Tool to scan for secret files on HTTP servers
- security
- websecurity
47,133 repositories indexed
169–192 of 543 · Most stars
Tool to scan for secret files on HTTP servers
Reverse Shell as a Service
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
An authentication system generator for Rails applications.
The Offensive Manual Web Application Penetration Testing Framework.
Analyze the security of any domain by finding all the information possible. Made in python.
PHP Captcha library
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
CSRF protection middleware for Go.
Splunk Security Content
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
The best way to build Electron apps with security in mind.
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
Interactive CTF Exploration Tool
ICS/SCADA honeypot
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
Elastic Security detection content for Endpoint