"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Repository Index
47,133 repositories indexed
121–144 of 257 · Most stars
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
BCrypt.Net - Bringing updates to the original bcrypt package
- blowfish
- bcrypt
- c-sharp
- algorithm
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
🔐 A CLI tool to extract server certificates
Fastest 5KB JS implementation of secp256k1 signatures and ECDH
- secp256k1
- ecdsa
- ecc
- cryptography
Small package to allow adding security headers to ASP.NET Core websites
- hacktoberfest
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
Script to create templates to use with VirtualBox to make vm detection harder
- virtualbox
- antivm
- sandbox
- malware-analysis
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
- readme
- documentation
- docs
- docs-generator
Security Auditor Utility for GraphQL APIs
Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
- agent
- blue-team
- cybersecurity
- cybersecurity-tools
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)