Stars
The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
get things from one computer to another, safely
Impacket is a collection of Python classes for working with network protocols.
CTF framework and exploit development library
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
Modular visual interface for GDB in Python
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
xoreaxeaxeax / sandsifter
Forked from Battelle/sandsifterThe x86 processor fuzzer
Diaphora, the most advanced Free and Open Source program diffing tool.
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code
Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Command-line YAML, XML, TOML processor - jq wrapper for YAML/XML/TOML documents
Reference client for Bitmessage: a P2P encrypted decentralised communication protocol:
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
This project aims to compare and evaluate the telemetry of various EDR products.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
Veil Evasion is no longer supported, use Veil 3.0!
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox