47,133 repositories indexed
49–72 of 172 · Most stars
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
A simple, semantic and developer-friendly crypto package for golang
Find exploit tool
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
Yet another role-based authorization system for Rails
Dynamic unpacker based on PE-sieve
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
Automatic and platform-independent unpacker for Windows binaries based on emulation
Multi-role and whitelist based authorization gem for Rails (and not only Rails!)
A machine learning tool that ranks strings based on their relevance for malware analysis.
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
OpenXPKI Code
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Advanced keyboard-walk generator with configureable basechars, keymap and routes
:white_check_mark: .NET crypto done right. Professionally audited.
Defanged Indicator of Compromise (IOC) Extractor.
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
Malware exploits
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.