Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
- powershell
- nishang
- security
- red-team
Repository Index
60,121 visible repositories in the index
73–96 of 799 · Most stars
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
- investigation
- osint
- recon
- python
TranslatedOneForAll is a powerful subdomain collection tool
- subdomain
- subdomain-scanner
- subdomain-enumeration
- subdomain-bruteforcing
Perform data science on data that remains in someone else's server
- deep-learning
- secure-computation
- pytorch
- privacy
Let's Encrypt/ACME client and library written in Go
- letsencrypt
- acme
- certificate
- tls
Transparent file encryption in git
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
An open-source post-exploitation framework for students, researchers and developers.
- encrypted-connections
- platform-independent
- no-dependencies
- reverse-shells
📱 objection - runtime mobile exploration
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Testing TLS/SSL encryption anywhere on any port
- tls
- cipher
- openssl
- ct
Go implementation of JSON Web Tokens (JWT).
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- java
- deserialization
- gadget
- exploit
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
A vault for securely storing and accessing AWS credentials in development environments
- aws
- iam
- temporary-credentials
- keychain
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
- security-tools
- osint
- recon
- recon-engine
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
- lolbins
- lolscripts
- redteam
- blueteam
The ESP32-BlueJammer (Bluetooth jammer, BLE jammer, WiFi jammer, RC jammer) disrupts 2.4GHz communications. Using an ESP32 and nRF24 modules, it generates noise and unnecessary packets, causing interference between the devices communicating, making them unable to work as intended. Ideal for controlled disruption and security testing.
- bluetooth
- bt
- coding
- cybersecurity
windows-kernel-exploits Windows平台提权漏洞集合
Malicious traffic detection system
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.