Highlights
Stars
Language
Sort by: Recently starred
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intellig…
threatspec - continuous threat modeling, through code
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
Android application for online privacy and security
Procmon is a Linux reimagining of the classic Procmon tool from the Sysinternals suite of tools for Windows. Procmon provides a convenient and efficient way for Linux developers to trace the syscal…
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
Code Pulse is a real-time code coverage tool for penetration testing activities
Awesome DevSecOps на русском языке
🛡️ Open-source and next-generation Web Application Firewall (WAF)
Arsenal is just a quick inventory and launcher for hacking programs
A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.
When MVC magic turns black
Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
A collection of scripts for assessing Microsoft Azure security
📡 PoC auto collect from GitHub.
PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.
Free and source-available fair-code licensed workflow automation tool. Easily automate tasks across different services.
The cheat sheet about Java Deserialization vulnerabilities
Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
edduu / Arjun
Forked from s0md3v/ArjunHTTP parameter discovery suite.
This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.
Automatic Discrepancy Discovery for DPI Elusion
🐛 A list of writeups from the Google VRP Bug Bounty program
The fuzzer afl is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast power schedules, MOpt mutators, unicorn_mode, and a lot more!
🔥 A powerful MongoDB auditing and pentesting tool 🔥