MongoDB session store for Express
Repository Index
80,339 visible repositories in the index
841–864 of 1,819 · Most stars
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
- security
- owasp
- owtf
- python
Connect like there is no firewall. Securely.
GM SM2/3/4 library based on Golang (基于Go语言的国密SM2/SM3/SM4算法库)
- gm
- sm2
- sm3
- sm4
The SpecterOps project management and reporting engine
- reporting
- penetration-testing
- red-team
- informationsecurity
Fast Cross-Platform iOS Code Signing Tool
Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
- netcat
- ncat
- nc
- port-forwarding
ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server
- asn
- asn-lookup
- autonomous-systems
- ip-lookup
dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标
Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards.
- automation
- gemini-ai
- generative-ai
- pentest-tool
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.
library for importing functions from dlls in a hidden, reverse engineer unfriendly way
- anti-reversing
- import
- export
- windows
instahack is a bash & python based script which is officially made to test password strength of Instagram account from termux and kali with bruteforce attack and. it based on tor This tool works on both rooted Android device and Non-rooted Android device. Best Tool For Instagram Bruteforce hacking Tool By Waseem Akram.
- hacking-tool
- termux-hacking
- bruteforce-password-cracker
- worldlist
Golang OAuth2 server library
Educational, CTF-styled labs for individuals interested in Memory Forensics
Open-source OSINT agent: 21 public-source tools behind natural-language chat, an MCP server and a Claude Code plugin. Passive by default, no keys to start.
pwning IPv4 via IPv6
Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。
- payload
- security
- dictionary
- fuzz
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
Library for lifting machine code to LLVM bitcode
- x86
- x86-64
- aarch64
- llvm