47,133 repositories indexed
49–72 of 172 · Most stars
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
:closed_lock_with_key: Multiplatform command-line password manager
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
Yet another role-based authorization system for Rails
Dynamic unpacker based on PE-sieve
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
Automatic and platform-independent unpacker for Windows binaries based on emulation
Multi-role and whitelist based authorization gem for Rails (and not only Rails!)
A machine learning tool that ranks strings based on their relevance for malware analysis.
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
OpenXPKI Code
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
A tiny Elixir library for time-based one time passwords (TOTP)