A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
- security-audit
- penetration-testing
- penetration-test
- virtual-hosts
47,133 repositories indexed
73–96 of 145 · Most stars
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Automated Red Team Infrastructure deployement using Docker
Tesla Mod — Flipper Zero & ESP32. Nag killer, FSD region unlock, track mode, BMS dashboard, blind spot alert, high beam strobe, CAN capture, steering mode + more. Works via OBD-II or X179 connector.
Generate smart and powerful wordlists
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
A collection of android Exploits and Hacks
:key: Hash type identifier (CLI & lib)
Hacking Toolkit
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
ebpfkit is a rootkit powered by eBPF
The AI Agent for Cyber Security.
Security analysis toolkit for proprietary car protocols
A collection of OSX and iOS security resources
Data Hacking Project
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Security Auditor Utility for GraphQL APIs
A curated list of awesome resources about Electron.js (in)security
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
List of Bluetooth BR/EDR/LE security resources
a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE
MCP (Model Context Protocol) server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools -- designed to be plugged into Claude, Cursor, or any MCP-compatible client.
Samsung Tizen root