Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
JA4+ is a suite of network fingerprinting standards
Cyber Threat Intelligence Repository expressed in STIX 2.0
- stix
- cti
- cyber-threat-intelligence
- attack
A React Higher Order Component (HOC) for handling Authentication and Authorization with Routing and Redux
The next-generation CTF Swiss Army Knife powered by Rust & Tauri. Features a visual node-based workflow and local AI intelligence for extreme performance and automation.China's first CTFTools framework.
- python
- ctf-tools
- framework
- ctf
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
- crawler
- information-gathering
- cms-detector
- cloudflare-detection
ignorant allows you to check if a phone number is used on different sites like snapchat, instagram.
- phone-number
- trio
- snapchat
- instagram
Venom - A Multi-hop Proxy for Penetration Testers
Know the dangers of credential reuse attacks.
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
- appkit
- cleanmymac
- cleanmymac-alternative
- darwin
EncFS: an Encrypted Filesystem for FUSE.
Asset discovery and identification tools 快速识别 Web 指纹信息,定位资产类型。辅助红队快速定位目标资产信息,辅助蓝队发现疑似脆弱点
Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic report generation.
- osint
- python
- searchphone
- api-scraping
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
A database of PHP security advisories
- composer
- packagist
- php
- vulnerabilities
A standalone, specification-compliant, OAuth2 server written in Golang.
- go
- golang
- oauth2-server
- oauth2
A Go implementation of the 64-bit xxHash algorithm (XXH64)
Python Social Auth - Application - Django
Open-Source Shellcode & PE Packer
- shellcode
- antivirus-evasion
- redteam
- hacktoberfest
This tool gives information about the phone number that you entered.
- osint
- osint-tool
- advanced-osint-tool
- advanced
Tool for advanced mining for content on Github
- gitminer
- information-gathering-tool
- git-mining-tool
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.