RapidDNS

libarchive. Multi-format archive and compression library

CLIProxyAPI. Wrap Antigravity, ChatGPT Codex, Claude Code, Grok Build as an OpenAI/Gemini/Claude/Codex compatible API service, allowing you to enjoy the free Gemini 3.1 Pro, GPT 5.5, Grok 4.3, Claude model through API

security-audits. Reports from automated security audits made by Swival.

trailmark. Build and query a graph database representation of source code

ArgusBot. ArgusBot: A 24/7 supervisor Agent for Codex CLI and Claude Code CLI that keeps agents running, reviewing, and planning until the job is actually done.

autoresearch. AI agents running research on single-GPU nanochat training automatically

humanizer. Claude Code skill that removes signs of AI-generated writing from text

waoowaoo. 首家工业级全流程 AI 影视生产平台。Industry-first professional AI Agent platform for controllable film & video production. From shorts to live-action with Hollywood-standard workflows.

garak. the LLM vulnerability scanner

Broken-Vulnerable-Code-Snippets. A small collection of vulnerable code snippets

interactsh. An OOB interaction gathering server and client library

ant-design. An enterprise-class UI design language and React UI library

autochrome. This tool downloads, installs, and configures a shiny new copy of Chromium.

writeups.

chisel. A fast TCP/UDP tunnel over HTTP

Exploit-Dictionary.

ksubdomain. 无状态子域名爆破工具

domainNamePredictor. 一个简单的现代化公司域名使用规律预测及生成工具

yaml-payload. A tiny project for generating SnakeYAML deserialization payloads

awesome-oneliner-bugbounty. A collection of awesome one-liner scripts especially for bug bounty tips.

http2fuzz. HTTP/2 fuzzer written in Golang

Android_Security. This repository is a suplimentary material for Android Training's done by Anant Shrivastava from 2012-2017

Some-PoC-oR-ExP. 各种漏洞poc、Exp的收集或编写

phpggc. PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

DeReviewer. C#

Damn_Vulnerable_C_Program. An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

emux. EMUX Firmware Emulation Framework (formerly ARMX)

exploit_me. Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 29 vulnerability techniques)

Packer-Fuzzer. Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

Reverse-Engineering. A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

research. research

semgrep-rules. Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.

bucky. Bucky (An automatic S3 bucket discovery tool)

BountyIt. A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it using signatures

youtube-dl-gui. A cross platform front-end GUI of the popular youtube-dl written in wxPython.

awesome-ruby-security. Awesome Ruby Security resources

FinalRecon. All In One Web Recon

Raccoon. A high performance offensive security tool for reconnaissance and vulnerability scanning

Extractor. Extension adds a new tab in Burp Suite called Extractor

dtd-finder. List DTDs and generate XXE payloads using those local DTDs.

PPScan. Client Side Prototype Pollution Scanner

CVE-2020-16947. PoC of CVE-2020-16947 (Microsoft Outlook RCE vulnerablility)

AllThingsSSRF. This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

frida-scripts. A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.

awesome-frida. Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)

CMSeeK. CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

0x94TR. 0x94TR Burp Extension - Java version

Information-Security. Information security

HowToHunt. Collection of methodology and test case for various web vulnerabilities.

GoPurple. Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions

mimikatz. A little tool to play with Windows security

nccfsas. Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

CVE-2020-1472. Test tool for CVE-2020-1472

CVE-Reverse. Python

attackRmi. attackRmi

resolvers. List of periodically validated public DNS resolvers

Java-Deserialization-Cheat-Sheet. The cheat sheet about Java Deserialization vulnerabilities

CloudBrute. Awesome cloud enumerator

scanginx. Scanner For Nginx - Remote Integer Overflow Vulnerability

Fuzz_dic. 参数 | 字典 collections

BurpSmartBuster. A Burp Suite content discovery plugin that add the smart into the Buster!

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

gitbrute. brute-force a git commit hash

Bug-Bounty-Roadmaps. Bug Bounty Roadmaps

Bug-Bounty-Roadmaps. Bug Bounty Roadmaps

learn-browser-testing. Repository for my upcoming course & workshop

RedCommander. Red Team C2 Infrastructure built in AWS using Ansible!

h4rpy. Automated WPA/WPA2 PSK attack tool.

dalfox. 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

VulnerableDotNetHTTPRemoting. Example Vulnerable .NET HTTP Remoting

cotopaxi. Set of tools for security testing of Internet of Things devices using specific network IoT protocols

BurpSuite-Xkeys. A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.

semgrep. Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

redis-ssrf. redis ssrf gopher generater & redis ssrf to rce by master-slave-sync

KingOfBugBountyTips. Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

ntlm_theft. A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

jwt-pwn. Security Testing Scripts for JWT

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

faceswap. Deepfakes Software For All

scant3r. ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )

EyeWitness. EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

rad.

Penetration_Testing_POC. 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

bbrecon. Python library and CLI for the Bug Bounty Recon API

remote-method-guesser. Java RMI Vulnerability Scanner

API-Security-Checklist. Checklist of the most important security countermeasures when designing, testing, and releasing your API

Spring-Boot-Vulnerability.

Ciphey. ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

LeakIXClient. Golang client & library

Privilege-Escalation. This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

Subdomain. Hacks For Subdomain Enumeration

Awesome-Fuzzing. A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

bounty-targets-data. This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

carbon. :black_heart: Create and share beautiful images of your source code

SpringBootVulExploit. SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

WinPwn. Automation for internal Windows Penetrationtest / AD-Security

changeme. A default credential scanner.

jok3r. Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

rengine. reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

Vulnerability-Research. C

CVE-2020-14645. Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData()

WebHackersWeapons. ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

offensive-docker. Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

ProxyGoogleTranslate. Using Google translate as WebProxy

webkiller. Tool Information Gathering Write By Python.

singularity. A DNS rebinding attack framework.

Awesome-Asset-Discovery. List of Awesome Asset Discovery Resources

datasploit. An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

cowpy. Cowsay, in Python, makes pies by default, one file, easily embedded into your app.

python-asciistuff. :art: Library for producing ASCII arts

bluing. An intelligence gathering tool for hacking Bluetooth

dronesploit. Drone pentesting framework console

PEASS-ng. PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

ApiWordlistGenerator. Generate wordlists for fuzzing API method names

Github-Monitor. Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)

ysomap. A helpful Java Deserialization exploit framework.

brutespray. Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

puff. Clientside vulnerability / reflected xss fuzzer

PENTESTING-BIBLE. articles

after-deserialization-attack. Java After-Deserialization Attack

gitGraber. gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

cloud-ranges. A list of cloud ranges from different providers.

smuggler. Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

Java-Rce-Echo. Java RCE 回显测试代码

BBTz. BBT - Bug Bounty Tools (examples💡)

psalm. A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

Active-Directory-Exploitation-Cheat-Sheet. A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

SRC-experience. 工欲善其事，必先利其器

CVE2020-0796. CVE2020-0796 SMBv3 RCE

lorsrf. Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:

spoolsystem. Print Spooler Named Pipe Impersonation for Cobalt Strike

cobalt-arsenal. My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

1ndiList. Recon Custom WordList Ganerator

fastjson-bypass-autotype-1.2.68. fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.

exploits. Some of my public exploits

Bridge. 无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。

CANalyzat0r. Security analysis toolkit for proprietary car protocols

awesome-vehicle-security. 🚗 A curated list of resources for learning about vehicle security and car hacking.

SMBGhost_RCE_PoC. Python

binbloom. Raw binary firmware analysis software

elasticArchive. An extension to mitmproxy to dump all proxied web traffic to elasticsearch where you can keep it forever (or until you run out of disk space)

SecretFinder. SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

awesome-rat. RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

axiom. The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

shhgit. Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

GitMonitor. One way to continuously monitor sensitive information that could be exposed on Github

CVE-2020-9484. Dockerfile

RedTeaming-Tactics-and-Techniques. Red Teaming Tactics and Techniques

CVE-2019-0708-EXP-Windows. CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell

Vulnerable-OAuth-2.0-Applications. vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.

WindowsExploitationResources. Resources for Windows exploit development

QRLJacking. QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.

dirsearch. Web path scanner

pyaxmlparser. Python3 Parser for Android XML file and get Application Name without using Androguard

probethis. find active domains from list of subdomains

oauth2_proxy. A reverse proxy that provides authentication with Google, Github or other provider

gaussrf. Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

Snapper. A security tool for grabbing screenshots of many web hosts

DotNetDeserializationScanner. Scans for .NET Deserialization Bugs in .NET Assemblies

Arjun. HTTP parameter discovery suite.

internalblue. Bluetooth experimentation framework for Broadcom and Cypress chips.

gmapsapiscanner. Python

learnjavabug. Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

pwndb. Search for leaked credentials

XSStrike. Most advanced XSS scanner.

Red-Teaming-Toolkit. This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

findom-xss. A fast DOM based XSS vulnerability scanner with simplicity.

dvna. Damn Vulnerable NodeJS Application

attacking-cloudgoat2. A step-by-step walkthrough of CloudGoat 2.0 scenarios.

dnsFookup. DNS rebinding toolkit

971-MB-content_discovery_wordlist. Collection of content discovery wordlists in one wordlist.

Gf-Patterns. GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

InveighZero. .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

SSRFTest. SSRF testing tool

httprebind. Automatic tool for DNS rebinding-based SSRF attacks

awesome-burp-suite. Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

Atlas. Quick SQLMap Tamper Suggester

shotlooter. a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

massdns. A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

njsscan. njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

VHostScan. A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

jwt_tool. :snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

H1-Report-Finder. A burpsuite extension that helps security researchers find public security reports published on h1 based on the selected host

SweetPotato. Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

cve-2020-11651. Python

writeups. Write-ups from A*0*E.

fastjson-blacklist. Java

MFFA. Media Fuzzing Framework for Android

keyhacks. Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

gitscraper. A tool which scrapes public github repositories for common naming conventions in variables, folders and files

chaos-client. Go client to communicate with Chaos DB API.

can-i-take-over-xyz. "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

SubDomainTakeoverTools. Python

firmware-anatomy. Tear the firmware apart with your bare hands;-)

fuzzing. Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

Invoke-PrintDemon. This is a PowerShell Empire launcher PoC using PrintDemon and Faxhell.

xvwa. XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

HTTPFuzz. A fast generative fuzzer for HTTP

exploits. Python

CVE-2020-0674-Exploit. This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.