Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Repository Index
61,275 visible repositories in the index
73–96 of 415 · Most stars
Open-source Next.js template for building apps that are fully generated by AI. By E2B.
Simple session middleware for Express
- javascript
- nodejs
- expressjs
- middleware
Java implementation of JSON Web Token (JWT)
- dx-sdk
- java
- jwt
JPEXS Free Flash Decompiler (FFDec) is open-source Flash SWF decompiler and editor. Extract and edit ActionScript, images, sounds, shapes, fonts, and other SWF resources.
- flash
- swf
- decompiler
- editor
Role-based Permissions for Laravel 5
OpenPGP implementation for JavaScript
:mailbox_with_mail: Simple, private file sharing. Mirror of https://gitlab.com/timvisee/send
- firefox-send
- file-sharing
- file-upload
- encryption
a secure dotenv—from the creator of `dotenv`
- dotenv
- env
- dotenvx
- environment-variables
A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.
- browser-security
- cybersecurity
- de-anonymization
- ethical-hacking
Laravel wrapper around OAuth 1 & OAuth 2 libraries.
Simple OAuth library for Java
TranslatedPrivilege escalation code embedded in the Pinduoduo apk, and analysis of dynamically delivered dex
- pdd
AIMSICD • Fight IMSI-Catcher, StingRay and silent SMS!
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.
- frida
- android
- xposed
- apk
Allows you to emulate an Android native library, and an experimental iOS emulation
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
- android
- backdoor
- python
- reverse-shell
TranslatedA knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
- poc
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
TranslatedOpen-source SSL certificate management tool; fully automatic certificate application, update, and renewal; wildcard certificate and wildcard domain certificate application; automated certificate deployment to Alibaba Cloud, Tencent Cloud, hosts, Synology, and BaoTa (宝塔); HTTPS certificates, PFX certificates, DER certificates, TLS certificates, nginx certificates with automatic renewal and automatic deployment
- certbot
- letencrypt
- ssl-certificate
- automation