:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Repository Index
47,133 repositories indexed
73–96 of 280 · Most stars
DIE engine
- signature
- reverse-engineering
- unpacker
- yara
Chrome extension and Express server that exploits keylogging abilities of CSS.
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- mobile-security
- android-security
- frida
- reverse-engineering
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.
- flutter
- password-manager
- password-store
- android
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
Reko is a binary decompiler.
- decompiler
- dotnet
- decompiler-engine
- decompile
Security sensor for realtime threat detection and protection
Optimized C library for EC operations on curve secp256k1
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
- adversarial-ai
- claude-code
- cursor
- electron-security
A collection of JavaScript engine CVEs with PoCs
- javascript
- cve
- vulnerability
Parsing ELF and DWARF in Python
- debugging
- dwarf
- elf
- elf-binaries
Binary Analysis Platform
- binary-analysis
- reverse-engineering
- program-analysis
- static-analysis
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- crack
- zip
- multithread
- attack
Minimalistic web app designed for sending private and secure notes.
- end-to-end-encryption
- minimalist
- note
- pastebin
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- ida-plugin
- taint-analysis
- reverse-engineering
- disassembly
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration