Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Repository Index
75,859 visible repositories in the index
721–744 of 1,263 · Most stars
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
- apache-httpd
- openid-connect
- openidconnect-client
- openidc
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
PHP 5.3+ oAuth 1/2 Client Library
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Simple yet powerful authorization / authentication client library for Python web applications.
- python
- authentication
- oauth2-client
- oauth-client
PagerDuty's Incident Response Documentation.
- pagerduty
- incident-response
- documentation
- oncall
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
Python low-interaction honeyclient
- honeyclient
- client-honeypot
- python
- security-tools
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core
- jose
- jwt
- json
- jwa
:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
OAuth 1 Client
Detect deauthentication frames using an ESP8266
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
- pypi
- monitoring-tool
- network-analysis
- malware-analysis
pure-python ECDSA signature/verification and ECDH key agreement
- python
- elliptic-curves
- cryptography
- digital-signatures
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers