The Browser Exploitation Framework Project
Repository Index
47,133 repositories indexed
73–96 of 550 · Most stars
Credentials recovery project
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
- firefox
- anti-tracking
- mozilla
- privacy
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
This is a webshell open source project
- webshell
- webshell-sniper
- php
- jsp
Help secure Express apps with various HTTP headers
- javascript
- middleware
- security
- helmet
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
Cloud Native Runtime Security
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
- javascript
- mithril
- encryption
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
- python
- cryptography
Automated ACME SSL certificate generation for nginx-proxy
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
- rsa-attack
- rsa
- cryptography
[DEPRECATED] Stanford Javascript Crypto Library
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity