84,085 visible repositories in the index
1,417–1,440 of 2,380 · Most stars
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
A simple, semantic and developer-friendly crypto package for golang
The repository host gives no description.
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
macOS (& ios) Artifact Parsing Tool
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
A captcha library that generates audio and image CAPTCHAs.
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
:honey_pot: A fake Django admin login screen page.
A server side OAuth2 Bundle for Symfony
PHP 5.3+ oAuth 1/2 Client Library
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Simple yet powerful authorization / authentication client library for Python web applications.
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
PagerDuty's Incident Response Documentation.
A public release of the Steal My Bitcoin challenge
Python low-interaction honeyclient
Seemingly normal USB drive with a hidden security feature
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Find exploit tool
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.