47,133 repositories indexed
1–24 of 39 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Most advanced XSS scanner.
The Rogue Access Point Framework
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
CTF framework and exploit development library
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Cameradar hacks its way into RTSP videosurveillance cameras
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
A toolset to make a system look as if it was the victim of an APT attack
Automated Security Testing For REST API's
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
The AI Agent for Cyber Security.
Bluetooth experimentation framework for Broadcom and Cypress chips.
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
Advanced keyboard-walk generator with configureable basechars, keymap and routes
:hammer: Manage your website via terminal
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.