Repository Index

A collaborative, multi-platform, red teaming framework

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

• decompiler
• vulnerability-scanners
• malware-analysis
• security-audit

Zero-knowledge proof acceleration with GPUs for C++ and Rust

• cpp20
• curve25519
• elliptic-curve-cryptography
• rust

IntelOwl: manage your Threat Intelligence at scale

• security-tools
• python
• threat-intelligence
• ioc

Open-source AI red teaming toolkit from Microsoft. Test generative AI systems with automated scans, adaptive multi-turn attacks, and a web UI.

• ai-red-team
• generative-ai
• red-team-tools
• responsible-ai

📦 Make security testing of K8s, Docker, and Containerd easier.

• penetration
• penetration-testing-tools
• kubernetes
• docker

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

• csharp
• situational-awareness

Covenant is a collaborative .NET C2 framework for red teamers.

• covenant
• dotnet
• dotnet-core
• c2

Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.

• android
• reverse-engineering
• smali
• apk-studio

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

Automatically builds GenP executables from source

• adobe
• adobe-creative-cloud
• genp
• patcher

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

• threat-hunting
• sysmon
• hunting-campaigns
• hypothesis

Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.

Android virtual machine and deobfuscator

• deobfuscation
• java
• optimization
• android

The Leading Security Assessment Framework for Android.

• drozer
• android
• security
• pentesting

An open-source framework for Steam Client themes and plugins

• reverse-engineering
• steam
• valve
• millennium

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

• penetrationtesting
• pentesting
• pentesting-tools
• penetration-testing

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

• reverse-engineering
• rop
• rop-exploitation
• rop-gadgets

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

• open-source
• pentest
• pentesting
• readteaming

easy-rsa - Simple shell based CA utility

TranslatedGodzilla

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management

• library
• web-framework
• shiro
• java

Diaphora, the most advanced Free and Open Source program diffing tool.

A Security Tool for Bug Bounty, Pentest and Red Teaming.

• vulnerability-scanner
• poc
• penetration-testing
• afrog