Repository Index

Find exploit tool

• exploit-database
• python
• pentest-tool
• exploits

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

Ultimate Javascript Object Signing and Encryption (JOSE), JSON Web Token (JWT) and Json Web Keys (JWK) Implementation for .NET and .NET Core

• jose
• jwt
• json
• jwa

:key: Hash type identifier (CLI & lib)

• security-tools
• hash
• identify
• digest

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf

Hacking Toolkit

• network-analysis
• networking
• scapy
• python3

🐧 Abuse of Google Colab for cracking hashes.

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

• bitlocker
• password-cracker
• cuda
• cryptography

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

• elliot
• cupp
• passwords
• hacking-tool

User-friendly OAuth2 CLI

• cli
• fapi
• oauth2
• openbanking

:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:

• docker
• images
• selfhosted
• picture

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

Zero-allocation hashing for Java

• java
• hashing
• high-performance
• farmhash

The AI Agent for Cyber Security.

• ai-agent
• ai-security
• appsec
• bug-bounty

Sandboxed Execution Environment

• python
• sandbox
• malware-analysis
• malware-research

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

• oauth2
• openid
• openid-connect
• oidc

Automatic and platform-independent unpacker for Windows binaries based on emulation

• reverse-engineering
• unpacker
• pefile
• windows

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

• ruby
• hacking
• infosec
• ctf-tools

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

• openid-connect
• admin-ui
• iam
• openid

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

RSA public/private key generation, RSA, AES encryption/decryption, RSA sign/verify in Swift with CommonCrypto in iOS and OS X

• ios
• crypt
• swift
• rsa