A fully automated HTTPS server powered by Nginx, Let's Encrypt and Docker.
Repository Index
63,269 visible repositories in the index
73–96 of 289 · Most stars
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
- messaging
- authentication
- key-management
- identity
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
企业级的 Go 语言实战项目：认证和授权系统（带配套课程）
- go
- project
- gin
- golang
Decrypted content of eqgrp-auction-file.tar.xz
- exploits
- shadowbrokers
- equationgroup
- hacking
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony
Bitwarden-compatible server running on Cloudflare Workers
- bitwarden
- cloudflare-workers
- password-manager
- self-hosted
Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
Complete, compliant and well tested module for implementing an OAuth2 Server/Provider with express in node.js
- oauth2-server
pull decrypted ipa from jailbreak device
- dumpdecrypted
- ios
- reverse-engineering
- ipa
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
- hackerone
- bugcrowd
- bug
- bounty
ipsets dynamically updated with firehol's update-ipsets.sh script
- blocklists
- ipset
- ipset-lists
- attacks
A highly specialized reverse-engineering pipeline designed to structurally transplant original Vanilla character models into the EverQuest Online Adventures: Frontiers (PS2) game engine, resolving complex Vector Unit 1 (VU1) shader bugs, Emotion Engine (EE) memory overflows, and PS2 CDVDman hardware faults.
- assets
- eqoa
- eqoa-frontiers
- game
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
- pe-format
- hooking
- pe-dumper
- pe-analyzer
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Find domains and subdomains related to a given domain
Open-source AI-powered offensive security harness for automated penetration testing.
- agents
- ai-hacking
- ai-penetration-testing
- ai-pentesting
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
- argon2id
- blazor
- dotnet
- password-manager