities-scanner
Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
- certificate-transparency
- certificate-transparency-logs
- information-gathering
- pentesting