Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
Repository Index
47,133 repositories indexed
145–168 of 753 · Most stars
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
Per object permissions for Django
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
- security
- limit
- ratelimter
- bruteforce
Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖
Laravel Eloquent roles and abilities.
- laravel
- authorization
- eloquent
- php
🛡 A GraphQL tool to ease the creation of permission layer.
- graphql
- permissions
- server
- shield
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
- devise
- rails
- authentication
- api
Collaborative forensic timeline analysis
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Network Analysis Tool
Potentially dangerous files
- list
- web
- vulnerability
- files
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
- asn1
- x509
- certificate
- crl
DIE engine
- signature
- reverse-engineering
- unpacker
- yara
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.
- steamkit2
- c-sharp
- nuget
- steam
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- mobile-security
- android-security
- frida
- reverse-engineering
Reverse engineering tool for Linux
- gdb
- cheat-engine
- reverse-engineering
- injection