General Rack Authentication Framework
Repository Index
83,586 visible repositories in the index
793–816 of 2,358 · Most stars
Generates permutations, alterations and mutations of subdomains and then resolves them
Search and browse documents and data; find the people and companies you look for.
- python
- data-search
- graph-database
- journalism
SSRF (Server Side Request Forgery) testing resources
OAuth 2.0 social authentication providers for ASP.NET Core
- aspnetcore
- oauth2
- social-authentication
Web app that provides basic navigation and annotation of ATT&CK matrices
- cti
- cyber-threat-intelligence
- mitre-attack
- mitre-corporation
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- rita
- network-traffic
- threat
- scanning
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
A Go OpenID Connect client.
- golang
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
❌ Cargo plugin for linting your dependencies 🦀
- cargo
- rust
- crates
- advisories
Provides a tight integration of the Security component into the Symfony full-stack framework
Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in real-time for logistics or safety, redefining how we navigate our surroundings
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!
ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
- vulnerability-assessment
- vulnerabilities
- scanning
- pentesting
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
- wlan
- wpa
- wpa2
- raspberry-pi
Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
- security-tools
- monitor
- bugbounty
- security-automation
A simple keylogger for Windows, Linux and Mac
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
Conference presentation slides
- blackhat
- cybersecurity
- cybersecurity-conference
- offensivecon