68,261 visible repositories in the index
73–96 of 105 · Most stars
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
passfab-unlocker: Standalone Offline Password Recovery Solution
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
Documenting the unofficial and internal Steam Web API
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
Discover internet-wide misconfigurations while drinking coffee
[MIRROR] unofficial implementation of Dante protocol (Audio over IP)
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
A post exploitation framework for advanced Red Team operations
Offline NVIDIA Blackwell VBIOS editor.
Toggle the iPhone call-recording announcement on/off from a Windows GUI, built on the airlift AirTraffic sandbox escape.
Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.
Supply Chain Security Research - Living Off The Pipeline tools
Open-source agentic security operations platform:
UnTangled — the easy, modern web interface for OpenWRT. A friendly LuCI alternative: Network Map, Mesh Wi-Fi, parental controls, VPN, QoS. ~75 KB, offline-first, runs alongside LuCI.
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.