A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Repository Index
57,138 visible repositories in the index
97–120 of 233 · Most stars
The most complete open-source tool for Twitter intelligence analysis
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
Ruby's Most Advanced Authentication Framework
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
NIST Certified SCAP 1.2 toolkit
- scap
- xccdf
- oval
- cpe
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Small utilities that are useful in advanced password cracking
An OpenID Connect reference implementation in Java on the Spring platform.
Secure Vault for Customer PII/PHI/PCI/KYC Records
- gdpr
- pii
- piidata
- security
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
ThePhish: an automated phishing email analysis tool
Advanced Honeypot framework.
BKN Foundry is the Ontology back-end foundation of OpenBKN. It transforms ontology-driven business semantics into runtime services: data, logic, actions, security governance, and observability.
- ontology
- ontology-engineering
- ontology-platform
- opensource-ontology-platform
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
Coherence is a full featured, configurable authentication system for Phoenix
- elixir
- phoenix-framework
- authentication
- hex
Software Supply Chain Transparency Log
- supply-chain
- provenance
- security
- transparency-log
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
A Laravel 5.8 API Boilerplate to create a ready-to-use REST API in seconds.
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.