Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
Repository Index
47,133 repositories indexed
73–96 of 104 · Most stars
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
- ai-agents
- attack-surface-management
- docker
- penetration-testing
A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
- deceptive-webpages
- web-cloner
- honeypot
- deception
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
- ai-security
- cybersecurity
- ids
- iot-security
Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.
- wordlist
- wikipedia
- dictionary
- attack
Google Summer of Code 2012 project, supported by The Honeynet Project organization.
Agentic LLM CTF to test prompt injection attacks and preventions
Encrypts 64-bit elf files that decrypt at runtime.
- elf64
- linux
- elf-binaries
- elf-parser
AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
- hashcat
- jtr
- mdxfind
- ngram
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]