Skip to content

Latest commit

 

History

History
3950 lines (2845 loc) · 400 KB

Readme_en.md

File metadata and controls

3950 lines (2845 loc) · 400 KB
Raw

PenetrationTesting

中文版本

The page You see here is a stripped version: Repos with less than 200 stars and last modified more than 500 days ago are not included. Check FULL version here: English Version-Full

Directory

Tools

RecentAdded

RecentAdded

NoCategory

AI&&MachineLearning&&DeepLearning&&NeturalNetwork

NoCategory

Collection

Collection

NoCategory

Mixed

  • [24225Star][15d] trimstray/the-book-of-secret-knowledge A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
  • [10176Star][17d] enaqx/awesome-pentest A collection of awesome penetration testing resources, tools and other shiny things
  • [5384Star][8m] carpedm20/awesome-hacking A curated list of awesome Hacking tutorials, tools and resources
  • [4994Star][1m] sbilly/awesome-security A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
  • [3116Star][20d] [Rich Text Format] the-art-of-hacking/h4cker This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.
  • [1710Star][20d] olivierlaflamme/cheatsheet-god Penetration Testing Biggest Reference Bank - OSCP / PTP & PTX Cheatsheet
  • [573Star][5m] d30sa1/rootkits-list-download This is the list of all rootkits found so far on github and other sites.
  • [551Star][17d] [Perl] bollwarm/sectoolset The security tool(project) Set from github。github安全项目工具集合

WithoutTools

CollectionOfCollection

Book&&Tutorial&&Courses

Note&&Tips&&Tricks&&Talk&&Conference

NoCategory

blog

Mobile

NoCategory

  • [4885Star][14d] [HTML] owasp/owasp-mstg The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
  • [4785Star][13d] [JS] mobsf/mobile-security-framework-mobsf Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
  • [1940Star][20d] [Py] sensepost/objection objection： runtimemobile exploration
  • [1839Star][6m] [Java] fuzion24/justtrustme An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
  • [604Star][6m] [JS] vincentcox/stacoan StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
  • [529Star][17d] [Shell] owasp/owasp-masvs The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security.
  • [370Star][1y] [CSS] nowsecure/secure-mobile-development A Collection of Secure Mobile Development Best Practices
  • [320Star][5m] [Java] datatheorem/trustkit-android Easy SSL pinning validation and reporting for Android.

Android

iOS&&MacOS&&iPhone&&iPad&&iWatch

CTF&&HTB

NoCategory

  • [952Star][2m] ctfs/resources A general collection of information, tools, and tips regarding CTFs and similar security competitions
  • [744Star][1m] [Py] ashutosh1206/crypton Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Authentication methods along with example challenges from CTFs
  • [634Star][8m] cryptogenic/exploit-writeups A collection where my current and future writeups for exploits/CTF will go
  • [474Star][5m] [PHP] wonderkun/ctf_web a project aim to collect CTF web practices .
  • [472Star][3m] [PHP] susers/writeups 国内各大CTF赛题及writeup整理
  • [450Star][8m] [Py] christhecoolhut/zeratool Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
  • [410Star][3m] ctftraining/ctftraining CTF Training 经典赛题复现环境
  • [307Star][5m] [C] sixstars/ctf A writeup summary for CTF competitions, problems.
  • [294Star][28d] [HTML] balsn/ctf_writeup CTF writeups from Balsn
  • [290Star][9m] [HTML] s1gh/ctf-literature Collection of free books, papers and articles related to CTF challenges.
  • [283Star][10m] [Shell] ctf-wiki/ctf-tools CTF 工具集合
  • [260Star][5m] [CSS] l4wio/ctf-challenges-by-me Pwnable|Web Security|Cryptography CTF-style challenges
  • [253Star][6m] [Shell] lieanu/libcsearcher glibc offset search for ctf.
  • [233Star][8m] harmoc/ctftools Personal CTF Toolkit
  • [209Star][1y] [Py] 3summer/ctf-rsa-tool a little tool help CTFer solve RSA problem

Collection

HTB

CTF

NoCategory

Writeup

  • [1813Star][1y] [CSS] ctfs/write-ups-2015 Wiki-like CTF write-ups repository, maintained by the community. 2015
  • [1763Star][11m] [Py] ctfs/write-ups-2017 Wiki-like CTF write-ups repository, maintained by the community. 2017
  • [586Star][1m] [Py] pwning/public-writeup CTF write-ups by Plaid Parliament of Pwning
  • [489Star][8m] manoelt/50m_ctf_writeup $50 Million CTF from Hackerone - Writeup
  • [275Star][7m] [HTML] bl4de/ctf CTF (Capture The Flag) writeups, code snippets, notes, scripts
  • [222Star][1y] [Shell] ctfs/write-ups-2018 Wiki-like CTF write-ups repository, maintained by the community. 2018

Collection

Vulnerability&&BugHunting&&Exploit&&Fuzzing

NoCategory

  • [1968Star][12d] [Java] jeremylong/dependencycheck OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
  • [1797Star][27d] [TypeScript] snyk/snyk CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
  • [1619Star][18d] roave/securityadvisories ensures that your application doesn't have installed dependencies with known security vulnerabilities
  • [1535Star][1m] [Java] spotbugs/spotbugs SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
  • [1284Star][12m] [Py] xyntax/poc-t 渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
  • [1232Star][30d] [JS] archerysec/archerysec Centralize Vulnerability Assessment and Management for DevSecOps Team
  • [1079Star][19d] [Jupyter Notebook] ibm/adversarial-robustness-toolbox Python library for adversarial machine learning, attacks and defences for neural networks, logistic regression, decision trees, SVM, gradient boosted trees, Gaussian processes and more with multiple framework support
  • [1074Star][1y] [PowerShell] rasta-mouse/sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
  • [1018Star][16d] [HTML] defectdojo/django-defectdojo DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
  • [901Star][19d] [Py] knownsec/pocsuite3 pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
  • [814Star][6m] numirias/security Some of my security stuff and vulnerabilities. Nothing advanced. More to come.
  • [813Star][3m] [JS] creditease-sec/insight 洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
  • [806Star][1y] [Py] leviathan-framework/leviathan wide range mass audit toolkit
  • [625Star][5m] [Py] pyupio/safety Safety checks your installed dependencies for known security vulnerabilities
  • [578Star][7m] [Java] olacabs/jackhammer Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
  • [567Star][12d] arkadiyt/bounty-targets-data This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports
  • [541Star][1y] [Java] mr5m1th/poc-collect 各种开源CMS 各种版本的漏洞以及EXP 该项目将不断更新
  • [540Star][10m] [PHP] zhuifengshaonianhanlu/pikachu 一个好玩的Web安全-漏洞测试平台
  • [462Star][1m] [Java] joychou93/java-sec-code Java common vulnerabilities and security code.
  • [430Star][28d] [Py] google/vulncode-db Vulncode-DB project
  • [428Star][4m] [Py] crocs-muni/roca ROCA: Infineon RSA key vulnerability
  • [409Star][4m] [Java] nccgroup/freddy Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  • [395Star][17d] [Go] cbeuw/cloak A universal pluggable transport utilising TLS domain fronting to evade deep packet inspection and active probing from state-level adversaries
  • [379Star][10m] skyblueeternal/thinkphp-rce-poc-collection thinkphp v5.x 远程代码执行漏洞-POC集合
  • [372Star][6m] tidesec/tide 目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~
  • [361Star][12m] hannob/vulns Named vulnerabilities and their practical impact
  • [357Star][8m] [C] vulnreproduction/linuxflaw This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
  • [354Star][6m] [PHP] fate0/prvd PHP Runtime Vulnerability Detection
  • [351Star][6m] [Py] orangetw/awesome-jenkins-rce-2019 There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  • [342Star][2m] snyk/zip-slip-vulnerability Zip Slip Vulnerability (Arbitrary file write through archive extraction)
  • [335Star][2m] [Java] denimgroup/threadfix ThreadFix is a software vulnerability management platform. This GitHub site is far out of date. Please go to
  • [314Star][27d] [Java] sap/vulnerability-assessment-tool Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy.
  • [312Star][11m] cryin/paper Web Security Technology & Vulnerability Analysis Whitepapers
  • [299Star][16d] [Py] ym2011/poc-exp Collecting and writing PoC or EXP for vulnerabilities on some application
  • [291Star][3m] [Py] christhecoolhut/firmware_slap Discovering vulnerabilities in firmware through concolic analysis and function clustering.
  • [286Star][2m] [Py] fplyth0ner-combie/bug-project-framework 漏洞利用框架模块分享仓库
  • [283Star][4m] [C#] l0ss/grouper2 Find vulnerabilities in AD Group Policy
  • [283Star][7m] [C] tangsilian/android-vuln 安卓内核提权漏洞分析
  • [271Star][21d] disclose/disclose Driving safety, simplicity, and standardization in vulnerability disclosure.
  • [265Star][1y] [Py] ucsb-seclab/bootstomp BootStomp: a bootloader vulnerability finder
  • [263Star][1y] [JS] portswigger/hackability Probe a rendering engine for vulnerabilities and other features
  • [249Star][5m] [Py] jcesarstef/dotdotslash Search for Directory Traversal Vulnerabilities
  • [234Star][19d] [HTML] edoverflow/bugbountyguide Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.
  • [220Star][2m] [Py] ismailtasdelen/hackertarget attack surface discovery and identification of security vulnerabilities
  • [211Star][2m] [C++] atxsinn3r/vulncases Oh it's just a bunch of vulns for references.
  • [207Star][6m] [Py] jas502n/cnvd-c-2019-48814 WebLogic wls9-async反序列化远程命令执行漏洞
  • [202Star][6m] [Py] greekn/rce-bug 新漏洞感知项目 主要帮助大家 记录一些重大漏洞 漏洞方面的细节
  • [201Star][2m] [Ruby] appfolio/gemsurance Gem vulnerability checker using rubysec/ruby-advisory-db
  • [201Star][7m] [C++] j00ru/kfetch-toolkit A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities

Collectioin

ExploitDevelopment

NoCategory

  • [3705Star][10m] [Py] longld/peda PEDA - Python Exploit Development Assistance for GDB
  • [2488Star][13d] [Py] hugsy/gef GEF - GDB Enhanced Features for exploit devs & reversers
  • [2362Star][22d] [Py] pwndbg/pwndbg Exploit Development and Reverse Engineering with GDB Made Easy
  • [465Star][10m] [Py] wapiflapi/villoc Visualization of heap operations.

ROP

  • [2101Star][27d] [Py] jonathansalwan/ropgadget This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
  • [931Star][13d] [Py] sashs/ropper Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
  • [677Star][11m] [HTML] zhengmin1989/myarticles 蒸米的文章（iOS冰与火之歌系列，一步一步学ROP系列，安卓动态调试七种武器系列等）

VulnerabilityScan&&BugHunting

NoCategory

VulnerabilityScan

NoCategory

  • [6953Star][24d] [Go] future-architect/vuls Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices

  • [6516Star][16d] [Java] zaproxy/zaproxy The OWASP ZAP core project

  • [5563Star][17d] [Ruby] presidentbeef/brakeman A static analysis security vulnerability scanner for Ruby on Rails applications

  • [2904Star][21d] [Py] andresriancho/w3af w3af: web application attack and audit framework, the open source web vulnerability scanner.

  • [2440Star][6m] [Py] ysrc/xunfeng 巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

  • [2403Star][28d] [Go] knqyf263/trivy A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI

  • [2089Star][8m] [Py] linkedin/qark Tool to look for several security related Android application vulnerabilities

  • [1873Star][1m] [Py] j3ssie/osmedeus Fully automated offensive security framework for reconnaissance and vulnerability scanning

  • [1864Star][3m] [Py] python-security/pyt A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

  • [1629Star][1y] [Py] evyatarmeged/raccoon A high performance offensive security tool for reconnaissance and vulnerability scanning

  • [1370Star][6m] [Py] almandin/fuxploider File upload vulnerability scanner and exploitation tool.

  • [1339Star][5m] [Py] s0md3v/striker Striker is an offensive information and vulnerability scanner.

  • [1023Star][7m] [Py] lucifer1993/angelsword Python3编写的CMS漏洞检测框架

  • [932Star][1y] [Java] google/firing-range a test bed for web application security scanners, providing synthetic, wide coverage for an array of vulnerabilities.

  • [913Star][4m] threathuntingproject/threathunting An informational repo about hunting for adversaries in your IT environment.

  • [884Star][1m] [Go] opensec-cn/kunpeng kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

  • [884Star][2m] [Py] hasecuritysolutions/vulnwhisperer Create actionable data from your Vulnerability Scans

  • [852Star][3m] [Py] boy-hack/w9scan Plug-in type web vulnerability scanner

  • [840Star][3m] [Py] lijiejie/bbscan A vulnerability scanner focus on scanning large number of targets in short time with a minimal set of rules.

  • [725Star][10m] [PowerShell] l0ss/grouper A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)

  • [643Star][5m] [Perl] moham3driahi/xattacker X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

  • [632Star][5m] [PHP] mattiasgeniar/php-exploit-scripts A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.

  • [602Star][10m] [Dockerfile] aquasecurity/microscanner Scan your container images for package vulnerabilities with Aqua Security

  • [539Star][5m] [JS] seccubus/seccubus Easy automated vulnerability scanning, reporting and analysis

  • [523Star][3m] [Py] hatboy/struts2-scan Struts2全漏洞扫描利用工具

  • [513Star][7m] [Py] wyatu/perun Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

  • [491Star][14d] [C#] k8gege/ladon Ladon一款用于大型网络渗透的多线程插件化综合扫描神器，含端口扫描、服务识别、网络资产、密码爆破、高危漏洞检测以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描。5.5版本内置39个功能模块,通过多种协议以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、数据库等信息，漏洞检测包含MS17010、Weblogic、ActiveMQ、Tomcat、Struts2等，密码爆破11种含数据库(Mysql、Oracle、MSSQL)、FTP、SSH(Linux主机)、VNC、Windows密码(IPC、WMI、SMB)、Weblogic后台、Rar压缩包密码等，Web指…

  • [488Star][2m] [Perl 6] rezasp/joomscan OWASP Joomla Vulnerability Scanner Project

  • [452Star][1m] [C] greenbone/openvas-scanner Open Vulnerability Assessment Scanner

  • [443Star][5m] [Py] dr0op/weblogicscan 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

  • [436Star][15d] [Py] k8gege/k8cscan K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

  • [375Star][10m] [Py] hahwul/a2sv Auto Scanning to SSL Vulnerability

  • [362Star][1m] [Py] l4ys/lazyida Make your IDA Lazy!

    View Details

      ### 功能
  - 快速移除函数返回类型
  - 数据格式(format)快速转换
  - 扫描字符串格式化漏洞
  - 双击跳转vtable函数
  - 快捷键: w/c/v
  </details>

  • [351Star][1m] [C#] security-code-scan/security-code-scan Vulnerability Patterns Detector for C# and VB.NET

  • [343Star][2m] [Py] chenjj/corscanner Fast CORS misconfiguration vulnerabilities scanner

  • [319Star][3m] [Py] vulmon/vulmap Vulmap Online Local Vulnerability Scanners Project

  • [318Star][7m] [C#] yalcinyolalan/wssat WEB SERVICE SECURITY ASSESSMENT TOOL

  • [297Star][4m] [Py] zhaoweiho/securitymanageframwork Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer securit…

  • [287Star][1y] [Py] flipkart-incubator/watchdog Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

  • [285Star][2m] [Py] utiso/dorkbot Command-line tool to scan Google search results for vulnerabilities

  • [279Star][7m] [Py] vulscanteam/vulscan vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

  • [276Star][5m] [Perl] rezasp/vbscan OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

  • [257Star][2m] [JS] stono/hawkeye A project security/vulnerability/risk scanning tool

  • [246Star][4m] [Shell] peterpt/eternal_scanner An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)

  • [226Star][1y] [Py] leapsecurity/libssh-scanner Script to identify hosts vulnerable to CVE-2018-10933

  • [222Star][1y] [C++] ucsb-seclab/dr_checker DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers

  • [218Star][7m] [Py] skewwg/vulscan 漏洞扫描：st2、tomcat、未授权访问等等

  • [211Star][6m] [Py] kingkaki/weblogic-scan weblogic 漏洞扫描工具

  • [208Star][20d] [Py] sethsec/celerystalk An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

Web漏洞
系统漏洞
App漏洞
移动平台漏洞

Fuzzing

NoCategory
Collection
  • [3792Star][1m] [PHP] fuzzdb-project/fuzzdb Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
  • [2864Star][5m] secfigo/awesome-fuzzing A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
Fuzzer
  • [2629Star][17d] [Go] google/syzkaller syzkaller is an unsupervised coverage-guided kernel fuzzer
  • [2346Star][1m] [Py] xmendez/wfuzz Web application fuzzer
  • [1699Star][21d] [C] google/honggfuzz Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
  • [1051Star][2m] [Py] googleprojectzero/domato DOM fuzzer

Exploit

漏洞利用

Exp&&PoC

XSS&&XXE

Collection

NoCategory

  • [7288Star][25d] [Py] s0md3v/xsstrike Most advanced XSS scanner.
  • [1641Star][10m] [JS] evilcos/xssor2 XSS'OR - Hack with JavaScript.
  • [1318Star][3m] [Go] microcosm-cc/bluemonday bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
  • [705Star][2m] [JS] mandatoryprogrammer/xsshunter The XSS Hunter service - a portable version of XSSHunter.com
  • [683Star][18d] [C#] mganss/htmlsanitizer Cleans HTML to avoid XSS attacks
  • [674Star][21d] [PHP] ssl/ezxss ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
  • [638Star][10m] [HTML] bl4de/security_whitepapers Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi
  • [504Star][4m] [Py] opensec-cn/vtest 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。
  • [495Star][4m] [PHP] nettitude/xss_payloads Exploitation for XSS
  • [477Star][1y] [JS] koto/xsschef Chrome extension Exploitation Framework
  • [460Star][12m] [C] laruence/taint Taint is a PHP extension, used for detecting XSS codes
  • [334Star][12m] [Py] varbaek/xsser From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  • [325Star][7m] [Py] s0md3v/jshell JShell - Get a JavaScript shell with XSS.
  • [289Star][1m] [JS] wicg/trusted-types A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
  • [287Star][13d] [Py] stamparm/dsxs Damn Small XSS Scanner
  • [286Star][13d] [PHP] voku/anti-xss
  • [251Star][3m] [PHP] dotboris/vuejs-serverside-template-xss Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability
  • [243Star][4m] [JS] lewisardern/bxss bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
  • [241Star][2m] [JS] antswordproject/ant 实时上线的 XSS 盲打平台

WellKnownVulnerability&&CVE&&SpecificProduct

NoCategory

CVE

Spectre&&Meltdown

  • [3728Star][29d] [C] iaik/meltdown This repository contains several applications, demonstrating the Meltdown bug.
  • [2999Star][2m] [Shell] speed47/spectre-meltdown-checker Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD
  • [531Star][1y] [C] ionescu007/specucheck SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)
  • [249Star][5m] nsacyber/hardware-and-firmware-security-guidance Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

BlueKeep

Heartbleed

DirtyCow

Blueborne

CSRF

容器&&Docker

  • [5906Star][13d] [Go] quay/clair Vulnerability Static Analysis for Containers
  • [5905Star][13d] [Go] quay/clair Vulnerability Static Analysis for Containers
  • [661Star][1y] [Shell] c0ny1/vulstudy 使用docker快速搭建各大漏洞学习平台，目前可以一键搭建12个平台。
  • [636Star][13d] [Go] ullaakut/gorsair Gorsair hacks its way into remote docker containers that expose their APIs
  • [602Star][6m] [Py] eliasgranderubio/dagda a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities
  • [475Star][5m] [Go] arminc/clair-scanner Docker containers vulnerability scan
  • [332Star][6m] [Dockerfile] mykings/docker-vulnerability-environment Use the docker to build a vulnerability environment
  • [299Star][1y] [Dockerfile] ston3o/docker-hacklab My personal hacklab, create your own.

漏洞管理

漏洞数据库

CORS

  • [2716Star][8m] [JS] cyu/rack-cors Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.

漏洞分析

SpecificTarget

NoCategory

AWS

  • [4138Star][3m] [Py] dxa4481/trufflehog Searches through git repositories for high entropy strings and secrets, digging deep into commit history
  • [3130Star][17d] [Shell] toniblyx/my-arsenal-of-aws-security-tools List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
  • [2758Star][12d] [Go] 99designs/aws-vault A vault for securely storing and accessing AWS credentials in development environments
  • [2633Star][3m] [Java] teevity/ice AWS Usage Tool
  • [2347Star][4m] [Go] mlabouardy/komiser
  • [1892Star][19d] [Py] mozilla/mozdef MozDef: Mozilla Enterprise Defense Platform
  • [1805Star][20d] [Shell] toniblyx/prowler AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
  • [1597Star][1y] [Py] nccgroup/scout2 Security auditing tool for AWS environments
  • [1374Star][11m] [Py] eth0izzle/bucket-stream Find interesting Amazon S3 Buckets by watching certificate transparency logs.
  • [1161Star][17d] [Py] lyft/cartography Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
  • [1105Star][3m] [Py] rhinosecuritylabs/pacu The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
  • [887Star][2m] [Py] sa7mon/s3scanner Scan for open AWS S3 buckets and dump the contents
  • [824Star][5m] [Py] jordanpotti/awsbucketdump Security Tool to Look For Interesting Files in S3 Buckets
  • [756Star][28d] [Go] rebuy-de/aws-nuke Nuke a whole AWS account and delete all its resources.
  • [749Star][1m] [Java] tmobile/pacbot PacBot (Policy as Code Bot)
  • [592Star][17d] [Shell] securityftw/cs-suite Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
  • [525Star][25d] [Ruby] stelligent/cfn_nag Linting tool for CloudFormation templates
  • [490Star][16d] [Py] salesforce/policy_sentry IAM Least Privilege Policy Generator
  • [480Star][6m] [Py] netflix-skunkworks/diffy Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
  • [433Star][7m] [Py] ustayready/fireprox AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
  • [391Star][3m] [Py] duo-labs/cloudtracker CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
  • [382Star][20d] [Py] riotgames/cloud-inquisitor Enforce ownership and data security within AWS
  • [365Star][6m] [Py] carnal0wnage/weirdaal WeirdAAL (AWS Attack Library)
  • [363Star][10m] [Py] awslabs/aws-security-automation Collection of scripts and resources for DevSecOps and Automated Incident Response Security
  • [311Star][1y] [Py] securing/dumpsterdiver Tool to search secrets in various filetypes.
  • [273Star][7m] [Py] cesar-rodriguez/terrascan Collection of security and best practice test for static code analysis of terraform templates
  • [264Star][23d] [Py] nccgroup/pmapper A tool for quickly evaluating IAM permissions in AWS.
  • [224Star][29d] [HCL] nozaq/terraform-aws-secure-baseline Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
  • [216Star][26d] [Dockerfile] thinkst/canarytokens-docker Docker configuration to quickly setup your own Canarytokens.
  • [202Star][2m] [Py] voulnet/barq barq: The AWS Cloud Post Exploitation framework!

Phoenix

  • [810Star][16d] [Elixir] nccgroup/sobelow Security-focused static analysis for the Phoenix Framework

Kubernetes

Azure

Nginx

  • [6164Star][1m] [Py] yandex/gixy Nginx configuration static analyzer

ELK

IoT&&EmbedDevice&&Router&&Switch&&SmartDevice&&Printer

NoCategory

  • [1119Star][6m] nebgnahz/awesome-iot-hacks A Collection of Hacks in IoT Space so that we can address them (hopefully).
  • [817Star][14d] v33ru/iotsecurity101 From IoT Pentesting to IoT Security
  • [791Star][30d] [Py] ct-open-source/tuya-convert A collection of scripts to flash Tuya IoT devices to alternative firmwares
  • [582Star][8m] [Py] woj-ciech/danger-zone Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.
  • [465Star][2m] [Py] iti/ics-security-tools Tools, tips, tricks, and more for exploring ICS Security.
  • [437Star][18d] [Py] rabobank-cdc/dettect Detect Tactics, Techniques & Combat Threats
  • [330Star][1y] [Py] vmware/liota
  • [307Star][1m] [Java] erudika/para Open source back-end server for web, mobile and IoT. The backend for busy developers. (self-hosted or hosted)

Printer

Router&&Switch

EmbedDevice

Communication&&Proxy&&RverseProxy&&Tunnel

NoCategory

  • [19800Star][2m] [Shell] streisandeffect/streisand Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
  • [16743Star][18d] [Py] mitmproxy/mitmproxy An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
  • [10723Star][13d] getlantern/download 蓝灯Windows下载
  • [5481Star][3m] [C] rofl0r/proxychains-ng proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
  • [4915Star][13d] [Go] dnscrypt/dnscrypt-proxy dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
  • [4662Star][28d] [Go] alexellis/inlets Expose your local endpoints to the Internet
  • [4468Star][22d] [C] jedisct1/dsvpn A Dead Simple VPN.
  • [4223Star][5m] [Go] ginuerzh/gost GO Simple Tunnel - a simple tunnel written in golang
  • [4039Star][4m] [Py] spiderclub/haipproxy
  • [3592Star][2m] hq450/fancyss_history_package 科学上网插件的离线安装包储存在这里
  • [3348Star][4m] [Go] jpillora/chisel A fast TCP tunnel over HTTP
  • [2804Star][8m] [C++] wangyu-/udpspeeder A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
  • [2468Star][3m] [C] yrutschle/sslh Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
  • [2450Star][17d] [Shell] teddysun/across Across the Great Wall we can reach every corner in the world
  • [2352Star][6m] [Lua] snabbco/snabb Snabb: Simple and fast packet networking
  • [2133Star][1m] [Go] mmatczuk/go-http-tunnel Fast and secure tunnels over HTTP/2
  • [1874Star][4m] [C] darkk/redsocks transparent TCP-to-proxy redirector
  • [1844Star][1y] [Py] aploium/zmirror The next-gen reverse proxy for full site mirroring
  • [1813Star][3m] [C] tinyproxy/tinyproxy tinyproxy - a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
  • [1678Star][9m] [Py] constverum/proxybroker Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
  • [1665Star][4m] [C] networkprotocol/netcode.io A protocol for secure client/server connections over UDP
  • [1611Star][6m] [Go] sipt/shuttle A web proxy in Golang with amazing features.
  • [1495Star][1m] [C] ntop/n2n Peer-to-peer VPN
  • [1448Star][7m] [C++] wangyu-/tinyfecvpn A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
  • [1334Star][1m] [Go] davrodpin/mole cli app to create ssh tunnels
  • [1308Star][12m] [C] madeye/proxydroid Global Proxy for Android
  • [1222Star][4m] [JS] bubenshchykov/ngrok Expose your localhost to the web. Node wrapper for ngrok.
  • [1199Star][21d] [Objective-C] onionbrowser/onionbrowser An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
  • [1048Star][5m] [C] tcurdt/iproxy Let's you connect your laptop to the iPhone to surf the web.
  • [1042Star][28d] [Go] pusher/oauth2_proxy A reverse proxy that provides authentication with Google, Github or other providers. #Hacktoberfest
  • [999Star][7m] [Go] adtac/autovpn THIS PROJECT IS UNMAINTAINED.
  • [946Star][9m] [JS] lukechilds/reverse-shell Reverse Shell as a Service
  • [927Star][3m] [Py] christophetd/cloudflair a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should
  • [836Star][2m] [Py] anorov/pysocks A SOCKS proxy client and wrapper for Python.
  • [810Star][1m] [Go] henson/proxypool Golang实现的IP代理池
  • [790Star][3m] [Py] secforce/tunna Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.
  • [753Star][1m] [C#] justcoding121/titanium-web-proxy A cross-platform asynchronous HTTP(S) proxy server in C#.
  • [738Star][30d] [Shell] zfl9/ss-tproxy SS/SSR/V2Ray/Socks5 透明代理 for Linux
  • [737Star][1m] [C#] damianh/proxykit A toolkit to create code-first HTTP reverse proxies on ASP.NET Core
  • [674Star][1m] [Go] dliv3/venom Venom - A Multi-hop Proxy for Penetration Testers
  • [674Star][24d] [JS] mellow-io/mellow Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux.
  • [664Star][19d] [Kotlin] mygod/vpnhotspot Share your VPN connection over hotspot or repeater! (root required)
  • [651Star][27d] [Py] abhinavsingh/proxy.py ⚡⚡⚡Fast, Lightweight, Programmable, TLS interception capable proxy server for your Home and Application debugging, testing and development
  • [616Star][4m] [JS] derhuerst/tcp-over-websockets Tunnel TCP through WebSockets.
  • [574Star][4m] [Py] trustedsec/trevorc2 TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.
  • [568Star][12d] [Go] cloudflare/cloudflared Argo Tunnel client
  • [558Star][8m] [JS] blinksocks/blinksocks A framework for building composable proxy protocol stack.
  • [556Star][27d] clarketm/proxy-list A list of free, public, forward proxy servers. UPDATED DAILY!
  • [545Star][1y] [Py] fate0/getproxy getproxy 是一个抓取发放代理网站，获取 http/https 代理的程序
  • [513Star][10m] [Erlang] heroku/vegur Vegur: HTTP Proxy Library
  • [473Star][1y] [Go] yinqiwen/gsnova Private proxy solution & network troubleshooting tool.
  • [449Star][28d] [Py] aidaho12/haproxy-wi Web interface for managing Haproxy servers
  • [397Star][9m] [Go] evilsocket/shellz shellz is a small utility to track and control your ssh, telnet, web and custom shells and tunnels.
  • [382Star][1y] [Ruby] aphyr/tund SSH reverse tunnel daemon
  • [361Star][1m] [Py] lyft/metadataproxy A proxy for AWS's metadata service that gives out scoped IAM credentials from STS
  • [355Star][1y] [C] emptymonkey/revsh A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.
  • [345Star][6m] [Go] coreos/jwtproxy An HTTP-Proxy that adds AuthN through JWTs
  • [336Star][8m] [Py] iphelix/dnschef DNSChef - DNS proxy for Penetration Testers and Malware Analysts
  • [331Star][6m] [Py] fbkcs/thunderdns This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.
  • [325Star][4m] [Go] sysdream/hershell Hershell is a simple TCP reverse shell written in Go.
  • [320Star][9m] [JS] mhzed/wstunnel tunnel over websocket
  • [301Star][4m] [Py] rootviii/proxy_requests a class that uses scraped proxies to make an http GET/POST request (Python requests)
  • [293Star][2m] [JS] bettercap/caplets bettercap scripts (caplets) and proxy modules.
  • [290Star][8m] [C] basil00/reqrypt A censorship circumvention tool
  • [289Star][2m] [Py] covertcodes/multitun Tunnel arbitrary traffic through an innocuous WebSocket. Clients can 'see' each other, resulting in a stealth WebSocket VPN.
  • [278Star][11m] [C] dgoulet/torsocks Library to torify application - NOTE: upstream has been moved to
  • [276Star][5m] [Py] mthbernardes/rsg ReverShellGenerator - A tool to generate various ways to do a reverse shell
  • [273Star][12d] a2u/free-proxy-list
  • [273Star][9m] [Py] chenjiandongx/async-proxy-pool
  • [272Star][4m] [Go] suyashkumar/ssl-proxy
  • [257Star][8m] [C] rofl0r/microsocks tiny, portable SOCKS5 server with very moderate resource usage
  • [254Star][3m] [Py] fwkz/riposte Python package for wrapping applications inside a tailored interactive shell
  • [245Star][4m] [Shell] thesecondsun/revssl A simple script that automates generation of OpenSSL reverse shells
  • [242Star][17d] [Go] adguardteam/dnsproxy Simple DNS proxy with DoH, DoT, and DNSCrypt support
  • [242Star][4m] [Go] lesnuages/hershell Multiplatform reverse shell generator
  • [241Star][9m] [C] pegasuslab/ghosttunnel GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.
  • [236Star][11m] [Go] fardog/secureoperator A DNS-protocol proxy for DNS-over-HTTPS providers, such as Google and Cloudflare
  • [224Star][1m] [Ruby] zt2/sqli-hunter SQLi-Hunter is a simple HTTP proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
  • [216Star][1y] [PHP] softius/php-cross-domain-proxy PHP Proxy for Cross Domain Requests
  • [213Star][8m] [Go] joncooperworks/judas a phishing proxy
  • [207Star][9m] [Go] justmao945/mallory HTTP/HTTPS proxy over SSH
  • [202Star][1y] [C#] damonmohammadbagher/nativepayload_dns C# code for Transferring Backdoor Payloads by DNS Traffic and Bypassing Anti-viruses

GFW

NoCategory

GFWBypass

GFW

  • [14484Star][21d] gfwlist/gfwlist The one and only one gfwlist here
  • [3531Star][14d] acl4ssr/acl4ssr SSR 去广告ACL规则/SS完整GFWList规则，Telegram频道订阅地址
  • [2482Star][2m] [C++] trojan-gfw/trojan An unidentifiable mechanism that helps you bypass GFW.
  • [202Star][16d] [Shell] zfl9/gfwlist2privoxy 将 gfwlist.txt（Adblock Plus 规则）转换为 privoxy.action

Proxy

  • [7149Star][14d] [Go] snail007/goproxy Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理，代理API认证，全能跨平台代理服务器。
  • [5971Star][14d] [JS] avwo/whistle HTTP, HTTP2, HTTPS, Websocket debugging proxy
  • [1380Star][1m] [C] z3apa3a/3proxy 3proxy - tiny free proxy server
  • [304Star][17d] [Shell] brainfucksec/kalitorify Transparent proxy through Tor for Kali Linux OS

ReverseProxy

  • [29549Star][23d] [Go] fatedier/frp A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
  • [9114Star][2m] [JS] localtunnel/localtunnel expose yourself
  • [8706Star][2m] [Go] cnlh/nps 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。
  • [4887Star][10m] [Go] bitly/oauth2_proxy A reverse proxy that provides authentication with Google, Github or other provider
  • [3521Star][1m] [Java] ffay/lanproxy lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具，支持tcp流量转发，可支持任何tcp上层协议（访问内网网站、本地支付接口调试、ssh访问、远程桌面...）。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等，但要使用第三方的公网服务器就必须为第三方付费，并且这些服务都有各种各样的限制，此外，由于数据包会流经第三方，因此对数据安全也是一大隐患。技术交流QQ群 946273429
  • [2586Star][1m] [C++] fanout/pushpin Reverse proxy for realtime web services
  • [2476Star][5m] [Go] drk1wi/modlishka Modlishka. Reverse Proxy.
  • [656Star][4m] [Py] aploium/shootback a reverse TCP tunnel let you access target behind NAT or firewall

Tunnel

  • [3271Star][4m] [C++] wangyu-/udp2raw-tunnel A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)
  • [3131Star][3m] [C] yarrick/iodine Official git repo for iodine dns tunnel
  • [1779Star][5m] [C++] iagox86/dnscat2 dnscat2：在 DNS 协议上创建加密的 C&C channel

ProxyCrawl&&ProxyPool

AnonymousNetwork

NoCategory

Tor&&&Onion

  • [1302Star][1m] [C++] purplei2p/i2pd a full-featured C++ implementation of I2P client
  • [423Star][2m] [Py] nullhypothesis/exitmap A fast and modular scanner for Tor exit relays.
  • [406Star][13d] [Awk] alecmuffett/eotk Enterprise Onion Toolkit
  • [387Star][1m] [JS] ayms/node-tor Javascript implementation of the Tor (or Tor like) anonymizer project (The Onion Router)
  • [377Star][1m] [Py] maqp/tfc Tinfoil Chat - Onion-routed, endpoint secure messaging system
  • [353Star][2m] [Py] micahflee/torbrowser-launcher Securely and easily download, verify, install, and launch Tor Browser in Linux
  • [286Star][28d] [Perl] alecmuffett/real-world-onion-sites An index of the non-dark web...
  • [261Star][9m] [C++] wbenny/mini-tor proof-of-concept implementation of tor protocol using Microsoft CNG/CryptoAPI
  • [250Star][30d] [C] basil00/torwall Tallow - Transparent Tor for Windows
  • [219Star][5m] [Py] ruped24/toriptables2 Tor Iptables script is an anonymizer that sets up iptables and tor to route all services and traffic including DNS through the Tor network.

Socks&&ShadowSocksXx

  • [25047Star][14d] [Swift] shadowsocks/shadowsocksx-ng Next Generation of ShadowsocksX
  • [12355Star][1m] [C] shadowsocks/shadowsocks-libev libev port of shadowsocks
  • [7061Star][7m] [Shell] teddysun/shadowsocks_install Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
  • [4154Star][15d] [Swift] yanue/v2rayu V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
  • [3797Star][29d] [JS] shadowsocks/shadowsocks-manager A shadowsocks manager tool for multi user and traffic control.
  • [3174Star][15d] [Smarty] anankke/sspanel-uim SSPanel V3 魔改再次修改版
  • [2946Star][1m] [Go] gwuhaolin/lightsocks 轻量级网络混淆代理，基于 SOCKS5 协议，可用来代替 Shadowsocks
  • [2751Star][24d] [Makefile] shadowsocks/openwrt-shadowsocks Shadowsocks-libev for OpenWrt/LEDE
  • [2300Star][10m] [C] haad/proxychains proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
  • [2029Star][15d] [C#] netchx/netch Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
  • [1821Star][3m] [C] shadowsocks/simple-obfs A simple obfuscating tool (Deprecated)
  • [1683Star][1y] [Swift] haxpor/potatso Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
  • [1621Star][17d] [Py] ehco1996/django-sspanel 用diango开发的全新的shadowsocks网络面板
  • [1567Star][16d] [C#] hmbsbige/shadowsocksr-windows 【自用】Bug-Oriented Programming
  • [1306Star][4m] [Rust] shadowsocks/shadowsocks-rust A Rust port of shadowsocks
  • [1177Star][6m] ssrbackup/shadowsocks-rss Shadowsocksr project backup
  • [1068Star][1m] jadagates/shadowsocksbio 记录一下SS的前世今生，以及一个简单的教程总结
  • [922Star][1y] [Shell] ywb94/openwrt-ssr ShadowsocksR-libev for OpenWrt
  • [900Star][1y] [Go] huacnlee/flora-kit 基于 shadowsocks-go 做的完善实现，完全兼容 Surge 的配置文件
  • [899Star][2m] zhaoweih/shadowsocks-tutorial
  • [840Star][11m] [PHP] walkor/shadowsocks-php A php port of shadowsocks based on workerman. A socks5 proxy written in PHP.
  • [830Star][1m] [C] shadowsocksr-live/shadowsocksr-native 从容翻越党国敏感日 ShadowsocksR (SSR) native implementation for all platforms, GFW terminator
  • [730Star][6m] [Go] cbeuw/goquiet A Shadowsocks obfuscation plugin utilising domain fronting to evade deep packet inspection
  • [517Star][9m] [JS] mrluanma/shadowsocks-heroku shadowsocks over WebSocket, support Heroku.
  • [421Star][2m] [PowerShell] p3nt4/invoke-socksproxy Socks proxy server using powershell. Supports local and reverse connections for pivoting.
  • [402Star][3m] [JS] lolimay/shadowsocks-deepin
  • [374Star][1y] [Go] riobard/go-shadowsocks2 Experimental Shadowsocks in Go. Stable fork at
  • [337Star][16d] [Py] leitbogioro/ssr.go A new shadowsocksR config manager
  • [318Star][3m] [Py] qwj/python-proxy HTTP/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.
  • [301Star][13d] [Shell] loyess/shell Shadowsocks-libev with plugins one-click installation. For example: v2ray-plugin, kcptun, simple-obfs, goquiet, cloak...
  • [250Star][4m] [Py] fsgmhoward/shadowsocks-py-mu A fast tunnel proxy server for multiple users

V2Ray

VPN

  • [419Star][19d] hugetiny/awesome-vpn A curated list of awesome free VPNs and proxies.免费的代理,科学上网,翻墙，梯子大集合

Pentest&&Offensive&&PentestFramework&&PostExp

NoCategory

Collection

Wireless&&WiFi&&AP&&802.11

NoCategory

WPS&&WPA&&WPA2

  • [302Star][4m] [Py] hash3lizer/wifibroot A WiFi Pentest Cracking tool for WPA/WPA2 (Handshake, PMKID, Cracking, EAPOL, Deauthentication)

802.11

Payload&&RAT

NoCategory

  • [1231Star][19d] [PowerShell] hak5/bashbunny-payloads The Official Bash Bunny Payload Repository
  • [962Star][27d] [C] zardus/preeny Some helpful preload libraries for pwning stuff.
  • [560Star][10m] [Py] genetic-malware/ebowla Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
  • [529Star][2m] [C++] screetsec/brutal Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy . Brutal is a toolkit to quickly create various payload,powershell attack , virus attack and launch listener for a Human Interface Device ( Payload Teensy )
  • [438Star][12d] [Py] ctxis/cape Malware Configuration And Payload Extraction
  • [339Star][11m] [JS] gabemarshall/brosec Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.
  • [259Star][3m] [Py] felixweyne/imaginaryc2 Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.
  • [234Star][3m] cujanovic/markdown-xss-payloads XSS payloads for exploiting Markdown syntax
  • [229Star][17d] cujanovic/open-redirect-payloads Open Redirect Payloads
  • [226Star][5m] cr0hn/nosqlinjection_wordlists This repository contains payload to test NoSQL Injections
  • [216Star][2m] [Py] whitel1st/docem Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)
  • [210Star][1m] [Py] brent-stone/can_reverse_engineering Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol
  • [210Star][24d] [C] shchmue/lockpick_rcm Nintendo Switch encryption key derivation bare metal RCM payload
  • [210Star][20d] [PHP] zigoo0/jsonbee A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

PayloadCollection

RAT

  • [5045Star][3m] [Py] n1nj4sec/pupy Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
  • [1696Star][6m] [Smali] ahmyth/ahmyth-android-rat Android Remote Administration Tool
  • [1306Star][1y] [Py] marten4n6/evilosx An evil RAT (Remote Administration Tool) for macOS / OS X.
  • [763Star][22d] [Py] kevthehermit/ratdecoders Python Decoders for Common Remote Access Trojans
  • [597Star][1y] [PowerShell] fortynorthsecurity/wmimplant This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
  • [477Star][5m] [Visual Basic] nyan-x-cat/lime-rat LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)
  • [352Star][2m] [C++] werkamsus/lilith Lilith, The Open Source C++ Remote Administration Tool (RAT)
  • [307Star][5m] [Py] mvrozanti/rat-via-telegram Windows Remote Administration Tool via Telegram
  • [271Star][1m] [C#] nyan-x-cat/asyncrat-c-sharp Open-Source Remote Administration Tool For Windows C# (RAT)
  • [269Star][3m] [C++] yuanyuanxiang/simpleremoter 基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。此项目初版见：

PayloadGenerate

  • [3268Star][2m] [C] screetsec/thefatrat Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
  • [2591Star][3m] [Java] frohoff/ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  • [1741Star][21d] [Shell] leebaird/discover Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
  • [1061Star][5m] [Py] nccgroup/winpayloads Undetectable Windows Payload Generation
  • [1003Star][1y] [Py] d4vinci/dr0p1t-framework A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
  • [857Star][10m] [Visual Basic] mdsecactivebreach/sharpshooter Payload Generation Framework
  • [816Star][6m] [Go] tiagorlampert/chaos a PoC that allow generate payloads and control remote operating system
  • [810Star][2m] [PHP] ambionics/phpggc PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
  • [794Star][1m] [C#] pwntester/ysoserial.net Deserialization payload generator for a variety of .NET formatters
  • [733Star][12m] [Py] oddcod3/phantom-evasion Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)
  • [684Star][3m] [Py] sevagas/macro_pack macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to fin…
  • [618Star][8m] [Shell] g0tmi1k/mpc MSFvenom Payload Creator (MSFPC)
  • [560Star][14d] [C] thewover/donut Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
  • [397Star][28d] [Perl] chinarulezzz/pixload Image Payload Creating/Injecting tools
  • [287Star][7m] [Py] 0xacb/viewgen viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
  • [268Star][1y] [Shell] abedalqaderswedan1/aswcrypter An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far [FUD]
  • [262Star][1y] [Java] ewilded/shelling SHELLING - a comprehensive OS command injection payload generator
  • [222Star][1y] [Java] ewilded/psychopath psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.

Botnet

  • [3690Star][3m] [Py] malwaredllc/byob BYOB (Build Your Own Botnet)
  • [2135Star][1y] [C++] maestron/botnets This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
  • [390Star][19d] [C++] souhardya/uboat HTTP Botnet Project
  • [319Star][5m] [Go] saturnsvoid/gobot2 Second Version of The GoBot Botnet, But more advanced.

Backdooring&&Backdoor

  • [378Star][7m] [C] zerosum0x0/smbdoor Windows kernel backdoor via registering a malicious SMB handler
  • [364Star][2m] [Shell] screetsec/vegile This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
  • [362Star][7m] [Py] s0md3v/cloak Cloak can backdoor any python script with some tricks.
  • [341Star][11m] [Shell] r00t-3xp10it/backdoorppt transform your payload.exe into one fake word doc (.ppt)
  • [317Star][1y] [Ruby] carletonstuberg/browser-backdoor BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener
  • [287Star][3m] [C#] mvelazc0/defcon27_csharp_workshop Writing custom backdoor payloads with C# - Defcon 27
  • [201Star][8m] [C] paradoxis/php-backdoor Your interpreter isn’t safe anymore  —  The PHP module backdoor

混淆器&&Obfuscate

Payload管理

勒索软件

  • [379Star][1y] [Go] mauri870/ransomware A POC Windows crypto-ransomware (Academic)
  • [313Star][13d] [Batchfile] mitchellkrogza/ultimate.hosts.blacklist The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.

键盘记录器

Meterpreter

Payload投递

  • [255Star][3m] [Py] no0be/dnslivery Easy files and payloads delivery over DNS

AllInOne&&Framework

PostExp

NoCategory

  • [6832Star][17d] [C] hashcat/hashcat World's fastest and most advanced password recovery utility
  • [3268Star][2m] [C] screetsec/thefatrat Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
  • [2346Star][1m] [Shell] rebootuser/linenum Scripted Local Linux Enumeration & Privilege Escalation Checks
  • [2136Star][14d] [Py] commixproject/commix Automated All-in-One OS command injection and exploitation tool.
  • [1226Star][9m] [C] a0rtega/pafish Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
  • [1191Star][1y] [C#] cn33liz/p0wnedshell PowerShell Runspace Post Exploitation Toolkit
  • [1045Star][8m] [Py] 0x00-0x00/shellpop Pop shells like a master.
  • [1029Star][28d] [Boo] byt3bl33d3r/silenttrinity An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
  • [1015Star][3m] [Py] byt3bl33d3r/deathstar Automate getting Domain Admin using Empire
  • [754Star][4m] [Py] lgandx/pcredz This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
  • [737Star][4m] [PowerShell] hausec/adape-script Active Directory Assessment and Privilege Escalation Script
  • [668Star][1m] [C#] cobbr/sharpsploit SharpSploit is a .NET post-exploitation library written in C#
  • [405Star][4m] [Shell] thesecondsun/bashark Bash post exploitation toolkit
  • [341Star][4m] [Py] adrianvollmer/powerhub A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting
  • [282Star][1y] [JS] chrisallenlane/novahot A webshell framework for penetration testers.
  • [212Star][2m] [Go] brompwnie/botb A container analysis and exploitation tool for pentesters and engineers.

PrivilegeEscalation

  • [3509Star][4m] [C] secwiki/windows-kernel-exploits windows-kernel-exploits Windows平台提权漏洞集合
  • [1245Star][2m] [Py] alessandroz/beroot Privilege Escalation Project - Windows / Linux / Mac
  • [583Star][11m] [C++] ohpe/juicy-potato A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
  • [529Star][4m] rhinosecuritylabs/aws-iam-privilege-escalation A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
  • [492Star][7m] [Py] initstring/dirty_sock Linux privilege escalation exploit via snapd (CVE-2019-7304)
  • [467Star][8m] [C] nongiach/sudo_inject [Linux] Two Privilege Escalation techniques abusing sudo token
  • [443Star][1m] [C#] rasta-mouse/watson Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
  • [383Star][3m] [PowerShell] cyberark/aclight A script for advanced discovery of Privileged Accounts - includes Shadow Admins
  • [353Star][2m] [PowerShell] gdedrouas/exchange-ad-privesc Exchange privilege escalations to Active Directory
  • [337Star][20d] [Shell] nullarray/roothelper A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
  • [302Star][4m] [Batchfile] frizb/windows-privilege-escalation Windows Privilege Escalation Techniques and Scripts
  • [258Star][3m] [PHP] lawrenceamer/0xsp-mongoose Privilege Escalation Enumeration Toolkit (64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding

Windows

NoCategory
UAC
  • [2283Star][15d] [C] hfiref0x/uacme Defeating Windows User Account Control
AppLocker
ActiveDirectory
Domain

Persistence

AutoXxx

DataExfiltration

  • [453Star][3m] [Py] viralmaniar/powershell-rat Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

LateralMovement

Burp

Collection

  • [1920Star][1y] [BitBake] 1n3/intruderpayloads A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
  • [1058Star][27d] snoopysecurity/awesome-burp-extensions A curated list of amazingly awesome Burp Extensions

NoCategory

  • [1091Star][1y] [Py] bugcrowd/hunt Burp和ZAP的扩展收集
  • [742Star][13d] [Batchfile] mr-xn/burpsuite-collections BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦
  • [705Star][1y] [Java] d3vilbug/hackbar HackBar plugin for Burpsuite v1.0
  • [646Star][8m] [Java] vulnerscom/burp-vulners-scanner Vulnerability scanner based on vulners.com search API
  • [563Star][1y] [Java] federicodotta/brida The new bridge between Burp Suite and Frida!
  • [549Star][8m] [Java] c0ny1/chunked-coding-converter Burp suite 分块传输辅助插件
  • [466Star][19d] [Java] wagiro/burpbounty Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
  • [436Star][5m] [Py] albinowax/activescanplusplus ActiveScan++ Burp Suite Plugin
  • [434Star][1m] [Py] romanzaikin/burpextension-whatsapp-decryption-checkpoint This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)
  • [402Star][4m] [Java] bit4woo/recaptcha reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
  • [397Star][7m] [Java] nccgroup/burpsuitehttpsmuggler A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
  • [373Star][1y] [Py] rhinosecuritylabs/sleuthql Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
  • [371Star][2m] [Java] nccgroup/autorepeater Automated HTTP Request Repeating With Burp Suite
  • [352Star][4m] [Java] bit4woo/domain_hunter A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名（不仅仅是单个主域名）的插件
  • [327Star][2m] [Kotlin] portswigger/turbo-intruder Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
  • [309Star][1y] [Java] ebryx/aes-killer Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly
  • [300Star][3m] [Java] bit4woo/knife A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
  • [300Star][7m] [Java] ilmila/j2eescan J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
  • [299Star][2m] [Java] portswigger/http-request-smuggler an extension for Burp Suite designed to help you launch HTTP Request Smuggling attack
  • [297Star][11m] [Shell] yw9381/burp_suite_doc_zh_cn 这是基于Burp Suite官方文档翻译而来的中文版文档
  • [296Star][1y] [Java] vmware/burp-rest-api REST/JSON API to the Burp Suite security tool.
  • [272Star][1y] [Java] elkokc/reflector Burp plugin able to find reflected XSS on page in real-time while browsing on site
  • [264Star][18d] [Py] quitten/autorize Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
  • [250Star][2m] [Py] rhinosecuritylabs/iprotate_burp_extension Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
  • [241Star][4m] [Py] initroot/burpjslinkfinder Burp Extension for a passive scanning JS files for endpoint links.
  • [235Star][1m] [Java] samlraider/samlraider SAML2 Burp Extension
  • [231Star][1y] [Java] nccgroup/burpsuiteloggerplusplus Burp Suite Logger++: Log activities of all the tools in Burp Suite
  • [230Star][1y] [Py] audibleblink/doxycannon A poorman's proxycannon and botnet, using docker, ovpn files, and a dante socks5 proxy
  • [230Star][1y] [Java] difcareer/sqlmap4burp sqlmap embed in burpsuite
  • [222Star][6m] [Java] c0ny1/jsencrypter 一个用于加密传输爆破的Burp Suite插件
  • [214Star][2m] [Java] c0ny1/passive-scan-client Burp被动扫描流量转发插件
  • [205Star][2m] [Java] h3xstream/http-script-generator ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  • [202Star][5m] [Perl] modzero/mod0burpuploadscanner HTTP file upload scanner for Burp Proxy

Metasploit

NoCategory

AntiAV&&BypassAV

  • [1009Star][4m] [C] govolution/avet AntiVirus Evasion Tool
  • [698Star][9m] [Py] mr-un1k0d3r/dkmc DKMC - Dont kill my cat - Malicious payload evasion tool
  • [620Star][6m] [Py] paranoidninja/carboncopy A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
  • [461Star][1y] [Go] arvanaghi/checkplease Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.
  • [299Star][1y] [Py] two06/inception Provides In-memory compilation and reflective loading of C# apps for AV evasion.
  • [280Star][1m] [C#] ch0pin/aviator Antivirus evasion project
  • [252Star][1m] [C#] hackplayers/salsa-tools Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched

C&C

  • [2387Star][3m] [Go] ne0nd0g/merlin Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
  • [1104Star][1y] [Py] byt3bl33d3r/gcat A PoC backdoor that uses Gmail as a C&C server
  • [917Star][19d] [C#] cobbr/covenant Covenant is a collaborative .NET C2 framework for red teamers.
  • [632Star][10m] [Py] mehulj94/braindamage Remote administration tool which uses Telegram as a C&C server
  • [314Star][1y] [C#] spiderlabs/dohc2 DoHC2 allows the ExternalC2 library from Ryan Hanson (
  • [240Star][14d] [PowerShell] nettitude/poshc2 Python Server for PoshC2
  • [240Star][14d] [PowerShell] nettitude/poshc2 Python Server for PoshC2

DDOS

OWASP

  • [10690Star][13d] [Py] owasp/cheatsheetseries The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
  • [2245Star][13d] [Go] owasp/amass In-depth Attack Surface Mapping and Asset Discovery
  • [1902Star][28d] [Perl] spiderlabs/owasp-modsecurity-crs OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
  • [1680Star][1y] owasp/devguide The OWASP Guide
  • [1390Star][2m] [HTML] owasp/top10 Official OWASP Top 10 Document Repository
  • [1000Star][3m] [HTML] owasp/nodegoat The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
  • [731Star][2m] [Java] owasp/securityshepherd Web and mobile application security training platform
  • [665Star][13d] [HTML] owasp/asvs Application Security Verification Standard
  • [597Star][10m] [Py] zdresearch/owasp-nettacker Automated Penetration Testing Framework
  • [480Star][17d] owasp/wstg The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
  • [480Star][17d] owasp/wstg The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
  • [461Star][7m] [Java] owasp/owasp-webscarab OWASP WebScarab
  • [402Star][5m] [Py] stanislav-web/opendoor OWASP WEB Directory Scanner
  • [360Star][1m] [Java] zaproxy/zap-extensions OWASP ZAP Add-ons
  • [341Star][1m] [Java] esapi/esapi-java-legacy ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.
  • [292Star][5m] 0xradi/owasp-web-checklist OWASP Web Application Security Testing Checklist
  • [271Star][5m] [JS] mike-goodwin/owasp-threat-dragon An open source, online threat modelling tool from OWASP
  • [269Star][4m] tanprathan/owasp-testing-checklist OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.
  • [248Star][11m] [Java] owasp/owasp-java-encoder The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!
  • [225Star][1m] owasp/api-security OWASP API Security Project

Kali

CobaltStrike

  • [389Star][1y] [Shell] killswitch-gui/cobaltstrike-toolkit Some useful scripts for CobaltStrike
  • [203Star][1y] [C#] spiderlabs/sharpcompile SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing…

Scanner&&SecurityScan&&AppScan

NoCategory

  • [11006Star][2m] [C] robertdavidgraham/masscan TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
  • [7288Star][25d] [Py] s0md3v/xsstrike Most advanced XSS scanner.
  • [5245Star][1m] [Go] zricethezav/gitleaks Audit git repos for secrets
  • [4474Star][16d] [Ruby] wpscanteam/wpscan WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
  • [4101Star][24d] we5ter/scanners-box A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
  • [3375Star][1m] [Perl] sullo/nikto Nikto web server scanner
  • [3119Star][2m] [Go] mozilla/sops Simple and flexible tool for managing secrets
  • [3049Star][20d] [Py] maurosoria/dirsearch Web path scanner
  • [3022Star][2m] [C] zmap/zmap ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
  • [2904Star][21d] [Py] andresriancho/w3af w3af: web application attack and audit framework, the open source web vulnerability scanner.
  • [2261Star][3m] [JS] retirejs/retire.js scanner detecting the use of JavaScript libraries with known vulnerabilities
  • [2027Star][2m] [Ruby] urbanadventurer/whatweb Next generation web scanner
  • [2023Star][2m] [Py] nabla-c0d3/sslyze Fast and powerful SSL/TLS server scanning library.
  • [1630Star][1m] [NSIS] angryip/ipscan Angry IP Scanner - fast and friendly network scanner
  • [1530Star][7m] [Py] m4ll0k/wascan WAScan - Web Application Scanner
  • [1494Star][4m] [Py] hannob/snallygaster Tool to scan for secret files on HTTP servers
  • [1060Star][2m] [PHP] tuhinshubhra/red_hawk All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
  • [1054Star][3m] [Py] gerbenjavado/linkfinder A python script that finds endpoints in JavaScript files
  • [1037Star][7m] [Py] lucifer1993/struts-scan Python2编写的struts2漏洞全版本检测和利用工具
  • [985Star][3m] [Py] h4ckforjob/dirmap An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。
  • [905Star][2m] [Py] tuhinshubhra/cmseek CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs
  • [880Star][5m] [PHP] tidesec/wdscanner WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。
  • [862Star][1m] [Py] ajinabraham/nodejsscan NodeJsScan is a static security code scanner for Node.js applications.
  • [759Star][17d] [Py] vesche/scanless online port scan scraper
  • [741Star][19d] [Py] nekmo/dirhunt Find web directories without bruteforce
  • [722Star][6m] [Py] ztgrace/changeme A default credential scanner.
  • [694Star][4m] [CSS] ajinabraham/cmsscan CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues
  • [690Star][2m] [CSS] boy-hack/w12scan a network asset discovery engine that can automatically aggregate related assets for analysis and use
  • [681Star][28d] [C] scanmem/scanmem memory scanner for Linux
  • [671Star][1m] [Ruby] mozilla/ssh_scan A prototype SSH configuration and policy scanner (Blog:
  • [657Star][7m] [Py] m4ll0k/wpseku WPSeku - Wordpress Security Scanner
  • [656Star][2m] [Py] kevthehermit/pastehunter Scanning pastebin with yara rules
  • [649Star][5m] [Py] droope/droopescan A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
  • [636Star][1y] [Py] lmco/laikaboss Laika BOSS: Object Scanning System
  • [613Star][5m] [Py] rabbitmask/weblogicscan Weblogic一键漏洞检测工具，V1.3
  • [612Star][12m] [Ruby] thesp0nge/dawnscanner Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
  • [604Star][4m] [Py] faizann24/xsspy XssPy - Web Application XSS Scanner
  • [569Star][2m] [HTML] gwillem/magento-malware-scanner Scanner, signatures and the largest collection of Magento malware
  • [564Star][2m] [Perl] alisamtechnology/atscan Advanced dork Search & Mass Exploit Scanner
  • [555Star][5m] [Py] codingo/vhostscan A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
  • [542Star][7m] [Go] marco-lancini/goscan Interactive Network Scanner
  • [536Star][4m] [Py] dhs-ncats/pshtt Scan domains and return data based on HTTPS best practices
  • [526Star][6m] [Py] grayddq/gscan 本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。
  • [481Star][1m] [Py] fcavallarin/htcap htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
  • [475Star][1y] [C] nanshihui/scan-t a new crawler based on python with more function including Network fingerprint search
  • [399Star][2m] [Py] boy-hack/w13scan Passive Security Scanner (被动安全扫描器)
  • [397Star][10m] [JS] eviltik/evilscan NodeJS Simple Network Scanner
  • [390Star][10m] [Py] mitre/multiscanner Modular file scanning/analysis framework
  • [386Star][1y] [Py] grayddq/publicmonitors 对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险
  • [385Star][1m] [C] hasherezade/hollows_hunter Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
  • [379Star][13d] [Py] stamparm/dsss Damn Small SQLi Scanner
  • [340Star][4m] [Py] swisskyrepo/wordpresscan WPScan rewritten in Python + some WPSeku ideas
  • [339Star][12m] [Py] skavngr/rapidscan
  • [338Star][1m] [Py] fgeek/pyfiscan Free web-application vulnerability and version scanner
  • [335Star][3m] [Java] portswigger/backslash-powered-scanner Finds unknown classes of injection vulnerabilities
  • [330Star][1y] [Py] flipkart-incubator/rta Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.
  • [316Star][2m] [HTML] coinbase/salus Security scanner coordinator
  • [315Star][15d] [C] royhills/arp-scan The ARP Scanner
  • [301Star][10m] [PHP] steverobbins/magescan Scan a Magento site for information
  • [299Star][1m] [PowerShell] canix1/adaclscanner Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
  • [294Star][1y] [Shell] cryptolok/ghostinthenet Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan
  • [294Star][2m] [Ruby] m0nad/hellraiser Vulnerability Scanner
  • [294Star][1m] [Shell] mitchellkrogza/apache-ultimate-bad-bot-blocker Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
  • [286Star][4m] enkomio/taipan Web application vulnerability scanner
  • [284Star][1y] [Py] code-scan/dzscan Dzscan
  • [280Star][8m] [Py] boy-hack/w8fuckcdn Get website IP address by scanning the entire net 通过扫描全网绕过CDN获取网站IP地址
  • [278Star][3m] [Py] shenril/sitadel Web Application Security Scanner
  • [276Star][2m] [Py] target/strelka Real-time, container-based file scanning at enterprise scale
  • [268Star][1y] [PHP] psecio/parse Parse: A Static Security Scanner
  • [262Star][5m] [Py] abhisharma404/vault_scanner swiss army knife for hackers
  • [254Star][3m] [Py] m4ll0k/konan Konan - Advanced Web Application Dir Scanner
  • [253Star][9m] jeffzh3ng/insectsawake Network Vulnerability Scanner
  • [246Star][1m] [Py] gildasio/h2t h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
  • [245Star][2m] [Go] zmap/zgrab2 Go Application Layer Scanner
  • [235Star][3m] [PHP] psecio/versionscan A PHP version scanner for reporting possible vulnerabilities
  • [233Star][7m] [Go] gocaio/goca Goca Scanner
  • [217Star][5m] [JS] pavanw3b/sh00t Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.
  • [209Star][3m] [Py] iojw/socialscan Check email address and username availability on online platforms
  • [207Star][9m] [Py] nullarray/dorknet Selenium powered Python script to automate searching for vulnerable web apps.
  • [202Star][1y] [Py] dionach/cmsmap CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
  • [201Star][12m] [PowerShell] sud0woodo/dcomrade Powershell script for enumerating vulnerable DCOM Applications

Secret&&Privacy

  • [6673Star][10m] [Shell] awslabs/git-secrets Prevents you from committing secrets and credentials into git repositories
  • [4346Star][7m] [Py] boxug/trape People tracker on the Internet: OSINT analysis and research tool by Jose Pino
  • [3064Star][28d] [Py] tribler/tribler Privacy enhanced BitTorrent client with P2P content discovery
  • [1102Star][4m] [Vue] 0xbug/hawkeye GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
  • [935Star][20d] [Py] mozilla/openwpm A web privacy measurement framework
  • [884Star][2m] [C#] elevenpaths/foca Tool to find metadata and hidden information in the documents.
  • [822Star][18d] [Py] al0ne/vxscan python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。
  • [390Star][6m] [Py] repoog/gitprey Searching sensitive files and contents in GitHub associated to company name or other key words
  • [356Star][2m] [Py] hell0w0rld0/github-hunter This tool is for sensitive information searching on Github - The Fast Version here:
  • [312Star][15d] [HTML] tanjiti/sec_profile 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

PrivacyStorage

NoCategory

Steganography

  • [569Star][1m] [Go] dimitarpetrov/stegify Go tool for LSB steganography, capable of hiding any file within an image.
  • [344Star][6m] [Go] lukechampine/jsteg JPEG steganography
  • [342Star][5m] [Java] syvaidya/openstego OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within a cover file (e.g. images). b) Watermarking: Watermarking files (e.g. images) with an invisible signature. It can be used to detect unauthorized file copying.
  • [274Star][1y] [C] abeluck/stegdetect UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.
  • [256Star][26d] [Py] cedricbonhomme/stegano Stegano is a pure Python steganography module.

Recon&&InfoGather&&SubDomainDiscovery&&OSINT

NoCategory

  • [7042Star][28d] [Java] lionsoul2014/ip2region Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
  • [6894Star][27d] greatfire/wiki 自由浏览
  • [6109Star][9m] [Py] schollz/howmanypeoplearearound Count the number of people around you
  • [2154Star][28d] [C] texane/stlink stm32 discovery line linux programmer
  • [2061Star][16d] [Py] fortynorthsecurity/eyewitness EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
  • [1741Star][21d] [Shell] leebaird/discover Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
  • [1627Star][28d] [Py] cea-sec/ivre Network recon framework.
  • [1593Star][28d] [Go] awnumar/memguard Secure software enclave for storage of sensitive information in memory.
  • [1591Star][4m] [Py] mozilla/cipherscan A very simple way to find out which SSL ciphersuites are supported by a target.
  • [1392Star][6m] [Py] enablesecurity/wafw00f WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
  • [1309Star][3m] [JS] lockfale/osint-framework OSINT Framework
  • [1301Star][26d] [CSS] undeadsec/socialfish Educational Phishing Tool & Information Collector
  • [1261Star][1m] [Py] s0md3v/arjun HTTP parameter discovery suite.
  • [1256Star][2m] [Py] codingo/reconnoitre A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
  • [1253Star][1y] [PowerShell] dafthack/mailsniper MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
  • [1180Star][15d] [Py] codingo/nosqlmap Automated NoSQL database enumeration and web application exploitation tool.
  • [1135Star][10m] [C] blechschmidt/massdns A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
  • [1060Star][2m] [PHP] tuhinshubhra/red_hawk All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
  • [1041Star][1m] [Rust] fgribreau/mailchecker 邮件检测库，跨语言。覆盖33078虚假邮件提供者
  • [944Star][4m] [C] rbsec/sslscan sslscan tests SSL/TLS enabled services to discover supported cipher suites
  • [930Star][2m] [Py] sundowndev/phoneinfoga Advanced information gathering & OSINT tool for phone numbers
  • [924Star][17d] [OCaml] airbus-seclab/bincat Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
  • [871Star][4m] derpopo/uabe Unity Assets Bundle Extractor
  • [851Star][7m] [Py] s0md3v/recondog Reconnaissance Swiss Army Knife
  • [760Star][12m] [HTML] sense-of-security/adrecon ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
  • [742Star][3m] [Py] threatexpress/domainhunter Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
  • [698Star][17d] [Ruby] intrigueio/intrigue-core Discover Your Attack Surface
  • [694Star][27d] [Py] khast3x/h8mail Password Breach Hunting and Email OSINT tool, locally or using premium services. Supports chasing down related email
  • [680Star][4m] [Shell] nahamsec/lazyrecon This script is intended to automate your reconnaissance process in an organized fashion
  • [617Star][5m] [Py] deibit/cansina Web Content Discovery Tool
  • [579Star][7m] [Py] ekultek/zeus-scanner Advanced reconnaissance utility
  • [537Star][8m] [Py] m4ll0k/infoga Infoga - Email OSINT
  • [483Star][2m] no-github/digital-privacy 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗
  • [463Star][3m] [Py] xillwillx/skiptracer OSINT python webscaping framework
  • [462Star][14d] [Rust] kpcyrd/sn0int Semi-automatic OSINT framework and package manager
  • [417Star][2m] [Py] superhedgy/attacksurfacemapper AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
  • [404Star][4m] [Shell] d4rk007/redghost Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
  • [388Star][3m] [Go] graniet/operative-framework operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
  • [387Star][12m] [Py] chrismaddalena/odin Automated network asset, email, and social media profile discovery and cataloguing.
  • [378Star][2m] ph055a/osint-collection Maintained collection of OSINT related resources. (All Free & Actionable)
  • [362Star][1m] [Py] dedsecinside/torbot Dark Web OSINT Tool
  • [350Star][11m] [Py] aancw/belati The Traditional Swiss Army Knife for OSINT
  • [350Star][18d] [Py] depthsecurity/armory Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
  • [335Star][1m] [Py] darryllane/bluto DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking
  • [329Star][11m] [Py] mdsecactivebreach/linkedint LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation
  • [320Star][5m] [Go] nhoya/gosint OSINT Swiss Army Knife
  • [304Star][4m] [Py] initstring/linkedin2username OSINT Tool: Generate username lists for companies on LinkedIn
  • [302Star][1y] [Py] sharadkumar97/osint-spy Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at sharad@osint-spy.com
  • [299Star][1y] [Py] twelvesec/gasmask Information gathering tool - OSINT
  • [296Star][11m] [Py] r3vn/badkarma network reconnaissance toolkit
  • [289Star][6m] [Shell] eschultze/urlextractor Information gathering & website reconnaissance |
  • [284Star][2m] [JS] pownjs/pown-recon A powerful target reconnaissance framework powered by graph theory.
  • [279Star][1y] [Shell] ha71/namechk Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.
  • [268Star][1y] [Go] tomsteele/blacksheepwall blacksheepwall is a hostname reconnaissance tool
  • [264Star][2m] [Py] ekultek/whatbreach OSINT tool to find breached emails, databases, pastes, and relevant information
  • [242Star][2m] [Shell] solomonsklash/chomp-scan A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
  • [236Star][13d] [Py] zephrfish/googd0rker GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.
  • [229Star][7m] [JS] cliqz-oss/local-sheriff Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
  • [229Star][1m] [Propeller Spin] grandideastudio/jtagulator JTAGulator: Assisted discovery of on-chip debug interfaces
  • [227Star][1m] [Py] sc1341/instagramosint An Instagram Open Source Intelligence Tool
  • [225Star][1m] [Py] anon-exploiter/sitebroker A cross-platform python based utility for information gathering and penetration testing automation!
  • [220Star][3m] [Py] thewhiteh4t/finalrecon OSINT Tool for All-In-One Web Reconnaissance
  • [220Star][13d] [PowerShell] tonyphipps/meerkat A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
  • [219Star][3m] [Py] eth0izzle/the-endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.
  • [218Star][1y] [Shell] edoverflow/megplus Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
  • [210Star][4m] [Py] spiderlabs/hosthunter HostHunter a recon tool for discovering hostnames using OSINT techniques.

SubDomainDiscovery

  • [4008Star][1m] [Py] aboul3la/sublist3r Fast subdomains enumeration tool for penetration testers
  • [3147Star][15d] [Py] laramies/theharvester E-mails, subdomains and names Harvester - OSINT
  • [2981Star][6m] [Go] michenriksen/aquatone A Tool for Domain Flyovers
  • [1750Star][6m] [Py] lijiejie/subdomainsbrute A fast sub domain brute tool for pentesters
  • [1686Star][1m] [Go] subfinder/subfinder SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
  • [1668Star][7m] [Py] guelfoweb/knock Knock Subdomain Scan
  • [1555Star][14d] [Go] caffix/amass In-depth Attack Surface Mapping and Asset Discovery
  • [1087Star][1m] [Py] john-kurkowski/tldextract Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.
  • [752Star][12d] [Rust] edu4rdshl/findomain The fastest and cross-platform subdomain enumerator, don't waste your time.
  • [687Star][4m] [Go] haccer/subjack Subdomain Takeover tool written in Go
  • [639Star][1y] [Py] simplysecurity/simplyemail Email recon made fast and easy, with a framework to build on
  • [573Star][2m] [Py] jonluca/anubis Subdomain enumeration and information gathering tool
  • [537Star][8m] [Py] feeicn/esd Enumeration sub domains(枚举子域名)
  • [468Star][1m] [Py] typeerror/domained Multi Tool Subdomain Enumeration
  • [435Star][1y] [Go] ice3man543/subover A Powerful Subdomain Takeover Tool
  • [434Star][5m] [Py] threezh1/jsfinder JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
  • [425Star][1m] [Py] nsonaniya2010/subdomainizer A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
  • [422Star][10m] [Py] appsecco/bugcrowd-levelup-subdomain-enumeration This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
  • [407Star][2m] [Py] yanxiu0614/subdomain3 A new generation of tool for discovering subdomains( ip , cdn and so on)
  • [327Star][4m] [Py] chris408/ct-exposer An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
  • [302Star][1y] [Py] christophetd/censys-subdomain-finder ⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
  • [275Star][7m] [Py] franccesco/getaltname Extract subdomains from SSL certificates in HTTPS sites.
  • [254Star][10m] [Py] appsecco/the-art-of-subdomain-enumeration This repository contains all the supplement material for the book "The art of sub-domain enumeration"
  • [251Star][5m] [Go] anshumanbh/tko-subs A tool that can help detect and takeover subdomains with dead DNS records
  • [204Star][1m] [Shell] screetsec/sudomy Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format

Recon&&InfoGather

  • [3496Star][15d] [Shell] drwetter/testssl.sh Testing TLS/SSL encryption anywhere on any port
  • [2378Star][15d] [Py] smicallef/spiderfoot SpiderFoot, the most complete OSINT collection and reconnaissance tool.
  • [2168Star][1y] [Py] datasploit/datasploit An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.
  • [1963Star][8m] [JS] weichiachang/stacks-cli Check website stack from the terminal
  • [1873Star][1m] [Py] j3ssie/osmedeus Fully automated offensive security framework for reconnaissance and vulnerability scanning
  • [1629Star][1y] [Py] evyatarmeged/raccoon A high performance offensive security tool for reconnaissance and vulnerability scanning
  • [1420Star][6m] [Py] oros42/imsi-catcher This program show you IMSI numbers of cellphones around you.
  • [1271Star][1y] [Go] evilsocket/xray XRay is a tool for recon, mapping and OSINT gathering from public networks.
  • [619Star][29d] [Py] tib3rius/autorecon AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
  • [510Star][9m] [Py] fortynorthsecurity/just-metadata Just-Metadata is a tool that gathers and analyzes metadata about IP addresses. It attempts to find relationships between systems within a large dataset.
  • [453Star][19d] [Py] yassineaboukir/sublert Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
  • [388Star][10m] [Swift] ibm/mac-ibm-enrollment-app The Mac@IBM enrollment app makes setting up macOS with Jamf Pro more intuitive for users and easier for IT. The application offers IT admins the ability to gather additional information about their users during setup, allows users to customize their enrollment by selecting apps or bundles of apps to install during setup, and provides users with …
  • [349Star][4m] [C++] wbenny/pdbex pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers
  • [343Star][27d] [Py] lanmaster53/recon-ng Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
  • [283Star][2m] [Py] govanguard/legion Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
  • [269Star][10m] [Py] LaNMaSteR53/recon-ng

Fingerprinting

  • [8843Star][13d] [JS] valve/fingerprintjs2 Modern & flexible browser fingerprinting library
  • [3029Star][1m] [JS] valve/fingerprintjs Anonymous browser fingerprint
  • [1595Star][14d] [JS] ghacksuserjs/ghacks-user.js An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
  • [1595Star][9m] [C] nmikhailov/validity90 Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
  • [918Star][7m] [JS] song-li/cross_browser cross_browser_fingerprinting
  • [783Star][1m] [Py] salesforce/ja3 JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.
  • [372Star][21d] [Py] 0x4d31/fatt FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
  • [309Star][2m] [Py] dpwe/audfprint Landmark-based audio fingerprinting
  • [305Star][3m] [Py] salesforce/hassh HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.
  • [268Star][1y] [CSS] w-digital-scanner/w11scan 分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform
  • [240Star][2m] [C] leebrotherston/tls-fingerprinting TLS Fingerprinting
  • [224Star][2m] [GLSL] westpointltd/tls_prober A tool to fingerprint SSL/TLS servers
  • [212Star][1y] [Py] sensepost/spartan Frontpage and Sharepoint fingerprinting and attack tool.
  • [200Star][1y] [Erlang] kudelskisecurity/scannerl The modular distributed fingerprinting engine

Collection

SocialNetwork

Twitter

  • [2797Star][21d] [Py] twintproject/twint An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

Github

  • [1627Star][22d] [Go] eth0izzle/shhgit Ah shhgit! Find GitHub secrets in real time
  • [1549Star][1y] [Py] unkl4b/gitminer Tool for advanced mining for content on Github
  • [1321Star][7m] [Py] feeicn/gsil GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）
  • [840Star][7m] [Go] misecurity/x-patrol github泄露扫描系统
  • [834Star][1m] [JS] vksrc/github-monitor Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
  • [767Star][1m] [Py] bishopfox/gitgot Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
  • [750Star][3m] [Py] techgaun/github-dorks Collection of github dorks and helper tool to automate the process of checking dorks
  • [602Star][2m] [Py] hisxo/gitgraber gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
  • [312Star][15d] [HTML] tanjiti/sec_profile 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
  • [290Star][7m] [Py] s0md3v/zen Find emails of Github users

NoCategory

  • [7541Star][30d] [Py] theyahya/sherlock Find Usernames Across Social Networks
  • [2504Star][2m] [Py] greenwolf/social_mapper A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
  • [653Star][1y] [Go] 0x09al/raven raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

DNS

  • [2421Star][4m] [Go] oj/gobuster Directory/File, DNS and VHost busting tool written in Go
  • [2278Star][30d] [Py] ab77/netflix-proxy Smart DNS proxy to watch Netflix
  • [2081Star][19d] [Py] elceef/dnstwist Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
  • [1885Star][28d] [C++] powerdns/pdns PowerDNS
  • [1669Star][3m] [Py] lgandx/responder Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
  • [1117Star][7m] [Py] darkoperator/dnsrecon DNS Enumeration Script
  • [1044Star][2m] [Py] infosec-au/altdns Generates permutations, alterations and mutations of subdomains and then resolves them
  • [1039Star][1m] [Go] nadoo/glider glider is a forward proxy with multiple protocols support, and also a dns forwarding server with ipset management features(like dnsmasq).
  • [969Star][6m] [Py] m57/dnsteal DNS Exfiltration tool for stealthily sending files over DNS requests.
  • [891Star][18d] [Py] mschwager/fierce A DNS reconnaissance tool for locating non-contiguous IP space.
  • [877Star][5m] [Py] m0rtem/cloudfail Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
  • [681Star][1y] [Py] bugscanteam/dnslog DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。
  • [594Star][7m] [Shell] cokebar/gfwlist2dnsmasq A shell script which convert gfwlist into dnsmasq rules. Python version:
  • [558Star][6m] [C] getdnsapi/stubby Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).
  • [457Star][8m] [C] cofyc/dnscrypt-wrapper This is dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver.
  • [359Star][3m] [JS] nccgroup/singularity A DNS rebinding attack framework.
  • [259Star][11m] [Py] trycatchhcf/packetwhisper PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
  • [258Star][2m] [Go] zmap/zdns Fast CLI DNS Lookup Tool
  • [249Star][3m] [C#] kevin-robertson/inveighzero Windows C# LLMNR/mDNS/NBNS/DNS spoofer/man-in-the-middle tool
  • [243Star][9m] [Go] erbbysam/dnsgrep Quickly Search Large DNS Datasets
  • [237Star][25d] [Py] mandatoryprogrammer/trusttrees A Tool for DNS Delegation Trust Graphing
  • [230Star][1m] [Go] sensepost/godoh A DNS-over-HTTPS Command & Control Proof of Concept
  • [213Star][1y] [PowerShell] lukebaggett/dnscat2-powershell A Powershell client for dnscat2, an encrypted DNS command and control tool.

Shodan

nmap

  • [3492Star][17d] [C] nmap/nmap Nmap - the Network Mapper. Github mirror of official SVN repository.
  • [2099Star][6m] [Py] calebmadrigal/trackerjacker Like nmap for mapping wifi networks you're not connected to, plus device tracking
  • [1666Star][3m] [Lua] vulnerscom/nmap-vulners NSE script based on Vulners.com API
  • [1497Star][2m] [C] nmap/npcap Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
  • [1237Star][2m] [Lua] scipag/vulscan Advanced vulnerability scanning with Nmap NSE
  • [936Star][4m] [Shell] trimstray/sandmap Nmap on steroids! Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
  • [887Star][11m] [Py] rev3rsesecurity/webmap Nmap Web Dashboard and Reporting
  • [822Star][2m] [Py] x90skysn3k/brutespray Brute-Forcing from Nmap output - Automatically attempts default creds on found services.
  • [728Star][4m] [Lua] cldrn/nmap-nse-scripts My collection of nmap NSE scripts
  • [658Star][4m] [Py] iceyhexman/onlinetools 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..
  • [481Star][1y] [XSLT] honze-net/nmap-bootstrap-xsl A Nmap XSL implementation with Bootstrap.
  • [391Star][7m] [Py] savon-noir/python-libnmap libnmap is a python library to run nmap scans, parse and diff scan results. It supports python 2.6 up to 3.4. It's wonderful.
  • [325Star][9m] [Py] samhaxr/hackbox HackBox is the combination of awesome techniques. [1] - Xss [2] - Exploits [3] - Subdomain scanner [4] - Whois Lookup [5] - SSRF Injection [6] - Nmap Auto banner [7] - Js Url parser [8] - Web Headers [9] - Listener [10] - Current Network Stats [11] - CORS Misconfig [12] - AWS S3 Misconfig
  • [307Star][1y] [Java] s4n7h0/halcyon First IDE for Nmap Script (NSE) Development.
  • [282Star][1y] [Ruby] danmcinerney/pentest-machine Automates some pentest jobs via nmap xml file
  • [257Star][1y] [Java] danicuestasuarez/nmapgui Advanced Graphical User Interface for NMap
  • [247Star][1y] [Shell] m4ll0k/autonse Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner
  • [230Star][7m] [Lua] rvn0xsy/nse_vuln Nmap扫描、漏洞利用脚本
  • [228Star][5m] [Py] maaaaz/nmaptocsv A simple python script to convert Nmap output to CSV

Database&&SQLAttack&&SQLInjection

NoCategory

SQL

NoCategory

  • [2883Star][1m] [Go] cookiey/yearning A most popular sql audit platform for mysql
  • [712Star][1y] [Py] the-robot/sqliv massive SQL injection vulnerability scanner
  • [553Star][1m] [HTML] netspi/sqlinjectionwiki A wiki focusing on aggregating and documenting various SQL injection methods
  • [444Star][9m] [Go] netxfly/x-crack x-crack - Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB
  • [439Star][3m] [Go] stripe/safesql Static analysis tool for Golang that protects against SQL injections
  • [395Star][3m] [C#] shack2/supersqlinjectionv1 超级SQL注入工具（SSQLInjection）是一款基于HTTP协议自组包的SQL注入工具,采用C#开发，直接操作TCP会话来进行HTTP交互，支持出现在HTTP协议任意位置的SQL注入，支持各种类型的SQL注入，支持HTTPS模式注入；支持以盲注、错误显示、Union注入等方式来获取数据；支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库；支持手动灵活的进行SQL注入绕过，可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计，需要使用人员对SQL注入有一定了解。
  • [295Star][8m] [JS] ning1022/sqlinjectionwiki 一个专注于聚合和记录各种SQL注入方法的wiki
  • [255Star][7m] [Py] s0md3v/sqlmate A friend of SQLmap which will do what you always expected from SQLmap.

SQLInjection

SQLVul

NoSQL

NoCategory

MongoDB

Audit&&SecurityAudit&&CodeAudit

NoCategory

  • [6407Star][1m] [Shell] cisofy/lynis Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
  • [1465Star][27d] [Shell] mzet-/linux-exploit-suggester Linux privilege escalation auditing tool
  • [967Star][2m] [Py] nccgroup/scoutsuite Multi-Cloud Security Auditing Tool
  • [604Star][6m] [JS] vincentcox/stacoan StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
  • [271Star][17d] [Py] lorexxar/cobra-w Cobra-W -> Cobra-White 白盒源代码审计工具-白帽子版

CodeAudit

  • [2041Star][3m] [Py] whaleshark-team/cobra Source Code Security Audit (源代码安全审计)
  • [807Star][1y] [Py] utkusen/leviathan wide range mass audit toolkit
  • [646Star][1y] chybeta/code-audit-challenges Code-Audit-Challenges
  • [626Star][8m] [Py] klen/pylama Code audit tool for python.
  • [399Star][4m] [C] anssi-fr/ad-control-paths Active Directory Control Paths auditing and graphing tools
  • [355Star][11m] [Py] enablesecurity/sipvicious SIPVicious suite is a set of security tools that can be used to audit SIP based VoIP systems.
  • [293Star][2m] [C#] ossindex/devaudit Open-source, cross-platform, multi-purpose security auditing tool
  • [263Star][14d] [Py] exodus-privacy/exodus Platform to audit trackers used by Android application
  • [254Star][1m] [Py] hubblestack/hubble Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe.
  • [240Star][4m] [PowerShell] nccgroup/azucar Security auditing tool for Azure environments
  • [215Star][1y] [C] meliot/filewatcher A simple auditing utility for macOS

SET&&Phishing&&SpearPhishing

NoCategory

SET

Phish

SpearPhishing

Hardware&&USB&&RaspberryPi

NoCategory

  • [2190Star][18d] [Shell] eliaskotlyar/xiaomi-dafang-hacks
  • [2009Star][1y] [C] xoreaxeaxeax/rosenbridge Hardware backdoors in some x86 CPUs
  • [1932Star][13d] [Go] ullaakut/cameradar Cameradar hacks its way into RTSP videosurveillance cameras
  • [1327Star][1y] [Py] carmaa/inception Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.
  • [1117Star][10m] [JS] mame82/p4wnp1_aloa P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
  • [962Star][2m] [C] olimex/olinuxino OLINUXINO is Open Source / Open Hardware, low cost from EUR 24 Linux Industrial grade Single Board Computer capable to operate -25+85C
  • [516Star][3m] [Java] 1998lixin/hardwarecode 基于xposed 修改硬件信息

USB

RaspberryPi

  • [2643Star][12m] [Py] mame82/p4wnp1 P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
  • [1658Star][7m] [Makefile] raspberrypi/noobs NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
  • [1510Star][1m] [C] raspberrypi/userland Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
  • [296Star][6m] [C++] cyphunk/jtagenum Given an Arduino compatible microcontroller or Raspberry PI (experimental), JTAGenum scans pins[] for basic JTAG functionality and can be used to enumerate the Instruction Register for undocumented instructions. Props to JTAG scanner and Arduinull which came before JTAGenum and forwhich much of the code and logic is based on. Feel free to branch…
  • [258Star][5m] [Py] mbro95/portablecellnetwork Utilize a Raspberry Pi and a Nuand BladeRF to generate your own portable local cell network
  • [246Star][4m] [Py] tipam/pi3d Simple, yet powerful, 3D Python graphics library for beginners and school children running on the Raspberry Pi.

Car&&Vehicle

EvnSetup&&Env

NoCategory

  • [1571Star][13d] [HTML] clong/detectionlab Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
  • [1371Star][16d] [Go] crazy-max/windowsspyblocker
  • [1294Star][2m] [C] cisco-talos/pyrebox Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
  • [1117Star][10m] [JS] mame82/p4wnp1_aloa P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
  • [799Star][3m] redhuntlabs/redhunt-os Virtual Machine for Adversary Emulation and Threat Hunting
  • [781Star][2m] sh4hin/androl4b A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
  • [560Star][5m] [Ruby] sliim/pentest-env Pentest environment deployer (kali linux + targets) using vagrant and chef.
  • [210Star][11m] [Shell] proxycannon/proxycannon-ng A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference

Linux-Distro

  • [2830Star][1m] [Py] trustedsec/ptf The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
  • [2310Star][1m] security-onion-solutions/security-onion Linux distro for intrusion detection, enterprise security monitoring, and log management
  • [1459Star][13d] [Shell] blackarch/blackarch BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
  • [342Star][13d] [Shell] archstrike/archstrike An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.

EnvAutoSetup

  • [3058Star][2m] [PowerShell] fireeye/commando-vm Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
  • [1686Star][18d] [PowerShell] fireeye/flare-vm 火眼发布用于 Windows 恶意代码分析的虚拟机：FLARE VM

VulnerableMachine

NoCategory

  • [4986Star][1m] [Shell] vulhub/vulhub Pre-Built Vulnerable Environments Based on Docker-Compose
  • [3680Star][2m] [PHP] ethicalhack3r/dvwa Damn Vulnerable Web Application (DVWA)
  • [2536Star][25d] [Shell] medicean/vulapps 快速搭建各种漏洞环境(Various vulnerability environment)
  • [2382Star][27d] [TSQL] rapid7/metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
  • [1522Star][1m] [PHP] c0ny1/upload-labs 一个想帮你总结所有类型的上传漏洞的靶场
  • [981Star][1m] [C] hacksysteam/hacksysextremevulnerabledriver HackSys Extreme Vulnerable Windows Driver
  • [831Star][27d] [JS] lirantal/is-website-vulnerable finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
  • [741Star][1m] [Ruby] rubysec/ruby-advisory-db A database of vulnerable Ruby Gems
  • [633Star][2m] [HCL] rhinosecuritylabs/cloudgoat CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
  • [577Star][2m] [HTML] owasp/railsgoat A vulnerable version of Rails that follows the OWASP Top 10
  • [563Star][1m] [C++] bkerler/exploit_me Very vulnerable ARM/ARM64 application (CTF style exploitation tutorial)
  • [517Star][5m] [PHP] acmesec/dorabox DoraBox - 基础Web漏洞训练靶场
  • [311Star][28d] [Py] owasp/owasp-vwad The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
  • [252Star][2m] [PHP] incredibleindishell/ssrf_vulnerable_lab This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
  • [237Star][2m] [JS] owasp/dvsa a Damn Vulnerable Serverless Application
  • [218Star][11m] [C] stephenbradshaw/vulnserver Vulnerable server used for learning software exploitation

WebApp

  • [2902Star][13d] [JS] webgoat/webgoat WebGoat 8.0
  • [2556Star][15d] [JS] bkimminich/juice-shop OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
  • [459Star][14d] [Py] stamparm/dsvw Damn Small Vulnerable Web
  • [427Star][3m] [Py] payatu/tiredful-api An intentionally designed broken web application based on REST API.
  • [289Star][1y] [CSS] appsecco/dvna Damn Vulnerable NodeJS Application
  • [218Star][5m] [JS] cr0hn/vulnerable-node A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

Generate

  • [1699Star][13d] [Ruby] cliffe/secgen Create randomly insecure VMs
  • [1408Star][5m] [PHP] s4n7h0/xvwa XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
  • [305Star][7m] [Ruby] secgen/secgen Generate vulnerable virtual machines on the fly (current team development is taking place in the cliffe/SecGen fork)

Collection

MobileApp

Network&&Sniff&&Mitm

NoCategory

  • [11823Star][24d] [Go] buger/goreplay GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
  • [6391Star][1m] [Py] networkx/networkx Official NetworkX source code repository.
  • [5204Star][6m] [Py] usarmyresearchlab/dshell Dshell is a network forensic analysis framework.
  • [4526Star][15d] [Py] secdev/scapy Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
  • [4144Star][11m] [JS] kdzwinel/betwixt Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
  • [3729Star][20d] [Py] secureauthcorp/impacket Impacket is a collection of Python classes for working with network protocols.
  • [3482Star][15d] [JS] aol/moloch Moloch is an open source, large scale, full packet capturing, indexing, and database system.
  • [3480Star][7m] [Go] fanpei91/torsniff torsniff - a sniffer that sniffs torrents from BitTorrent network
  • [3191Star][14d] [Py] stamparm/maltrail Malicious traffic detection system
  • [3096Star][25d] [C] valdikss/goodbyedpi GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
  • [2503Star][7m] [C++] chengr28/pcap_dnsproxy Pcap_DNSProxy, a local DNS server based on packet capturing
  • [1877Star][28d] [C] ntop/ndpi Open Source Deep Packet Inspection Software Toolkit
  • [1799Star][1m] [C] merbanan/rtl_433 Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
  • [1419Star][2m] [Go] google/stenographer Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
  • [1328Star][2m] [C++] mfontanini/libtins High-level, multiplatform C++ network packet sniffing and crafting library.
  • [1271Star][2m] [C] traviscross/mtr Official repository for mtr, a network diagnostic tool
  • [1258Star][1m] [Go] dreadl0ck/netcap A framework for secure and scalable network traffic analysis -
  • [1207Star][1y] [Py] danmcinerney/net-creds Sniffs sensitive data from interface or pcap
  • [1056Star][6m] [PowerShell] nytrorst/netripper NetRipper - Smart traffic sniffing for penetration testers
  • [1046Star][10m] [C++] simsong/tcpflow TCP/IP packet demultiplexer. Download from:
  • [952Star][2m] [Py] kiminewt/pyshark Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
  • [945Star][7m] [Py] fireeye/flare-fakenet-ng FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  • [853Star][3m] [C] cisco/joy A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
  • [820Star][6m] [Go] 40t/go-sniffer
  • [817Star][29d] [C] zerbea/hcxtools Portable solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = capture, convert and calculate candidates, x = different hashtypes
  • [800Star][2m] [C] emmericp/ixy Simple userspace packet processing for educational purposes
  • [790Star][7m] [Py] phaethon/kamene Network packet and pcap file crafting/sniffing/manipulation/visualization security tool. Originally forked from scapy in 2015 and providing python3 compatibility since then.
  • [779Star][2m] [C] netsniff-ng/netsniff-ng A Swiss army knife for your daily Linux network plumbing.
  • [713Star][2m] [Py] cloudflare/bpftools BPF Tools - packet analyst toolkit
  • [652Star][1m] [Py] kbandla/dpkt fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
  • [645Star][1m] [C] zerbea/hcxdumptool Small tool to capture packets from wlan devices.
  • [636Star][1y] [Go] ga0/netgraph A cross platform http sniffer with a web UI
  • [509Star][9m] [Perl] mrash/fwknop Single Packet Authorization > Port Knocking
  • [505Star][7m] [C++] kohler/click The Click modular router: fast modular packet processing and analysis
  • [499Star][1m] [C] sam-github/libnet A portable framework for low-level network packet construction
  • [458Star][1m] [Py] netzob/netzob Netzob: Protocol Reverse Engineering, Modeling and Fuzzing
  • [451Star][4m] [C] jarun/keysniffer
  • [440Star][20d] [C#] malwareinfosec/ekfiddle A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general.
  • [435Star][2m] [C++] pstavirs/ostinato Ostinato - Packet/Traffic Generator and Analyzer
  • [431Star][2m] [Ruby] aderyabin/sniffer Log and Analyze Outgoing HTTP Requests
  • [412Star][10m] [C] jpr5/ngrep ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF f…
  • [411Star][2m] [C] desowin/usbpcap USB packet capture for Windows
  • [407Star][8m] [Py] mitrecnd/chopshop Protocol Analysis/Decoder Framework
  • [387Star][1m] [Rust] kpcyrd/sniffglue Secure multithreaded packet sniffer
  • [382Star][2m] [Go] alphasoc/flightsim A utility to generate malicious network traffic and evaluate controls
  • [379Star][4m] [PHP] floedesigntechnologies/phpcs-security-audit phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
  • [375Star][28d] [Py] idaholab/malcolm Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
  • [330Star][12m] [Ruby] packetfu/packetfu PacketFu, a mid-level packet manipulation library for Ruby
  • [326Star][14d] [TypeScript] shroudedcode/apk-mitm
  • [303Star][1y] [Py] tintinweb/scapy-ssl_tls SSL/TLS layers for scapy the interactive packet manipulation tool
  • [292Star][4m] [C] pulkin/esp8266-injection-example Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.
  • [278Star][23d] [C] troglobit/nemesis A command-line network packet crafting and injection utility
  • [273Star][9m] [C] jiaoxianjun/btle Bluetooth Low Energy (BLE) packet sniffer and generator for both standard and non standard (raw bit).
  • [254Star][2m] [Go] sachaos/tcpterm tcpterm is a packet visualizer in TUI.
  • [243Star][7m] [Py] needmorecowbell/sniff-paste Pastebin OSINT Harvester
  • [241Star][2m] [C] nccgroup/sniffle A sniffer for Bluetooth 5 and 4.x LE
  • [218Star][18d] [Py] ghostop14/sparrow-wifi Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
  • [213Star][2m] [C] dns-oarc/dnscap Network capture utility designed specifically for DNS traffic

MITM

PacketSniff&&Monitor

  • [3480Star][7m] [Go] fanpei91/torsniff torsniff - a sniffer that sniffs torrents from BitTorrent network
  • [2950Star][14d] [Lua] ntop/ntopng Web-based Traffic and Security Network Traffic Monitoring
  • [1328Star][1y] [C] gamelinux/passivedns A network sniffer that logs all DNS server replies for use in a passive DNS setup
  • [286Star][1m] [Shell] tehw0lf/airbash A POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing

pcap

  • [820Star][13d] [C++] seladb/pcapplusplus PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, DPDK and PF_RING.
  • [780Star][3m] [Py] srinivas11789/pcapxray A Network Forensics Tool
  • [459Star][30d] [C#] chmorgan/sharppcap Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
  • [210Star][12m] [Py] mateuszk87/pcapviz Visualize network topologies and collect graph statistics based on pcap files
  • [209Star][7m] [JS] dirtbags/pcapdb A Distributed, Search-Optimized Full Packet Capture System
  • [206Star][4m] [Py] pynetwork/pypcap pypcap - python libpcap module, forked from code.google.com/p/pypcap, now actively maintained

Hijack&&TCP/HTTP

ProtocolAnalyze&&PacketAnalyze

Password&&Credential

NoCategory

  • [4772Star][1m] [Py] alessandroz/lazagne Credentials recovery project
  • [1441Star][1y] [Py] d4vinci/cr3dov3r Know the dangers of credential reuse attacks.
  • [1025Star][1y] [PowerShell] danmcinerney/icebreaker Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
  • [891Star][16d] [C] cossacklabs/themis Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 12 platforms.
  • [514Star][2m] [Py] unode/firefox_decrypt Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox/Thunderbird/Seabird) profiles
  • [492Star][2m] [Py] byt3bl33d3r/sprayingtoolkit Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
  • [483Star][1y] [JS] emilbayes/secure-password Making Password storage safer for all
  • [442Star][1y] [Go] ncsa/ssh-auditor The best way to scan for weak ssh passwords on your network
  • [385Star][11m] [Shell] mthbernardes/sshlooter Script to steal passwords from ssh.
  • [347Star][3m] [Py] davidtavarez/pwndb Search for leaked credentials
  • [295Star][5m] [C#] raikia/credninja A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter
  • [284Star][6m] [Shell] greenwolf/spray A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
  • [272Star][2m] [JS] kspearrin/ff-password-exporter Easily export your passwords from Firefox.
  • [267Star][1m] [Py] xfreed0m/rdpassspray Python3 tool to perform password spraying using RDP
  • [255Star][5m] [C] rub-syssec/omen OMEN: Ordered Markov ENumerator - Password Guesser
  • [210Star][3m] [Ruby] bdmac/strong_password Entropy-based password strength checking for Ruby and Rails.

Password

  • [6832Star][17d] [C] hashcat/hashcat World's fastest and most advanced password recovery utility
  • [5149Star][12m] [JS] samyk/poisontap Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
  • [3083Star][13d] [C] magnumripper/johntheripper This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
  • [2536Star][1m] [C] huntergregal/mimipenguin A tool to dump the login password from the current linux user
  • [1124Star][7m] [Py] mebus/cupp Common User Passwords Profiler (CUPP)
  • [859Star][4m] [Go] fireeye/gocrack GoCrack is a management frontend for password cracking tools written in Go
  • [843Star][2m] [Go] ukhomeoffice/repo-security-scanner CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
  • [628Star][1y] [Java] faizann24/wifi-bruteforcer-fsecurify Android application to brute force WiFi passwords without requiring a rooted device.
  • [585Star][1y] [Py] brannondorsey/passgan A Deep Learning Approach for Password Guessing (
  • [578Star][6m] [C] hashcat/hashcat-utils Small utilities that are useful in advanced password cracking
  • [574Star][3m] [Py] thewhiteh4t/pwnedornot OSINT Tool for Finding Passwords of Compromised Email Addresses
  • [482Star][1y] [PowerShell] dafthack/domainpasswordspray DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
  • [404Star][1y] [C++] vah13/extracttvpasswords tool to extract passwords from TeamViewer memory using Frida
  • [344Star][7m] [Py] iphelix/pack PACK (Password Analysis and Cracking Kit)
  • [318Star][2m] [JS] auth0/repo-supervisor Scan your code for security misconfiguration, search for passwords and secrets.
  • [318Star][1m] [CSS] guyoung/captfencoder CaptfEncoder是一款跨平台网络安全工具套件，提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具，并聚合各类在线工具。

Ancient

Windows

  • [8590Star][3m] [C] gentilkiwi/mimikatz A little tool to play with Windows security
  • [2084Star][1m] [Py] trustedsec/unicorn Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

webshell

Collection

NoCategory

Other

NoCategory

  • [25893Star][12d] [Py] certbot/certbot Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
  • [7594Star][17d] [JS] gchq/cyberchef The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
  • [4838Star][2m] [Rust] sharkdp/hexyl A command-line hex viewer
  • [4230Star][14d] [JS] cure53/dompurify DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
  • [3166Star][6m] [HTML] leizongmin/js-xss Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
  • [3078Star][2m] [Shell] trimstray/htrace.sh My simple Swiss Army knife for http/https troubleshooting and profiling.
  • [949Star][8m] [Go] maliceio/malice VirusTotal Wanna Be - Now with 100% more Hipster
  • [500Star][17d] [Py] certtools/intelmq IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
  • [464Star][4m] [JS] ehrishirajsharma/swiftnessx A cross-platform note-taking & target-tracking app for penetration testers.

TLS&&SSL&&HTTPS

  • [4292Star][5m] [Py] diafygi/acme-tiny A tiny script to issue and renew TLS certs from Let's Encrypt
  • [1663Star][2m] [HTML] chromium/badssl.com
  • [1177Star][2m] [Go] jsha/minica minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
  • [1126Star][19d] [Go] smallstep/certificates 私有的证书颁发机构（X.509和SSH）和ACME服务器，用于安全的自动证书管理，因此您可以在SSH和SSO处使用TLS
  • [507Star][14d] [Java] rub-nds/tls-attacker TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is developed by the Ruhr University Bochum (

IncidentResponse&&Forensics

NoCategory

IncidentResponse

  • [3054Star][14d] meirwah/awesome-incident-response A curated list of tools for incident response
  • [1801Star][4m] bypass007/emergency-response-notes 应急响应实战笔记，一个安全工程师的自我修养。
  • [1310Star][3m] [HTML] thehive-project/thehive TheHive: a Scalable, Open Source and Free Security Incident Response Platform
  • [1132Star][10m] [Py] certsocietegenerale/fir Fast Incident Response
  • [988Star][9m] [Go] gencebay/httplive HTTP Request & Response Service, Mock HTTP
  • [965Star][1m] [JS] monzo/response Monzo's real-time incident response and reporting tool
  • [764Star][16d] microsoft/msrc-security-research Security Research from the Microsoft Security Response Center (MSRC)
  • [744Star][10m] [PowerShell] davehull/kansa A Powershell incident response framework
  • [710Star][2m] [HTML] pagerduty/incident-response-docs PagerDuty's Incident Response Documentation.
  • [634Star][9m] [Roff] palantir/windows-event-forwarding A repository for using windows event forwarding for incident detection and response
  • [627Star][21d] [Kotlin] chuckerteam/chucker simplifies the inspection of HTTP(S) requests/responses, and Throwables fired by your Android App
  • [579Star][9m] [Go] nytimes/gziphandler Go middleware to gzip HTTP responses
  • [535Star][5m] [Py] owasp/qrljacking QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.
  • [459Star][6m] palantir/osquery-configuration A repository for using osquery for incident detection and response
  • [452Star][28d] [Py] controlscanmdr/cyphon Open source incident management and response platform.
  • [286Star][1m] [Py] alexandreborges/malwoverview Malwoverview.py is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.
  • [251Star][1m] [C#] orlikoski/cylr CyLR - Live Response Collection Tool
  • [204Star][2m] [PowerShell] wiredpulse/posh-r2 PowerShell - Rapid Response... For the incident responder in you!

Forensics

  • [3315Star][2m] [Py] google/grr GRR Rapid Response: remote live forensics for incident response
  • [1486Star][9m] [Py] google/rekall Rekall Memory Forensic Framework
  • [1465Star][18d] [C] sleuthkit/sleuthkit The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
  • [1200Star][27d] [Py] google/timesketch Collaborative forensic timeline analysis
  • [1152Star][2m] [Go] mozilla/mig Distributed & real time digital forensics at the speed of the cloud
  • [953Star][1m] [Rich Text Format] decalage2/oletools oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
  • [940Star][17d] [C++] hasherezade/pe-sieve Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
  • [909Star][2m] [Py] ondyari/faceforensics Github of the FaceForensics dataset
  • [826Star][12d] [Java] sleuthkit/autopsy Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
  • [817Star][21d] cugu/awesome-forensics A curated list of awesome forensic analysis tools and resources
  • [802Star][14d] [Py] yampelo/beagle Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
  • [744Star][19d] [Py] snovvcrash/usbrip Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
  • [419Star][2m] [Py] obsidianforensics/hindsight Internet history forensics for Google Chrome/Chromium
  • [400Star][14d] [Py] forensicartifacts/artifacts Digital Forensics Artifact Repository
  • [391Star][10m] [Go] mozilla/masche MIG Memory Forensic library
  • [321Star][10m] [Py] alessandroz/lazagneforensic Windows passwords decryption from dump files
  • [317Star][3m] [HTML] intezer/linux-explorer Easy-to-use live forensics toolbox for Linux endpoints
  • [311Star][8m] [Py] n0fate/chainbreaker Mac OS X Keychain Forensic Tool
  • [301Star][2m] [Py] google/turbinia Automation and Scaling of Digital Forensics Tools
  • [296Star][24d] [Shell] vitaly-kamluk/bitscout Remote forensics meta tool
  • [268Star][12d] [Perl] owasp/o-saft O-Saft - OWASP SSL advanced forensic tool
  • [255Star][6m] [Batchfile] diogo-fernan/ir-rescue A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
  • [250Star][21d] [Py] google/docker-explorer A tool to help forensicate offline docker acquisitions
  • [248Star][12m] [C++] comaeio/swishdbgext Incident Response & Digital Forensics Debugging Extension
  • [243Star][11m] [Py] crowdstrike/forensics Scripts and code referenced in CrowdStrike blog posts
  • [241Star][1m] [Py] orlikoski/cdqr The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
  • [227Star][30d] [C] elfmaster/libelfmaster Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
  • [217Star][2m] [Py] crowdstrike/automactc AutoMacTC: Automated Mac Forensic Triage Collector

Volatility

Honeypot

NoCategory

  • [1784Star][1m] [Py] threatstream/mhn Modern Honey Network
  • [1259Star][21d] [C] dtag-dev-sec/tpotce tpotce：创建多蜜罐平台T-Pot ISO 镜像
  • [1201Star][24d] [Go] hacklcx/hfish Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统，记录黑客攻击手段
  • [400Star][3m] [Py] nsmfoo/antivmdetection Script to create templates to use with VirtualBox to make vm detection harder
  • [356Star][2m] [Py] p1r06u3/opencanary_web The web management platform of honeypot
  • [325Star][1y] [JS] shmakov/honeypot Low interaction honeypot that displays real time attacks
  • [303Star][1m] [Py] hatching/vmcloak Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
  • [271Star][1y] [Py] gbafana25/esp8266_honeypot THE ESP8266 HONEYPOT: A PROJECT TO TRAP SCRIPT KIDDIES EVERYWHRE!!
  • [229Star][1y] [Shell] aplura/tango Honeypot Intelligence with Splunk
  • [227Star][9m] [Py] honeynet/beeswarm Honeypot deployment made easy
  • [219Star][1m] [Py] jamesturk/django-honeypot

Honeypot

Collection

SSH&&Telnet

TCP&&UDP

HTTP&&Web

  • [433Star][1y] [Py] 0x4d31/honeylambda honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

ActiveDirectory

SMTP

打印机

Elasticsearch

ADB

Bluetooth

Other

Wordpress

ThreatIntelligence

NoCategory

Collection

IOC

NoCategory

  • [1408Star][1m] [Py] neo23x0/loki Loki - Simple IOC and Incident Response Scanner
  • [208Star][4m] [Shell] neo23x0/fenrir Simple Bash IOC Scanner

Collection

IOCExtract

IOCCrawl

  • [652Star][13d] [Py] blackorbird/apt_report Interesting apt report collection and some special ioc express
  • [626Star][28d] [YARA] eset/malware-ioc Indicators of Compromises (IOC) of our various investigations
  • [418Star][1y] [JS] ciscocsirt/gosint The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  • [303Star][1y] [Py] fsecurelabs/win_driver_plugin A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  • [257Star][2m] [PHP] pan-unit42/iocs Indicators from Unit 42 Public Reports

Defense

NoCategory

  • [630Star][5m] [Py] binarydefense/artillery The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

WAF

  • [3248Star][2m] [C] nbs-system/naxsi NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
  • [3125Star][17d] [C++] spiderlabs/modsecurity ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
  • [617Star][2m] [Py] 3xp10it/xwaf Automatic bypass (brute force) waf
  • [600Star][3m] [Lua] jx-sec/jxwaf JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的web应用防火墙
  • [599Star][1y] [Lua] unixhot/waf 使用Nginx+Lua实现的WAF（版本v1.0）
  • [543Star][7m] [Py] s0md3v/blazy Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .
  • [500Star][1m] [Go] janusec/janusec Janusec Application Gateway, a Golang based application security solution which provides WAF (Web Application Firewall), CC attack defense, unified web administration portal, private key protection, web routing and scalable load balancing.
  • [462Star][7m] [Java] chengdedeng/waf
  • [436Star][2m] [PHP] akaunting/firewall Web Application Firewall (WAF) package for Laravel
  • [424Star][8m] [Py] aws-samples/aws-waf-sample This repository contains example scripts and sets of rules for the AWS WAF service. Please be aware that the applicability of these examples to specific workloads may vary.
  • [406Star][1m] [C#] jbe2277/waf Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
  • [401Star][7m] [Py] awslabs/aws-waf-security-automations This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
  • [401Star][10m] [C] titansec/openwaf Web security protection system based on openresty
  • [243Star][1y] [Py] warflop/cloudbunny CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
  • [207Star][6m] [C] coolervoid/raptor_waf Raptor - WAF - Web application firewall using DFA [ Current version ] - Beta

FireWall

  • [4162Star][2m] [Py] evilsocket/opensnitch OpenSnitch is a GNU/Linux port of the Little Snitch application firewall
  • [3186Star][1m] [Objective-C] objective-see/lulu LuLu is the free macOS firewall
  • [1515Star][12d] [Java] ukanth/afwall AFWall+ (Android Firewall +) - iptables based firewall for Android
  • [1031Star][9m] [Shell] firehol/firehol A firewall for humans...
  • [817Star][4m] trimstray/iptables-essentials Iptables Essentials: Common Firewall Rules and Commands.
  • [545Star][6m] [Go] sysdream/chashell Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.
  • [449Star][5m] [Shell] vincentcox/bypass-firewalls-by-dns-history Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
  • [232Star][4m] [Shell] essandess/macos-fortress Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)
  • [220Star][1y] [Go] maksadbek/tcpovericmp TCP implementation over ICMP protocol to bypass firewalls

IDS&&IPS

  • [2874Star][27d] [Zeek] zeek/zeek Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
  • [2798Star][1m] [C] ossec/ossec-hids OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
  • [1589Star][1m] [Go] ysrc/yulong-hids 一款由 YSRC 开源的主机入侵检测系统
  • [1252Star][1m] [C] oisf/suricata Suricata git repository maintained by the OISF
  • [524Star][19d] [Py] 0kee-team/watchad AD Security Intrusion Detection System
  • [507Star][4m] [C] decaf-project/decaf DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
  • [489Star][7m] [Shell] stamusnetworks/selks A Suricata based IDS/IPS distro
  • [369Star][6m] jnusimba/androidsecnotes some learning notes about Android Security
  • [278Star][13d] [C] ebwi11/agentsmith-hids Low performance loss and by LKM technology HIDS tool, from E_Bwill.
  • [243Star][1y] [Perl] mrash/psad psad: Intrusion Detection and Log Analysis with iptables
  • [220Star][1m] [Py] secureworks/dalton Suricata and Snort IDS rule and pcap testing system

Spdier

wordlist

NoCategory

Collection

WordlistGenerate

Breach&&Leak

  • [1358Star][5m] gitguardian/apisecuritybestpractices Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
  • [885Star][21d] [Py] woj-ciech/leaklooker Find open databases - Powered by Binaryedge.io

Crack&&BruteForce

  • [3217Star][18d] [C] vanhauser-thc/thc-hydra hydra
  • [1885Star][1m] [Py] lanjelot/patator Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
  • [1042Star][3m] [Py] landgrey/pydictor A powerful and useful hacker dictionary builder for a brute-force attack
  • [875Star][2m] [Py] trustedsec/hate_crack A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
  • [789Star][6m] [C] brendan-rius/c-jwt-cracker JWT brute force cracker written in C
  • [780Star][10m] [Py] mak-/parameth This tool can be used to brute discover GET and POST parameters
  • [748Star][4m] [Py] s0md3v/hash-buster Crack hashes in seconds.
  • [679Star][7m] [Shell] 1n3/brutex Automatically brute force all services running on a target.
  • [625Star][2m] [JS] animir/node-rate-limiter-flexible Node.js rate limit requests by key and protection from DDoS and Brute-Force attacks in process Memory, Redis, MongoDb, Memcached, MySQL, PostgreSQL, Cluster or PM
  • [619Star][4m] [C#] shack2/snetcracker 超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。
  • [606Star][1y] [C] nfc-tools/mfoc Mifare Classic Offline Cracker
  • [551Star][5m] [PHP] s3inlc/hashtopolis A Hashcat wrapper for distributed hashcracking
  • [546Star][1y] [CSS] hashview/hashview A web front-end for password cracking and analytics
  • [516Star][3m] [C] nmap/ncrack Ncrack network authentication tool
  • [507Star][1m] [Py] pure-l0g1c/instagram Bruteforce attack for Instagram
  • [499Star][3m] duyetdev/bruteforce-database Bruteforce database
  • [487Star][1y] [C] mikeryan/crackle Crack and decrypt BLE encryption
  • [437Star][1y] [C] ryancdotorg/brainflayer A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key alogrithms.
  • [435Star][5m] [JS] coalfire-research/npk A mostly-serverless distributed hash cracking platform
  • [380Star][25d] [Py] ticarpi/jwt_tool jwt_tool：测试，调整和破解JSON Web Token 的工具包
  • [351Star][2m] [Py] denyhosts/denyhosts Automated host blocking from SSH brute force attacks
  • [307Star][10m] [C] e-ago/bitcracker BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
  • [287Star][11m] [Shell] cyb0r9/socialbox SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi
  • [265Star][11m] [C] jmk-foofus/medusa Medusa is a speedy, parallel, and modular, login brute-forcer.
  • [256Star][17d] [Shell] wuseman/emagnet Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts
  • [250Star][1y] [Py] avramit/instahack Instagram bruteforce tool
  • [246Star][6m] [Go] ropnop/kerbrute A tool to perform Kerberos pre-auth bruteforcing
  • [245Star][11m] [Shell] thelinuxchoice/instainsane Multi-threaded Instagram Brute Forcer (100 attemps at once)
  • [225Star][2m] [Py] evilmog/ntlmv1-multi NTLMv1 Multitool
  • [220Star][6m] [Py] blark/aiodnsbrute Python 3.5+ DNS asynchronous brute force utility
  • [220Star][11m] [Py] chris408/known_hosts-hashcat A guide and tool for cracking ssh known_hosts files with hashcat
  • [215Star][7m] [Py] paradoxis/stegcracker Steganography brute-force utility to uncover hidden data inside files
  • [209Star][1m] [C] hyc/fcrackzip A braindead program for cracking encrypted ZIP archives. Forked from
  • [203Star][3m] [Py] isaacdelly/plutus An automated bitcoin wallet collider that brute forces random wallet addresses

OSCP

MitreATT&CK

Browser

  • [4591Star][2m] [JS] beefproject/beef The Browser Exploitation Framework Project
  • [960Star][8m] [Py] selwin/python-user-agents A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
  • [852Star][3m] escapingbug/awesome-browser-exploit awesome list of browser exploitation tutorials
  • [450Star][30d] [Py] globaleaks/tor2web Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
  • [446Star][2m] m1ghtym0/browser-pwn An updated collection of resources targeting browser-exploitation.
  • [408Star][2m] [Pascal] felipedaragon/sandcat An open-source, pentest and developer-oriented web browser, using the power of Lua
  • [290Star][2m] xsleaks/xsleaks A collection of browser-based side channel attack vectors.
  • [215Star][2m] [Py] icsec/airpwn-ng airpwn-ng
  • [212Star][1y] [C#] djhohnstein/sharpweb .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.

Bluetooth

REST_API&&RESTFUL

Malware&&APT

Contribute

Contents auto exported by Our System, please raise Issue if you have any question.