Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
82,088 visible repositories in the index
145–168 of 1,063 · Most stars
Sysmon configuration file template with default high-quality event tracing
JSON Web Token implementation in Python
Snyk CLI scans and monitors your projects for security vulnerabilities.
The authorization Gem for Ruby on Rails.
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
The ultimate WinRM shell for hacking/pentesting
Bloaty: a size profiler for binaries
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
The full stack toolkit to build onchain app UX
Blazingly 🔥 fast 🚀 memory vulnerabilities, written in 100% safe Rust. 🦀
AIMSICD • Fight IMSI-Catcher, StingRay and silent SMS!
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
Cameradar hacks its way into RTSP videosurveillance cameras
Open Source Cloud Native Application Protection Platform (CNAPP)
Patch iOS Apps, The Easy Way, Without Jailbreak.
Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
TranslatedA knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.