A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
- burp-extensions
- burpsuite-extender
- update-cookie
- cookie
Repository Index
80,838 visible repositories in the index
745–768 of 1,721 · Most stars
IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations
- binary-analysis
- decryption
- deobfuscation
- hexrays
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
- security
- owasp
- owtf
- python
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
- oidc
- oidc-client
- typescript
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
The SpecterOps project management and reporting engine
- reporting
- penetration-testing
- red-team
- informationsecurity
Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!
Collection of various malicious functionality to aid in malware development
- malware
- malware-development
- malware-research
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
- netcat
- ncat
- nc
- port-forwarding
Go login handlers for authentication providers (OAuth1, OAuth2)
ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server
- asn
- asn-lookup
- autonomous-systems
- ip-lookup
Google Dorks | Google helps you to find Vulnerable Websites that Indexed in Google Search Results. Here is the latest collection of Google Dorks. A collection of 13.760 Dorks. Author: Jolanda de Koff
- dorks
Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards.
- automation
- gemini-ai
- generative-ai
- pentest-tool
Ruby's Most Advanced Authentication Framework
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
library for importing functions from dlls in a hidden, reverse engineer unfriendly way
- anti-reversing
- import
- export
- windows
Educational, CTF-styled labs for individuals interested in Memory Forensics
BouncyCastle.NET Cryptography Library (Mirror)
- bouncycastle
- cryptography
- dtls
- encryption
ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。
- payload
- security
- dictionary
- fuzz
A simple python library to interact with Microsoft Graph and Office 365 API
- python
- microsoft-graph-api
- onedrive
- mailbox
Port of TweetNaCl cryptographic library to JavaScript
- crypto
- javascript
- authentication
- signature
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation