Repository Index

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

• password-sniffer
• mitm
• rogue-ap
• wifi

Directory/File, DNS and VHost busting tool written in Go

• go
• pentesting
• tool
• dns

Common User Passwords Profiler (CUPP)

• wordlist-generator
• wordlist
• dictionary-attack
• password

:busts_in_silhouette: A bash-tool to store your private data inside a git repository.

• git-secret
• git
• git-addons
• gpg

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

• dfir
• threat
• hunting
• windows

Potentially dangerous files

• list
• web
• vulnerability
• files

A tool to abuse Exchange services

• mapi
• exchange
• shells
• pentesting

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

• ida-plugin
• taint-analysis
• reverse-engineering
• disassembly

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool

Robust, modular, and extendable user authentication system

• phoenix
• authentication
• authorization
• user-management

🐧 Abuse of Google Colab for cracking hashes.

A friendly car security exploration tool for the CAN bus

• python
• can-bus
• security-scanner
• security-testing

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

Run programs on linux with selectively restricted permissions.

• python
• security
• containers
• docker

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

Robust ABC (ActionScript Bytecode) [Dis-]Assembler

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest

A USB proxy based on raw-gadget and libusb

• usb
• proxy
• libusb
• otg

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability

:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP

• ldap
• postgresql
• yaml
• roles

quick and dirty canbus h4xing framework

• automotive-security
• canbus
• car-hacking

A framework for receiving and redistributing abuse feeds

Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.

• crtsh
• cve
• cve-2026-109618
• cve-2026-109619