Discover internet-wide misconfigurations while drinking coffee
- cybersecurity
- scanner
- golang
- osint
Repository Index
47,133 repositories indexed
73–96 of 109 · Most stars
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
Scans for accessibility tools backdoors via RDP
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Android Mobile Device Hardening
- forensic
- security
- hardening
- android-security
Protect your SIP Servers from bad actors at https://sentrypeer.org
- sip
- voip
- security-tools
- honeypot
Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.
Windows Live Artifacts Acquisition Script
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
TranslatedA domain searcher named GoogleSSLdomainFinder - a subdomain lookup tool based on Google SSL certificate transparency
- domain-scanner
- subdomain
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Scans SPF and DMARC records for issues that could allow email spoofing.
Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability
Detect and log CVE-2019-19781 scan and exploitation attempts.
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
- crowdsec
- intrusion-detection
- intrusion-detection-system
- intrusion-prevention
Control Flow Graph Scanning for Android
An ICAP Server with yara scanner for URL and content.
- python
- icap-server
- yara
- malware-analysis