Chrome extension and Express server that exploits keylogging abilities of CSS.
Repository Index
79,350 visible repositories in the index
97–120 of 285 · Most stars
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
- ai-agents
- bug-bounty
- cybersecurity
- offensive-security
:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
- exploits
- cve
- cve-2021-33739
- cve-2021-26868
💯一款Android脱壳工具，需要xposed支持, 易开发已集成该项目。
Exploring possibilities of ESP32 platform to attack on nearby Wi-Fi networks.
- esp32
- wpa2-handshake
- pmkid
- wifi-security
HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux
Interesting APT Report Collection And Some Special IOCs
C library for prototyping and experimenting with quantum-resistant cryptography
- cryptography
- key-exchange-algorithms
- lattice-based-crypto
- post-quantum-cryptography
Quickly discover exposed hosts on the internet using multiple search engines.
- asm
- attack-surface
- bugbounty
- cli
This is a tool to repackage apk file, then the apk can load any xposed modules installed in the device. It is another way to hook an app without root device.
- xpatch
- xposed
- hook
- whale
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.
- penetration-testing
- penetration
- testing
- tools
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- android-application
- security-analysis
- dynamic-analysis
- xposed
:collision: A boilerplate application for building RESTful APIs Microservice in Node.js using express and mongoose in ES6 with code coverage and JsonWebToken Authentication
自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！
- hack-tools
- hacker
- hacking
- nuclei
Evil-M5Project is an innovative tool developed for ethical hacking and exploration of WiFi networks. It's compatible with Cardputer, Atoms3, Fire, core2. You can scan, monitor, and interact with WiFi networks in a controlled environment. This project is designed for educational purposes, aiding in understanding network security and vulnerabilities
JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）
Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
Exploit chain for PS5 7.00 - 13.60
Decompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!
- angr
- decompiler
- ghidra
- ida-pro
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)
Hex-Rays Decompiler plugin for better code navigation
shiro反序列化漏洞综合利用（仅限授权测试使用）
- shiro
- shiro-security
- shiroexp
- shiro550
A Coverage Explorer for Reverse Engineers
- ida-pro
- idapython
- hexrays
- code-coverage