🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Repository Index
47,133 repositories indexed
145–168 of 213 · Most stars
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
- ghidra
- llm-agent
- malware-analysis
- ollama
Protect your SIP Servers from bad actors at https://sentrypeer.org
- sip
- voip
- security-tools
- honeypot
Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.
A Java library that implements a ByteChannel interface over SSLEngine, enabling easy-to-use (socket-like) TLS for Java applications.
- java
- ssl
- tls
- networking
Minimal code to connect to a CEF debugger.
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
Goiabada is an OAuth2 / OpenID Connect server written in Go.
- identity-management
- oauth2
- openid-connect
- user-management
The repository host gives no description.
- omniauth
Toggle the iPhone call-recording announcement on/off from a Windows GUI, built on the airlift AirTraffic sandbox escape.
- airlift
- airtraffic
- ios
- sandbox-escape
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
TranslatedA domain searcher named GoogleSSLdomainFinder - a subdomain lookup tool based on Google SSL certificate transparency
- domain-scanner
- subdomain
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
OAuth 2.x and OpenID Connect C library
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
A blade runner for your network. Detects shadow AI agents before they go rogue.
Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
- authentication
- authorization
- identity-management
- oauth2
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
The repository host gives no description.
a low-interaction honeypot