Repository Index

Ghidra is a software reverse engineering (SRE) framework

• software-analysis
• disassembler
• reverse-engineering

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

• osint
• social-network
• identification
• socmint

Metasploit Framework

• hacktoberfest

The most comprehensive authentication framework

• authentication
• oauth
• oauth2
• typescript

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

• llm
• prompt-engineering
• prompts
• llmops

UNIX-like reverse engineering framework and command-line toolset

• radare2
• c
• commandline
• reverse-engineering

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

• footprinting
• osint
• threatintel
• python

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

• static-analysis
• dynamic-analysis
• mobsf
• android-security

🕵️‍♂️ Offensive Google framework.

• osint
• google
• hideandsec

Information gathering framework for phone numbers

• information-gathering
• phone-number
• osint
• open-source-intelligence

Automated Penetration Testing Agentic Framework Powered by Large Language Models

• penetration-testing
• python
• large-language-models
• llm

A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.

• full-stack
• open-source
• saas
• nodejs

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

The Rogue Access Point Framework

• wifiphisher
• wifi
• rogue
• access-point

Defund the Police.

• malware-analysis
• awesome
• awesome-list
• list

Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.

• apple
• offline-finding
• bluetooth
• microbit

CTF framework and exploit development library

• ctf
• exploit
• python
• pwntools

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework

OSINT Framework

• osint-framework
• osint-resources
• osint
• intelligence-gathering

fsociety Hacking Tools Pack – A Penetration Testing Framework

• fsociety
• exploitation
• port-scanning
• fsociety-hacking

Adversary Emulation Framework

• security-tools
• implant
• golang
• dns-server

A curated list of CTF frameworks, libraries, resources and softwares

• ctf
• awesome
• security
• penetration

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

• thefatrat
• bypass
• linux
• autorun

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

• sn1per
• sn1per-professional
• bugbounty-platform
• attack-surface