GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)
- graphql
- sql-injection
- nosql-injection
- graphql-injection
Repository Index
85,578 visible repositories in the index
1,177–1,200 of 2,439 · Most stars
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
- otp
- otpauth
- python
- recovery
A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.
CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
- cipher
- data-exfiltration
- hacking
- pentesting
A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.
- frida
- reverse-engineering
- mobile
- ios
BinAbsInspector: Vulnerability Scanner for Binaries
- binary-analysis
- ghidra
- reverse-engineering
- security
Albanian Hacking Tool!! Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery, Anonymous-sms, Webcam Hack • Powerful DDOS attack tool!! Operating System Requirements works on any of the following operating systems: • Android • Linux • Unix
- albania
- ddos-attacks
- ethical-hacking
- gmail-bomber
A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
- security-tools
- security
- ip
- bypass
🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.
- git
- web-security
- githack
TFHE-rs: A Pure Rust implementation of the TFHE Scheme for Boolean and Integer Arithmetics Over Encrypted Data.
- cryptography
- homomorphic-encryption
- rust
- tfhe
goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.
- rbac
- go
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
An unopinionated authentication library for building Node.js APIs.
This is the upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools. The software provided by this project complements the SELinux features integrated into the Linux kernel and is used by Linux distributions. All bugs and patches should be submitted to [email protected]
Utilities for Sysmon
- sysmon
- threatintel
- sysinternals
- threat-hunting
Unlocking the Full Potential of OPC UA with Typescript and NodeJS - http://node-opcua.github.io/
- iot-platform
- opc-ua
- node-opcua
- nodejs
A Powershell incident response framework
A React Native library providing support for Apple Authentication on iOS and Android.
Robust, modular, and extendable user authentication system
- phoenix
- authentication
- authorization
- user-management
Interactive CTF Exploration Tool
- security
- reverse-engineering
- windows
- windows-internals
Network Infrastructure Penetration Testing Tool
- hacking
- infosec
- network-security
- pentesting
kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。
- proof-of-concept
- poc-library
- security-vulnerability
- security-testing
TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.
- appsec
- appsecurity
- burp-extensions
- burp-plugin
ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。
- serverscan
- pentest-tool
- security-scanner
- golang