47,133 repositories indexed
1–24 of 80 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
A tool for reverse engineering Android apk files
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Program for determining types of files for Windows, Linux and MacOS.
RetDec is a retargetable machine-code decompiler based on LLVM.
Automated Adversary Emulation Platform
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
Android virtual machine and deobfuscator
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
The best way to build Electron apps with security in mind.
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
Ephemeral root via the CVE-2026-43284 page-cache exploit
A machine learning tool that ranks strings based on their relevance for malware analysis.