:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
- gtfobins
- exploit
- privesc
- privilege-escalation
Repository Index
77,852 visible repositories in the index
193–216 of 1,760 · Most stars
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
The all-in-one browser extension for offensive security professionals 🛠
- reverse-shell
- hacking
- hack-tools
- chrome-extension
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
autonomous red teaming platform; multi-agent offensive-security meta-harness
- agents
- ai
- multi-agent
- offensive-security
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
- authentication
- nextjs
- oauth
- auth0
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
- security
- ids
- ips
- nsm
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
- devops
- penetration-testing
- vulnerability
- vulnerability-scanners
Reproduce DeFi hacked incidents using Foundry.
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens
CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
- theos
- xcode
- reverse-engineering
- ios
Golang gRPC Middlewares: interceptor chaining, auth, logging, retries and more.
- grpc
- golang
- middleware
- generic-functions
Some out-of-the-box hooks for pre-commit
- pre-commit
- python
- linter
- refactoring
A library for patching, replacing and decorating .NET and Mono methods during runtime
- csharp
- patcher
- detour
- detours
A tool for recompiling Xbox 360 games to native executables.
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
- oauth2
- spring-boot
- spring-cloud
- spring-cloud-alibaba
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Linux privilege escalation auditing tool
- exploits
- privilege-escalation-exploits
- kernel-exploitation
- applicable-exploits
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
- waf
- fingerprint
- waffit
- web-application-firewall
Autonomous Hacking Agent for Red Team
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
- agent-framework
- ai-agents
- ai-safety
- compliance