hackingtool
z4nzu/hackingtoolAll-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…
z4nzu/hackingtoolAll-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…
bcapptain/dockernymousA script used to create a whonix like gateway/workstation environment with docker containers.
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
joelgmsec/fakedatagenGenerates fully valid fake identities in Spanish format, including names, emails, bank details, and extended info, with optional zip compression and…
spyboy-productions/r4venTrack the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
zaydmulani09/sentrymcpA static + runtime security scanner for MCP (Model Context Protocol) servers
gmh5225/asm-obfuscatorObfuscates x86-64 assembly with instruction injection, junk code, constant obfuscation, and runtime decryption to hinder reverse engineering and…
z4nzu/hackingtoolAll-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…
bcapptain/dockernymousA script used to create a whonix like gateway/workstation environment with docker containers.
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
joelgmsec/fakedatagenGenerates fully valid fake identities in Spanish format, including names, emails, bank details, and extended info, with optional zip compression and…
spyboy-productions/r4venTrack the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.
zaydmulani09/sentrymcpA static + runtime security scanner for MCP (Model Context Protocol) servers
gmh5225/asm-obfuscatorObfuscates x86-64 assembly with instruction injection, junk code, constant obfuscation, and runtime decryption to hinder reverse engineering and…
jas502n/cs_sleepmaskObfuscation module for Cobalt Strike Beacon sleep states, enabling evasion of memory-based detection and endpoint security controls.
extv/podroidA rootless Android app that boots Alpine Linux: run containers (Podman/Docker/LXC) and GUI desktop apps.
randomrobbiebf/subdomain-tkoDetects subdomain takeover vulnerabilities by analyzing DNS records and HTTP responses. Automatically identifies takeover-prone subdomains for…
cduram/chirp-codeexecution_via_malicious_imagefileProof-of-concept exploit for arbitrary code execution through eval() injection in a ham radio programming application, including malicious .itm/.img…
s0ld13rr/pentestcodeAutonomous AI penetration testing agent that orchestrates multi-agent recon, exploitation, post-exploitation, and reporting with persistent…
mrwadams/attackgenAttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK…
pablosnt/rekonoOffensive security platform that automates attack surface discovery and vulnerability management
nu11secur1ty/offensive-securityComprehensive offensive security toolkit covering penetration testing, exploitation, and red teaming operations with modular attack workflows.
six2dez/burp-ai-agentBurp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
1n3/cloudhunterFind unreferenced AWS S3 buckets which have CloudFront CNAME records pointing to them
elevenpaths/devicepairedtoolTool for testing and auditing Bluetooth device pairing security, identifying vulnerabilities in wireless pairing protocols and hardware IoT…
phpstan/phpstanPHP Static Analysis Tool - discover bugs in your code without running it!
