Security Auditor Utility for GraphQL APIs
Repository Index
47,133 repositories indexed
49–72 of 92 · Most stars
Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
- agent
- blue-team
- cybersecurity
- cybersecurity-tools
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Documenting the unofficial and internal Steam Web API
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
- php
- oauth
- social
- oauth-application
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
A front-end JavaScript toolkit for creating DNS rebinding attacks.
Fast HTTP enumerator
- http
- fuzz
- fuzzer
- enumerator
DNS Rebinding Exploitation Framework
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
A simple PHP Authentication that enables steam users to log into their steam account to access content!
Cyber Incident Response Team Playbook Battle Cards
- playbook-battle-cards
- cybersecurity
- cyber-threats
- cyber-security-team
Steam (OpenID) authentication strategy for Passport and Node.js.
A modular OSINT honeypot for blue teamers
Wireless Hacking Devices Protocol client
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Lightweight module to generate Steam-style TOTP auth codes.
The repository host gives no description.