:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
- gtfobins
- exploit
- privesc
- privilege-escalation
Repository Index
71,372 visible repositories in the index
145–168 of 1,194 · Most stars
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
- external-secrets
- kubernetes
- kubernetes-secrets
- secrets-manager
A native macOS KeePass client
- keepass
- kdbx
- macpass
- password-manager
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
- authentication
- nextjs
- oauth
- auth0
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
- devops
- penetration-testing
- vulnerability
- vulnerability-scanners
CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
- theos
- xcode
- reverse-engineering
- ios
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
- oauth2
- spring-boot
- spring-cloud
- spring-cloud-alibaba
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
An adversarial example library for constructing attacks, building defenses, and benchmarking both
Password manager app for Android
- password-manager
- android
- keepass
- keepass2
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
- automated-pentesting
- bruteforce
- cybersecurity
- e-paper
Run GUI applications and desktops in docker and podman containers. Focus on security.
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
- python
- attack
- adversarial-machine-learning
- poisoning
Ready-to-use and customizable users management for FastAPI
- python
- starlette
- fastapi
- async
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
Iceman Fork - Proxmark3
- nfc
- rfid
- mifare
- proxmark3
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
- attack
- auto
- golang
- hacker
TranslatedAn all-ages-friendly universal C# utility library, 码数吐司库 (Masuit Toast Library, "code number toast library"), containing commonly used operation classes, mostly static classes: encryption and decryption, reflection operations, weighted random selection algorithm, distributed short IDs, expression trees, LINQ extensions, file compression, multi-threaded downloading, hardware information, string extension methods, date and time extension operations, Chinese lunar calendar, large file copying, image cropping, captcha, resumable downloads, collection extensions, Excel export and other commonly used wrappers. Many features in one, with a code size of less than 2MB!
- lambda
- reflection
- datetime
- expression
A True Instrumentable Binary Emulation Framework
- binary
- emulator
- framework
- unicorn-emulator
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
Home to the Signal Protocol as well as other cryptographic primitives which make Signal possible.