47,133 repositories indexed
97–120 of 213 · Most stars
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
Bluetooth experimentation framework for Broadcom and Cypress chips.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!
Best Current Practices regarding secure online communication and configuration of services using cryptography.
List DTDs and generate XXE payloads using those local DTDs.
Modular file scanning/analysis framework
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
DFIRTrack - The Incident Response Tracking Application
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
A secure password manager for macOS,Linux and Windows platforms
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
Samsung Tizen root
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
dll injection tool that implements various methods
Security profiling for blackbox Android
AVClass malware labeling tool
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
A Linux packet crafting tool.