UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
Repository Index
47,133 repositories indexed
121–144 of 528 · Most stars
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
Search and browse documents and data; find the people and companies you look for.
- python
- data-search
- graph-database
- journalism
A fork and successor of the Sulley Fuzzing Framework
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Bleeding edge django template focused on code quality and security.
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- fakenet-ng
- traffic-redirection
- malware-analysis
- mandiant-flare
Super timeline all the things
IAM Least Privilege Policy Generator
Tool to scan for secret files on HTTP servers
- security
- websecurity
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
- adversarial-ai
- claude-code
- cursor
- electron-security
A curated list of resources related to Industrial Control System (ICS) security.
- hacktoberfest
- ics
- iiot
- security
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
Find web directories without bruteforce
The most complete open-source tool for Twitter intelligence analysis
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
Awesome Django authorization, without the database
- python
- django
- permissions
- rules
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Analyze the security of any domain by finding all the information possible. Made in python.
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact