A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
Repository Index
47,133 repositories indexed
145–168 of 512 · Most stars
Magical Authentication
- sorcery
- authentication
- rails
- ruby
Crack password hashes without the fuss :cat2:
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
Django Simple Captcha is an extremely simple, yet highly customizable Django application to add captcha images to any Django form.
ThePhish: an automated phishing email analysis tool
A .NET implementation of TOTP and HOTP for things like two-factor authentication codes.
☁️ Python package for interacting with Steam
- steam
- valve
- steamworks
- webapi
Coherence is a full featured, configurable authentication system for Phoenix
- elixir
- phoenix-framework
- authentication
- hex
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
- csrf-protection
- gorilla
- middleware
- golang
Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
PHP library for Two Factor Authentication (TFA / 2FA)
- qrcode
- php
- two-factor
- twofactorauth
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
- apache-httpd
- openid-connect
- openidconnect-client
- openidc
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Simple yet powerful authorization / authentication client library for Python web applications.
- python
- authentication
- oauth2-client
- oauth-client
Limit access to your Laravel applications by using invite codes
- php
- laravel
- laravel-package
- doorman