Open-Source Shellcode & PE Packer
- shellcode
- antivirus-evasion
- redteam
- hacktoberfest
Repository Index
47,133 repositories indexed
97–120 of 275 · Most stars
Reconnaissance Swiss Army Knife
- recon
- information-gathering
- honeypot-detector
- subdomain-enumeration
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
A One Time Password Authentication package, compatible with Google Authenticator.
- php
- 2fa
- two-factor-authentication
- google2fa
The new bridge between Burp Suite and Frida!
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
A network sniffer that logs all DNS server replies for use in a passive DNS setup
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
Authorization framework for Ruby/Rails applications
- rails
- authorization
- ruby
- hacktoberfest
Ncurses based XMPP client
- xmpp-client
- c
- xmpp
- chat
ICS/SCADA honeypot
- honeypot
- scada
- ics
- python
Static asset revisioning by appending content hash to filenames: `unicorn.css` → `unicorn-d41d8cd98f.css`
- gulp-plugin
- rev
- javascript
- hash
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
An OpenID Connect reference implementation in Java on the Spring platform.
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
ThePhish: an automated phishing email analysis tool
A utility to safely generate malicious network traffic patterns and evaluate controls.
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
Full featured multi arch/os debugger built on top of PyQt5 and frida
- frida
- pyqt5
- reverse-engineering
- cracking
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
☁️ Python package for interacting with Steam
- steam
- valve
- steamworks
- webapi