Andreas Nilsen

rtsp-samsung-tv. Display RTSP streams from IP Cameras on Samsung Smart TV (Tizen TV)

zyxel-p8702n-bcm63xx. Telenor Zyxel P8702N BCM68xx - Telenor frmware. Zyxel Open Source firmware, kernel, build tools and documentation.

spin-master-treasure-trove. TypeScript

Ethical-Hacking-Tools. Complete Listing and Usage of Tools used for Ethical Hacking

Lemonade. An open source 3DS emulator "fork"

DeepZero. Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents.

atomic-llama-cpp-turboquant. llama.cpp fork with TurboQuant WHT-rotated KV cache & weight compression + Gemma 4 MTP and Qwen 3.6 NextN speculative decoding (+30-50% throughput).

stable-diffusion-webui-forge. Python

veles. Binary data analysis and visualization tool

DuckDNS-Updater. DuckDNS Updating Script for both Windows and Linux

BreachPeek. Breach intelligence CLI combining ProxyNova (3.2B+ credentials) with HIBP (570M+ passwords, 928+ breaches). Password compromise checking, breach metadata, and cred search.

airgorah. A WiFi security auditing software mainly based on aircrack-ng tools suite

reverse-engineering. List of awesome reverse engineering resources

VoxCPM. VoxCPM2: Tokenizer-Free TTS for Multilingual Speech Generation, Creative Voice Design, and True-to-Life Cloning

rogue. AI Agent Evaluator & Red Team Platform

APKHunt. APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

ClatScope. ClatScope Info Tool – The best and most versatile OSINT utility for retrieving geolocation, DNS, WHOIS, phone, email, data breach information and much more (70+ features). Perfect for investigators, pentesters, or anyone looking for an effective reconnaissance / OSINT tool.

currenciesmulti. This is the repository of a WoW addon called Titan Panel Currencies [Multi]. 💲

r4ven. Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

Qwen-Image. Qwen-Image is a powerful image generation foundation model capable of complex text rendering and precise image editing.

flicker. A lightweight RF geolocation obfuscation tool for OpenWrt. Flicker makes your wireless device a moving target for trackers by rapidly and randomly changing its TX power and MAC-layer timing parameters, degrading/obfuscating the accuracy of RSSI-based surveillance/detectors. Not making it IMPOSSIBLE, just alot more challenging.

Qwen-Image. Qwen-Image is a powerful image generation foundation model capable of complex text rendering and precise image editing.

norwegian-wordlist. A Norwegian wordlist

DevilTwin-NodeMCU. An evil twin attack is a spoofing cyber attack that works by tricking users into connecting to a fake Wi-Fi access point that mimics a legitimate network. Once a user is connected to an “evil twin” network, hackers can access everything from their network traffic to private login credentials.

Wifi-Crack. Python Tool to automate WIFI attacks to obtain handshake, PMKID attack, make networks temporarily down, create fake AP's and launch an Evil Twin attack.

Awesome-Cellular-Hacking. Awesome-Cellular-Hacking

wifi-pineapple-hcx-toolkit. 🍍 Advanced WiFi capture automation for WiFi Pineapple MK7 | Powerful hcxdumptool launcher with MAC filtering, GPS support, multi-channel targeting & OpenWRT optimization | Authorized security testing only

rpitx. RF transmitter for Raspberry Pi

HookingNirvana. Recon 2015 Presentation from Alex Ionescu

sRDI. Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

go-coding-advice. Some suggestions on how to write golang code better.

AMSITrigger. The Hunt for Malicious Strings

zip_smuggling. Python3 utility for creating zip files that smuggle additional data for later extraction

Invoke-TheHash. PowerShell Pass The Hash Utils

radare2-extras. Source graveyard and random candy for radare2

rz-ghidra. Deep ghidra decompiler and sleigh disassembler integration for rizin

tx2hax. This is a mirror of https://codeberg.org/katze/tx2hax

EvilWorkspace. iOS 18.5 Beta 4(and below) MobileCoreService persistence exploit. Discovered by me!

Priv2Admin. Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

signalbackup-tools. Tool to work with Signal Backup files.

defendnot. An even funnier way to disable windows defender. (through WSC api)

CEG-Anti-Tamper-Analysis. Documents the reverse engineering and partial disabling of Steam's CEG anti-tamper protections in T6SP, while preserving its anti-piracy checks

qtap. Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.

ChatDBG. ChatDBG - AI-assisted debugging. Uses AI to answer 'why'

reccmp. Collection of decompilation tools.

Priezor. open source heptagonal magnetic antenna

IDA_rust_metadata_finder. IDA plugin to recover source code from panic information on rust

tinyproxy. tinyproxy - a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems

zardaxt. Passive TCP/IP Fingerprinting Tool. Run this on your server and find out what Operating Systems your clients are *really* using.

pcileech. Direct Memory Access (DMA) Attack Software

Fooocus. Focus on prompting and generating

auto_re. IDA PRO auto-renaming plugin with tagging support

bk7231_key_calculator. 🔬 Calculates BK7231 "encryption" key from an encrypted image and a string occurring in it

SASM. SASM - simple crossplatform IDE for NASM, MASM, GAS and FASM assembly languages

IDA-Assistant. IDA plugin to support automatic reverse engineering

Deep-Live-Cam. real time face swap and one-click video deepfake with only a single image

SharpSploit. SharpSploit is a .NET post-exploitation library written in C#

go-bssid-geolocator. go-bssid-geolocator

azdecrypt. azdecrypt is a fast and powerful hillclimbing classical cipher solver written in freebasic

fuu. [F]aster [U]niversal [U]npacker

rhabdomancer. Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.

pe_to_shellcode. Converts PE into a shellcode

Spartacus. Spartacus DLL/COM Hijacking Toolkit

PythonMemoryModule. pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

Scylla. Imports Reconstructor

Handle-Ripper. Windows handle hijacking technique

Bropper. An automatic Blind ROP exploitation tool

wanderer. An open-source process injection enumeration tool written in C#

ScrapPY. ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs to generate wordlists that can be utilized by offensive security tools to perform brute force, forced browsing, and dictionary attacks against targets. The tool dives deep to discover keywords and phrases leading to potential passwords or hidden directories.

FirmLoader. Python

VMPImportFixer. Fix VMProtect Import Protection

GH-Offset-Dumper. Scan signatures and netvars. Dumps header files, cheat tables and ReClass files.

GuidedHacking-Injector. The BEST DLL Injector Library.

distorm. Powerful Disassembler Library For x86/AMD64

ReClass.NET-KernelPlugin. A simple kernel-level plugin for ReClass.NET

linject. A lightweight command-line DLL injection and ejection tool.

SigThief. Stealing Signatures and Making One Invalid Signature at a Time

HarmonyX. Harmony built on top of MonoMod.RuntimeDetours with additional features

MelonLoader. The World's First Universal Mod Loader for Unity Games compatible with both Il2Cpp and Mono

Il2CppDumper. Unity il2cpp reverse engineer

DeepSeek-R1.

VulFi. IDA Pro plugin for query based searching within the binary useful mainly for vulnerability research.

ridenum. Rid_enum is a null session RID cycle attack for brute forcing domain controllers.

immich. High performance self-hosted photo and video management solution.

sd-webui-regional-prompter. set prompt to divided region

awesome-list. Cybersecurity oriented awesome list

device-detector. The Universal Device Detection library will parse any User Agent and detect the browser, operating system, device used (desktop, tablet, mobile, tv, cars, console, etc.), brand and model.

sd-webui-state-manager. A state manager to quickly save and return to previous configs in A1111

zerosharp. Demo of the potential of C# for systems programming with the .NET native ahead-of-time compilation technology.

KasperskyHook. Hook system calls on Windows by using Kaspersky's hypervisor

educhain. A Python package for generating educational content using Generative AI

Pulse-. Brute Force For Facebook,Instagram & Twitter

BetterSafetyKatz. Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

OffensiveCSharp. Collection of Offensive C# Tooling

ig.osi. Information Gathering Instagram Tool.

ardiuno-keystroke-reflection. Open Source Arduino Program for Keystroke Reflection Side Channel Attack

IMSI-catcher. This program show you IMSI numbers of cellphones around you.

FFmpeg-Builds. Shell

ProcessInjectionTechniques. This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at the forefront of the field. It serves as a central repository of knowledge, offering in-depth exploration of various process injection techniques and methods used by adversaries.

Exploits. Windows Exploits

ai-gate. Why juggle 6 AI tools? AI Gate does it. No API keys. A single gateway to ChatGPT, Gemini, Claude, Grok, Perplexity and more....

open-webui. User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

WifiPineappleDemo. A demonstration using the Wifi Pineapple Mk7 to show just how much data exists floating around us.

CANToolz. CANToolz - Black-box CAN network analysis framework

routerkeygenPC. Qt Port for Linux, Mac OSX and Windows

lazy_importer. library for importing functions from dlls in a hidden, reverse engineer unfriendly way

SafetyKatz. SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

WindowsExploits. Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

puncia. Panthera(P.)uncia - Official CLI utility for Osprey Vision, Subdomain Center & Exploit Observer.

gpt-engineer. CLI platform to experiment with codegen. Precursor to: https://lovable.dev

optimizer. The finest Windows Optimizer

vmpdump. A dynamic VMP dumper and import fixer, powered by VTIL.

unicorn_pe. Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

Ciphey. ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

HowToHunt. Collection of methodology and test case for various web vulnerabilities.

RogueWinRM. Windows Local Privilege Escalation from Service Account to System

RoguePotato. Another Windows Local Privilege Escalation from Service Account to System

Mapping-Injection. Just another Windows Process Injection

MalSeclogon. A little tool to play with the Seclogon service

JuicyPotatoNG. Another Windows Local Privilege Escalation from Service Account to System

RemotePotato0. Windows Privilege Escalation from User to Domain Admin.

ConPtyShell. ConPtyShell - Fully Interactive Reverse Shell for Windows

RunasCs. RunasCs - Csharp and open version of windows builtin runas.exe

SspiUacBypass. Bypassing UAC with SSPI Datagram Contexts

antoniococo.github.io. HTML

infosec-talks.

SharPyShell. SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

perfect-dll-proxy. Perfect DLL Proxying using forwards with absolute paths.

HookLib. The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support

Report. Code : Secret

tiny_tracer. A Pin Tool for tracing API calls etc

Cloak. A censorship circumvention tool to evade detection by authoritarian state adversaries

Shark. Turn off PatchGuard in real time for win7 (7600) ~ later

porch-pirate. Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.

APKDeepLens. Android security insights in full spectrum.

ProcessHider. Post-exploitation tool for hiding processes from monitoring applications

root-my-webos-tv. CVE-2023-6319 proof of concept

MasterHide. A x64 Windows Rootkit using SSDT or Hypervisor hook

storm. An LLM-powered knowledge curation system that researches a topic and generates a full-length report with citations.

lattice-based-cryptanalysis. A toolkit for cryptanalysis using lattices.

goprowifihack. Unofficial GoPro WiFi API Documentation - HTTP GET requests for commands, status, livestreaming and media query.

motion. Motion, a software motion detector. Home page: https://motion-project.github.io/

EmptyPhish. EmptyPhish is an automated phishing tool that comes with 30+ templates for various popular platforms like Instagram, Facebook, Twitter, Snapchat, GitHub, Yahoo, ProtonMail, Google, Spotify, Netflix, LinkedIn, WordPress, Origin, Steam, Microsoft, Instagram Followers, Pinterest, and more.

sd-webui-controlnet. WebUI extension for ControlNet

dot. The Deepfake Offensive Toolkit

eaphammer. Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

Third-Eye. Third-Eye is people finder. If target people ( actually target device ) is your nearest Thrid-Eye will alert you.

ai-toolkit. The ultimate training toolkit for finetuning diffusion models

IP-Tracker. Track anyone's IP just opening a link!

NoisyNN-PyTorch. non-official NoisyNN Implemnentation

MT7621-U-Boot. MTK MT7621 U-Boot With Web Failsafe

CLIP-based-NSFW-Detector. Python

prompts.chat. f.k.a. Awesome ChatGPT Prompts. Share, discover, and collect prompts from the community. Free and open source — self-host for your organization with complete privacy.

CarbonCopy. A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

flipperzero-firmware. Flipper Zero firmware source code

llama. Inference code for Llama models

WizardLM. LLMs build upon Evol Insturct: WizardLM, WizardCoder, WizardMath

OpenMower. Let's upgrade cheap off-the-shelf robotic mowers to modern, smart RTK GPS based lawn mowing robots!

sd-webui-controlnet. WebUI extension for ControlNet

macstealer. MacStealer: Wi-Fi Client Isolation Bypass

awesome_shell_loaders. shellcode-loaders and beacon-loaders

sd_civitai_extension. All of the Civitai models inside Automatic 1111 Stable Diffusion Web UI

DeepSeek-Coder. DeepSeek Coder: Let the Code Write Itself

impacket-tools. Tool for AD attack

Stable-Diffusion-WebUI-TensorRT. TensorRT Extension for Stable Diffusion Web UI

easydiffusion. An easy 1-click way to create beautiful artwork on your PC using AI, with no tech knowledge. Provides a browser UI for generating images from text prompts and images. Just enter your text prompt, and see the generated image.

sdnext. SD.Next: All-in-one WebUI for AI generative image and video creation, captioning and processing

passphrase-wordlist. Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

sd-webui-lobe-theme. 🅰️ Lobe theme - The modern theme for stable diffusion webui, exquisite interface design, highly customizable UI, and efficiency boosting features.

DevTool. A multipurpose tool to assist with World of Warcraft addon development

roop. roop extension for StableDiffusion web-ui

stable-diffusion-unfiltered. Stable Diffusion without the safety filter and invisible watermark

stable-diffusion-webui. Stable Diffusion web UI

FetLifeEnhancer. JavaScript

rtl8xxxu. Repository that tracks drivers/net/wireless/realtek/rtl8xxxu in wireless_next repository

xiaomi-m365-compatible-bms. Xiaomi M365 compatible, open source firmware for ATMega328p+BQ769x0 BMS. Ninebot in proto_test branch

AutoGPT. AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.

vortex. VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

Ehoney. 安全、快捷、高交互、企业级的蜜罐管理系统，护网；支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports multiple protocol honeypots, honeytokens, baits and other functions.

embedded-toolkit. Prebuilt statically linked gdbserver and gawk executables for Linux on ARMEL, MIPS/MIPSEL and more platforms for use on embedded devices, including for systems with many different ABIs (including more than 20 statically linked gdbserver executables)

inventory. Asset inventory of over 800 public bug bounty programs.

goomba. gooMBA is a Hex-Rays Decompiler plugin to simplify Mixed Boolean-Arithmetic (MBA) expressions

Open-Assistant. OpenAssistant is a chat-based assistant that understands tasks, can interact with third-party systems, and retrieve information dynamically to do so.

localsend. An open-source cross-platform alternative to AirDrop

PhoneSploit-Pro. An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

instagrapi. 🔥 The fastest and powerful Python library for Instagram Private API 2026 with HikerAPI SaaS

scripts. Various scripts and files in bash, perl, python kodi etc

Rubber-Ducky-Reverse-Shell. Fast & Silent Script For Rubber Ducky To Inject Reverse Shell

REHack. Notebook/coding framework.

Apktool. A tool for reverse engineering Android apk files

dnSpy. Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

Dirty-Vanity. A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

UMS-Windows-Scripts. Windows script setup for Universal Media Server

libwifi. Common python and scapy scripts for Wi-Fi

Above. Network Security Sniffer

Pen-Andro. Script to Automate installtion of Apps ,frida server and moving Burpsuite certificate to root folder

burp-extensions-montoya-api. Burp Extensions Api

Shoggoth. Shoggoth: Asmjit Based Polymorphic Encryptor

NudeNet. Lightweight nudity detection

PuryFiAnnotator. Offline batch detection tool written in Java, used to pre-detect and refine multiple nsfw images.