Repository Index

Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI

• entity-framework-core
• visual-studio
• entity-framework
• model-visualization

Optimized C library for EC operations on curve secp256k1

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

• wlan
• wpa
• wpa2
• raspberry-pi

OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.

• php
• symfony
• symfony-bundle
• authentication

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare

Reconnaissance Swiss Army Knife

• recon
• information-gathering
• honeypot-detector
• subdomain-enumeration

Go package captcha implements generation and verification of image and audio CAPTCHAs.

• captcha
• image-captcha
• go
• audio-captchas

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

• wordlist
• wordlist-generator
• password
• cracking

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

• ida-plugin
• taint-analysis
• reverse-engineering
• disassembly

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool

Interactive CTF Exploration Tool

• security
• reverse-engineering
• windows
• windows-internals

Ncurses based XMPP client

• xmpp-client
• c
• xmpp
• chat

ARTEX - AI autonomous penetration testing system (English translation)

Security Tool to Look For Interesting Files in S3 Buckets

• s3-bucket
• penetration-testing
• bugbounty
• enumeration

Bloodhound Reporting for Blue and Purple Teams

• active
• directory
• blueteam
• purpleteam

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

• csrf
• crawler
• csrf-attacks
• token-generation

A modular vulnerability scanner with automatic report generation capabilities.

• artemis
• pentesting
• security
• security-scanner

Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.

A collection of AWS penetration testing junk

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

• sip
• voip
• password-cracker
• svwar

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners