Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
- post-exploitation
- stealth
- linux
- hacking-tool
Repository Index
85,578 visible repositories in the index
1,105–1,128 of 2,439 · Most stars
Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
- extension
Open Source Intelligence Interface for Deep Web Scraping
- ahmia
- deep-web-search
- osint
- tor
Find interesting Amazon S3 Buckets by watching certificate transparency logs.
- cyber
- cyint
- amazon-s3
- certificate-transparency
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
- owasp
- api-security
- security
- bugbounty
Leapp is the DevTool to access your cloud
Kubernetes networking based on Open vSwitch
- kubernetes
- cni
- cncf
- networking
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
- bugbounty
- burp-extensions
- burpsuite
- bug-bounty
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.
- redteam
- security-tools
- fofa
- fofa-api
Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
Spring Boot JAR 安全加密运行工具，支持的原生JAR。
- springboot
- jar
- encryption
- decryption
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.
Real-world infosec wordlists, updated regularly
- bugbounty
- content-discovery
- directory-bruteforce
- hacking
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
copy & paste-friendly golang crypto
JSON Object Signing and Encryption library for PHP.
Gives you one-liners that aids in penetration testing operations, privilege escalation and more
- hacking
- hacking-tool
- web-delivery
- metasploit
Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal
- python3
- tui
- data
- recovery
:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)
- python
- two-factor
- authentication
- identityserver
jSQL Injection is a Java application for automatic SQL database injection.
- java
- sql-injection
- ctf-tools
- spring-boot
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess