The ZAP by Checkmarx Core project
- zap
- zap-development
- dast
- appsec
Repository Index
47,133 repositories indexed
1–24 of 25 · Most stars
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
CTF framework and exploit development library
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
- rsa-attack
- rsa
- cryptography
PEDA - Python Exploit Development Assistance for GDB
The Leading Security Assessment Framework for Android.
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
Weaponized web shell
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
Interactive CTF Exploration Tool
- security
- reverse-engineering
- windows
- windows-internals
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Automated Attack Simulation in the Cloud, complete with detection use cases.
DNS Rebinding Exploitation Framework
A Linux packet crafting tool.
- packet-crafting
- networking
- hacking-tool
- intrusion-prevention
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Words list generator to crack security tokens
Bind/Reverse Shells, SOCKS, etc over Tor in Golang
- tor
- ethical-hacking
- reverse-shell
- bind-shell