77,353 visible repositories in the index
169–192 of 1,094 · Most stars
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
The full stack toolkit to build onchain app UX
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
Adversary simulation and Red teaming platform with AI
Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
Open Source Cloud Native Application Protection Platform (CNAPP)
Allows you to emulate an Android native library, and an experimental iOS emulation
Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
Grab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.
Bruteforce attack for Instagram.
Automated Mass Exploiter
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Trying to tame the three-headed dog.
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.
Small portable AES128/192/256 in C