instahack is a bash & python based script which is officially made to test password strength of Instagram account from termux and kali with bruteforce attack and. it based on tor This tool works on both rooted Android device and Non-rooted Android device. Best Tool For Instagram Bruteforce hacking Tool By Waseem Akram.
- hacking-tool
- termux-hacking
- bruteforce-password-cracker
- worldlist
Golang OAuth2 server library
Educational, CTF-styled labs for individuals interested in Memory Forensics
Open-source OSINT agent: 21 public-source tools behind natural-language chat, an MCP server and a Claude Code plugin. Passive by default, no keys to start.
BouncyCastle.NET Cryptography Library (Mirror)
node.js/express module to authenticate users without password
ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
Everything for pentest. | 渗透测试知识库,以 AI Agent 可执行的格式沉淀安全方法论。
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
A simple python library to interact with Microsoft Graph and Office 365 API
- python
- microsoft-graph-api
- onedrive
- mailbox
Port of TweetNaCl cryptographic library to JavaScript
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
构建优化高效的渗透 fuzz 字典合集
Situational Awareness commands implemented using Beacon Object Files
403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evidence.
hacking-tool termux-tools termux noob-friendly instagram-bot bruteforce-password-cracker wordlist-technique
ESP32-DIV HaleHound Edition for Cheap Yellow Display - Multi-protocol offensive security toolkit
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
- burpsuite
- burp-extensions
- tls
- tls-fingerprint
Check if phone numbers are connected to Telegram accounts.
无限流量灯,你懂的,我不解释
Web vulnerability scanner written in Python3
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
OSINT Tool: Generate username lists for companies on LinkedIn