Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
Repository Index
47,133 repositories indexed
49–72 of 252 · Most stars
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Web application fuzzer
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
PEDA - Python Exploit Development Assistance for GDB
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
Cameradar hacks its way into RTSP videosurveillance cameras
w3af: web application attack and audit framework, the open source web vulnerability scanner.
The Leading Security Assessment Framework for Android.
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
The repository host gives no description.
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Weaponized web shell
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Wireless keystroke injection attack platform
Ettercap Project
A toolset to make a system look as if it was the victim of an APT attack