Simple and flexible tool for managing secrets
Repository Index
47,133 repositories indexed
1–24 of 32 · Most stars
RetDec is a retargetable machine-code decompiler based on LLVM.
comment engine
- commenting
- comment-system
- self-hosted
- commenting-engines
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.
- steamkit2
- c-sharp
- nuget
- steam
The best tool for finding one gadget RCE in libc.so.6
- ctf
- pwnable
- pwn
- glibc
BCrypt.Net - Bringing updates to the original bcrypt package
- blowfish
- bcrypt
- c-sharp
- algorithm
GetContact CLI adalah project Python untuk melakukan lookup nomor telepon lewat API GetContact, tanpa aplikasi Android dan tanpa browser.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
JShell - Get a JavaScript shell with XSS.
Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
- reverse-engineering
- disassembler
- ida-plugin
- ida
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
Inject OWASP recommended HTTP Headers for increased security in a single line
A USB proxy based on raw-gadget and libusb
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Merge multiple pcap files together, gracefully.
- pcap
- merge
- tcpdump-capture
- packet-processing
midgetpack is a multiplatform secure ELF packer
collection of C/C++ programs that try to get compilers to exploit undefined behavior
A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
Searches various online resources to try and get as much info about an IP/domain as possible.
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang