Automatic SSTI detection tool with interactive interface
- information-security
- penetration-testing
- penetration-testing-tools
- pentest
Repository Index
81,337 visible repositories in the index
865–888 of 1,736 · Most stars
Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.
Ladon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。
- scanner
- portscan
- smbscan
- sshscan
OAuth 2.0 clients for popular providers
- authentication
- oauth2
- typescript
An Elixir Authentication System for Plug-based Web Applications
- elixir
- authentication
- authorization
- oauth2
Frida hook some jni functions
Professional ACME Client for Windows (and now cross-platform via Certify Management Hub). Certificate Management UI, powered by Let's Encrypt and compatible with all ACME v2 CAs. Used by over 150,000 organisations. Download from certifytheweb.com
- ssl-certificate-manager
- letsencrypt
- iis
- ssl
transparently encrypt files within a git repository
- encryption
- git
- gitattributes
- shell
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
WhatsApp Parser Toolset v1.59
- forensic-analysis
- whatsapp-parser
- whatsapp-encryption
OSINT tool to find breached emails, databases, pastes, and relevant information
- breaches
- breach
- osint
- emails
Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
- hacking-tool
- geolocation
- iptracker
- latitude-longitude-finder
Symfony Security Component - HTTP Integration
An anti detection version frida-server for android.
Open-source ConfigOps infrastructure ⚙️
- application-configuration
- configuration
- configuration-file
- configuration-management
GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)
- graphql
- sql-injection
- nosql-injection
- graphql-injection
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
- otp
- otpauth
- python
- recovery
Kerberos relaying and unconstrained delegation abuse toolkit
A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.
CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
- cipher
- data-exfiltration
- hacking
- pentesting
A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.
- frida
- reverse-engineering
- mobile
- ios
BinAbsInspector: Vulnerability Scanner for Binaries
- binary-analysis
- ghidra
- reverse-engineering
- security
Albanian Hacking Tool!! Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery, Anonymous-sms, Webcam Hack • Powerful DDOS attack tool!! Operating System Requirements works on any of the following operating systems: • Android • Linux • Unix
- albania
- ddos-attacks
- ethical-hacking
- gmail-bomber
TFHE-rs: A Pure Rust implementation of the TFHE Scheme for Boolean and Integer Arithmetics Over Encrypted Data.
- cryptography
- homomorphic-encryption
- rust
- tfhe