47,133 repositories indexed
1–24 of 53 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Directory/File, DNS and VHost busting tool written in Go
Program for determining types of files for Windows, Linux and MacOS.
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
An FTP and FTPS client for .NET & .NET Standard, optimized for speed. Provides extensive FTP commands, File uploads/downloads, SSL/TLS connections, Automatic directory listing parsing, File hashing/checksums, File permissions/CHMOD, FTP proxies, FXP support, UTF-8 support, Async/await support, Powershell support and more. Written entirely in C#.
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
Investigate malicious Windows logon by visualizing and analyzing Windows event log
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
Find web directories without bruteforce
Improve your security and privacy by blocking ads, tracking and malware domains.
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
Linux Binary Exploitation
Bloodhound Reporting for Blue and Purple Teams
🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition
Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers
Detect deauthentication frames using an ESP8266
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Elixir encryption library designed for Ecto