LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
- reverse-engineering
- malware-analysis
- binary-analysis
- parser
Repository Index
78,351 visible repositories in the index
97–120 of 644 · Most stars
Dshell is a network forensic analysis framework.
Blazingly 🔥 fast 🚀 memory vulnerabilities, written in 100% safe Rust. 🦀
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
- php
- hashids
- database-ids
- php-library
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
- aws-security
- penetration-testing
- aws
- security
An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
Grab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.
- hacking
- kali-linux
- hack
- termux
TranslatedA knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
- poc
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
- phone-number
- signal
- tracking
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
eBPF-based Security Observability and Runtime Enforcement
Hunt for security weaknesses in Kubernetes clusters
- vulnerabilities
- kubernetes-clusters
- hacktoberfest
Small portable AES128/192/256 in C
This repository contains the scanner component for Greenbone Community Edition.
- openvas
- vulnerability
- vulnerability-scanners
- vulnerability-detection
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A collaborative, multi-platform, red teaming framework
FirebaseUI is an open-source JavaScript library for Web that provides simple, customizable UI bindings on top of Firebase SDKs to eliminate boilerplate code and promote best practices.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
- decompiler
- vulnerability-scanners
- malware-analysis
- security-audit
A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
- android
- android-development
- bootloader
- bootloader-unlock
📦 Make security testing of K8s, Docker, and Containerd easier.
- penetration
- penetration-testing-tools
- kubernetes
- docker
Automatically builds GenP executables from source
- adobe
- adobe-creative-cloud
- genp
- patcher