Repository Index

The most complete open-source tool for Twitter intelligence analysis

• osint
• socmint
• socialmedia
• twitter

Directory Services Internals (DSInternals) PowerShell Module and Framework

• security-audit
• penetration-testing
• active-directory
• nuget-packages

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

• cryptography-library
• cryptography
• security
• golang

On the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt.

• letsencrypt
• openresty
• nginx
• ssl

Support for OAuth 2 and OpenId Connect (OIDC) in Angular.

NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques

• nuclei
• nuclei-templates
• fuzzing-templates
• nucleifuzzer

Two-factor authentication on the command line

Passport authentication using JSON Web Tokens

Next-Generation Linux Kernel Exploit Suggester

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

• burp-extensions
• burpsuite-extender
• update-cookie
• cookie

IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations

• binary-analysis
• decryption
• deobfuscation
• hexrays

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

• security
• owasp
• owtf
• python

OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications

• oidc
• oidc-client
• typescript

The SpecterOps project management and reporting engine

• reporting
• penetration-testing
• red-team
• informationsecurity

Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

Collection of various malicious functionality to aid in malware development

• malware
• malware-development
• malware-research

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

• netcat
• ncat
• nc
• port-forwarding

Go login handlers for authentication providers (OAuth1, OAuth2)

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server

• asn
• asn-lookup
• autonomous-systems
• ip-lookup

Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards.

• automation
• gemini-ai
• generative-ai
• pentest-tool

Ruby's Most Advanced Authentication Framework

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

• pentesting
• vulnerability-scanner
• exploitation

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

• pentesting
• redteam
• security-tools
• exploit

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

• anti-reversing
• import
• export
• windows