Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Repository Index
47,133 repositories indexed
193–216 of 257 · Most stars
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
A flexible playground for Android CTF challenges.
- android
- ctf
- cybersecurity
- playground
Kustomize generator plugin that generates Secrets from sops-encrypted files
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Collection of ssl verification functions for Erlang
Git manager for pentesters
A honeypot for malware that propagates via USB storage devices
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
A whole bunch of public pentest reports & papers
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
Dynamically generate self-signed certificates and certificate authorities for Go tests
- golang
- certificate-generation
- go
- testing
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
eBPF Security Monitoring and Sandboxing Agent Based on Aya