MongoDB session store for Express
Repository Index
87,573 visible repositories in the index
97–120 of 238 · Most stars
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Passive Security Scanner (被动式安全扫描器)
- security-tools
- passive-vulnerability-scanner
Open-source OSINT agent: 21 public-source tools behind natural-language chat, an MCP server and a Claude Code plugin. Passive by default, no keys to start.
A library for implementing authentication/authorization in Ember.js applications.
Global threat map. Learn wars, conflicts, military bases and history of nations.
- intelligence
- nato
- osint
- osint-tool
OSINT power without API key hassle
Analyze the security of any domain by finding all the information possible. Made in python.
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
- web
- application
- scanner
- osint
Passive hostname, domain and IP lookup tool for non-robots
Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
- post-exploitation
- stealth
- linux
- hacking-tool
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
- bugbounty
- burp-extensions
- burpsuite
- bug-bounty
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
An authorization library that supports access control models like ACL, RBAC, ABAC in Python
- casbin
- python
- pycasbin
- access-control
KeePass-compatible password manager for iOS and macOS
- keepass
- password-manager
- ios
- keepassxc
The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.
A network sniffer that logs all DNS server replies for use in a passive DNS setup
Professional ACME Client for Windows (and now cross-platform via Certify Management Hub). Certificate Management UI, powered by Let's Encrypt and compatible with all ACME v2 CAs. Used by over 150,000 organisations. Download from certifytheweb.com
- ssl-certificate-manager
- letsencrypt
- iis
- ssl
Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
- hacking-tool
- geolocation
- iptracker
- latitude-longitude-finder
A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
- gitleaks
- regex
- regular-expression
- regular-expressions
Add Authentication to Nuxt applications with secured & sealed cookies sessions.
- authentication
- nuxt
- nuxt-auth
- nuxt-module