Ranked by Attention Score: stars gained over the last 180 complete days
101–195 of 195 by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Reverse Shell as a Service
Generate smart and powerful wordlists
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
A USB proxy based on raw-gadget and libusb
Automation of some MAPT activities and interaction with the mobile Android device.
One rule to crack all passwords. or atleast we hope so.
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
XSS'OR - Hack with JavaScript.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
ebpfkit is a rootkit powered by eBPF
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
A python based tool for exploiting and managing Android devices via ADB
The Offensive Manual Web Application Penetration Testing Framework.
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
The repository host gives no description.
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
Bluetooth experimentation framework for Broadcom and Cypress chips.
High-Performance word generator with a per-position configureable charset
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
Security Tool to Look For Interesting Files in S3 Buckets
Hacking Toolkit
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Automated Red Team Infrastructure deployement using Docker
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
A utility to safely generate malicious network traffic patterns and evaluate controls.
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
Standalone password candidate generator using the PRINCE algorithm
An information security preparedness tool to do adversarial simulation.
🐧 Abuse of Google Colab for cracking hashes.
Advanced keyboard-walk generator with configureable basechars, keymap and routes
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Automated Attack Simulation in the Cloud, complete with detection use cases.
Password cracking rules and masks for hashcat that I generated from cracked passwords.
Rule for hashcat or john. Aiming to crack how people generate their password
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
SSH man-in-the-middle tool
ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Steganography brute-force utility to uncover hidden data inside files
🔍A cutting edge context aware GraphQL API fuzzing tool!
Password cracking rules for Hashcat based on statistics and industry patterns
List DTDs and generate XXE payloads using those local DTDs.
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
An on-path blackbox network traffic security testing tool
Interactive CTF Exploration Tool
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
Create adversarial attacks against machine learning Windows malware detectors
A hashcat-based distributed password cracking system
Scriptable network authentication cracker
A web front-end for password cracking and analytics
Hashcat wrapper to help automate the cracking process
Scans for accessibility tools backdoors via RDP
Automatically exported from code.google.com/p/creddump
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
Android Framework for Exploitation, is a framework for exploiting android based devices
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
A front-end JavaScript toolkit for creating DNS rebinding attacks.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
A Linux packet crafting tool.
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
GraphQL automated security testing toolkit
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
brute force SSH public-key authentication
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
Automated Tactics Techniques & Procedures
The repository host gives no description.
The tool is used to analyze the content of the android application in local storage.
Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
Proof of concept denial of service over TOR stress test tool
dll injection tool that implements various methods
A braindead program for cracking encrypted ZIP archives. Forked from http://oldhome.schmorp.de/marc/fcrackzip.html
Generate Keyboard Walk Dictionaries for cracking
autocrack adds queue support for hashcat cracking.