The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Repository Index
54,641 visible repositories in the index
121–144 of 305 · Most stars
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
The repository host gives no description.
- defcon
- android
- blackhat
- blackbox
The best way to build Electron apps with security in mind.
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Modern encryption for Ruby and Rails
- encryption
- activerecord
- activestorage
- carrierwave
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
Elastic Security detection content for Endpoint
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
- frida
- mobile
- pentest-tool
- android
Creates up to a thousand WiFi access points with custom SSIDs.
- ssid
- custom-ssids
- wifi
- esp8266
SImple, common-sense Bitcoin-themed Python ECC library
Full featured multi arch/os debugger built on top of PyQt5 and frida
- frida
- pyqt5
- reverse-engineering
- cracking
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
Automated Red Team Infrastructure deployement using Docker
Ephemeral root via the CVE-2026-43284 page-cache exploit
- android
- android-root
- android-security
- cve-2026-43284
Collection of android malware samples
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
TranslatedDeepSeek Harness integrated armor-breaking security analysis plugin: aggregating all domains of Android · Web · Native · Protocol · Malware · AI-Security (9 bundles + 1 preset)
- dsh-plugin
- cordis
- deepseek-harness
- dsh
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
- android-unpacker
- gdb
- qemu
- reverse-engineering
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
A Laravel 5.8 API Boilerplate to create a ready-to-use REST API in seconds.
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
A Rust implementation of the Noise Protocol Framework
- cryptography
- crypto
- noise-protocol-framework
- noise-protocol
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar