无状态子域名爆破工具
- subdomain
- enumeration
- pentesting
- hacking-tool
Repository Index
80,339 visible repositories in the index
697–720 of 1,822 · Most stars
A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.
- ai
- burp-extensions
- burpsuite
- cybersecurity
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
- bugbounty
- bugbounty-tool
- crawler
- dirscanner
Unreal Engine SDK Generator
The Swiss Army knife for automated Web Application Testing
- golang
- hacking
- bugbounty
- jaeles
Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 45+ vulnerability types, and produces professional reports with compliance mapping.
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
The best tool for finding one gadget RCE in libc.so.6
- ctf
- pwnable
- pwn
- glibc
The repository host gives no description.
captcha of base64 image string
- captcha
- image-captcha
- audio-captchas
- captcha-generator
针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具
- spring
- spring-boot
- spring-vulnerability
- springboot
HTTP middleware for Go that facilitates some quick security wins.
- golang
- go
- middleware
- security
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
Striker is an offensive information and vulnerability scanner.
- cloudflare
- information-gathering
- recon
- theharvester
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
- authentication
- automatic
- call
- coerce
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
- active-directory
- powershell
- redteaming
- penetration-testing
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
- bash
- exploitation
- exploitation-tool
- hacking
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
PHP class to generate and verify Google Authenticator 2-factor authentication
Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
- android
- frida
- certificate
- interception
Automatically brute force all services running on a target.
- brute-force
- bruteforce
- bruteforcing
- bruteforce-attacks
A collection of JavaScript engine CVEs with PoCs
- javascript
- cve
- vulnerability
Next.js SDK for signing in with Auth0
A tool to abuse Exchange services
- mapi
- exchange
- shells
- pentesting