Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Repository Index
70,234 visible repositories in the index
73–96 of 494 · Most stars
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
Open-source Next.js template for building apps that are fully generated by AI. By E2B.
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
- automated-pentesting
- bruteforce
- cybersecurity
- e-paper
Simple session middleware for Express
- javascript
- nodejs
- expressjs
- middleware
ACME client implemented as a simple shell-script – just add water
- certificate
- signing
- letsencrypt
- acme
The Official USB Rubber Ducky Payload Repository
- badusb
- ducky-payloads
- duckyscript
- hak5
:key: stateless open source password manager
- lesspass
- password-manager
- password
- passwords
JPEXS Free Flash Decompiler (FFDec) is open-source Flash SWF decompiler and editor. Extract and edit ActionScript, images, sounds, shapes, fonts, and other SWF resources.
- flash
- swf
- decompiler
- editor
OpenPGP implementation for JavaScript
:mailbox_with_mail: Simple, private file sharing. Mirror of https://gitlab.com/timvisee/send
- firefox-send
- file-sharing
- file-upload
- encryption
a secure dotenv—from the creator of `dotenv`
- dotenv
- env
- dotenvx
- environment-variables
A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.
- browser-security
- cybersecurity
- de-anonymization
- ethical-hacking
AI-powered bug bounty hunting toolkit that works with or without subscription.
- ai-security
- bug-bounty
- bugcrowd
- claude-ai
Snyk CLI scans and monitors your projects for security vulnerabilities.
- security
- monitor
- snyk
- vulnerabilities
The full stack toolkit to build onchain app UX
- walletconnect
- plugin
- widget
- ethereum
Simple OAuth library for Java
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.
- frida
- android
- xposed
- apk
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
- phone-number
- signal
- tracking
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
TranslatedOpen-source SSL certificate management tool; fully automatic certificate application, update, and renewal; wildcard certificate and wildcard domain certificate application; automated certificate deployment to Alibaba Cloud, Tencent Cloud, hosts, Synology, and BaoTa (宝塔); HTTPS certificates, PFX certificates, DER certificates, TLS certificates, nginx certificates with automatic renewal and automatic deployment
- certbot
- letencrypt
- ssl-certificate
- automation
AI-safe .env files: Schemas for agents, Secrets for humans.
- configuration
- dotenv
- env
- env-vars