Potentially dangerous files
- list
- web
- vulnerability
- files
Repository Index
47,133 repositories indexed
49–72 of 180 · Most stars
Tool to look for several security related Android application vulnerabilities
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Chrome extension and Express server that exploits keylogging abilities of CSS.
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
A modern, open source password manager for individuals and teams.
- javascript
- lit-element
- lit-html
- password-generator
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.
- decompiler
- fernflower
- java
- hacktoberfest
HTTP middleware for Go that facilitates some quick security wins.
- golang
- go
- middleware
- security
A collection of JavaScript engine CVEs with PoCs
- javascript
- cve
- vulnerability
Bleeding edge django template focused on code quality and security.
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
A little utility for managing credentials in the cloud
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Small utilities that are useful in advanced password cracking
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.