NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)
- ab-testing
- ai-platform
- analytics
- backend-api
Repository Index
47,133 repositories indexed
121–144 of 165 · Most stars
Automation of some MAPT activities and interaction with the mobile Android device.
- android-analysis
- frida
- mobile-hacking
- mobile-penetration-testing
Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
Routopsy - Hacking Routers with Routers
🔍A cutting edge context aware GraphQL API fuzzing tool!
- api-testing-framework
- graphql
- api
- automated-testing
Wavestone's web interface for password cracking with hashcat
Latest hashcat docker for CUDA, OpenCL, and POCL. Deployed on Vast.ai
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
A flexible playground for Android CTF challenges.
- android
- ctf
- cybersecurity
- playground
Open-source agentic security operations platform:
- agentic-ai
- agentic-security
- agentic-workflow
- cyber-security
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Git manager for pentesters
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
A whole bunch of public pentest reports & papers
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
Dynamically generate self-signed certificates and certificate authorities for Go tests
- golang
- certificate-generation
- go
- testing
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.