Low bandwidth DoS tool. Slowloris rewrite in Python.
- dos
- dos-attack
- penetration-testing
- pentesting
Repository Index
81,588 visible repositories in the index
73–96 of 189 · Most stars
A toolset to make a system look as if it was the victim of an APT attack
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
💤 Kick devices off your network by performing an ARP Spoof attack.
- spoofing
- python
- wireless
- hacking
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
shiro反序列化漏洞综合利用（仅限授权测试使用）
- shiro
- shiro-security
- shiroexp
- shiro550
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
- attack-range
- attack-simulation
- adversary
- simulation
Security sensor for realtime threat detection and protection
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
- brute-force-attacks
- bruteforce
- credential-testing
- cybersecurity
Powerful framework for rogue access point attack.
- wifipumpkin3
- accesspoint
- security
- mitm
Web app that provides basic navigation and annotation of ATT&CK matrices
- cti
- cyber-threat-intelligence
- mitre-attack
- mitre-corporation
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
- aws
- adversary-emulation
- purple-team
- mitre-attack
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
Set of tools to analyze Windows sandboxes for exposed attack surface.
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
- active-directory
- powershell
- redteaming
- penetration-testing
Automatically brute force all services running on a target.
- brute-force
- bruteforce
- bruteforcing
- bruteforce-attacks
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- crack
- zip
- multithread
- attack
dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
- blueteam
- active-directory
- activedirectory
- acl
Bruteforce attack on Facebook account using python script
- brute-force-attacks
- python
- facebook-account
- facebook-bruteforce
Detection tools for the June 2026 atomic-lockfile AUR supply-chain attack. Consolidated from community Gists.
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
- ctid
- cybersecurity
- threat-informed-defense
- mitre-attack
Master Federated Learning in 2 Hours—Run It on Your PC!
- non-iid
- federated-learning
- personalization
- pytorch