Scriptable network authentication cracker
- rust
- cracking
- lua
- dictionary-attack
81,588 visible repositories in the index
145–168 of 189 · Most stars
Scriptable network authentication cracker
DDoS attacks over Tor
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
Respounder detects presence of responder in the network.
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
A USB proxy based on raw-gadget and libusb
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
C++ application that uses memory and code hooks to detect packers
Simple and secure hashing in Swift with the SipHash algorithm
Create adversarial attacks against machine learning Windows malware detectors
:hammer: A multiple reverse shell session/client manager via terminal
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
Android Mobile Device Hardening
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
Web interface to explore Suricata EVE outputs
brute force SSH public-key authentication
This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents