Clik here to view.
invisible_playwright v0.33.1
Playwright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection, Python web scraping and browser automation.
View ArticleClik here to view.
Clik here to view.
ecapture v2.8.0
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
View ArticleClik here to view.
Clik here to view.
Scrapling — Updated!
Adaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for resilient data extraction.
View ArticleClik here to view.
Clik here to view.
facedancer
Implement your own USB device in Python, supported by a hardware peripheral such as Cynthion or GreatFET
View ArticleClik here to view.
MISP v2.5.50
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
View ArticleClik here to view.
Pentest-Windows
Collection of Windows internals research and exploitation techniques covering privilege escalation, token abuse, and post-exploitation tricks for red teamers and pentesters.
View ArticleClik here to view.
Clik here to view.
kingfisher
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
View ArticleClik here to view.
sast
Free offline SAST engine for CI/CD: AST and cross-file taint analysis, secret detection with live validation, SCA/CVE, IaC misconfiguration, and web-shell scanning with SARIF output.
View ArticleClik here to view.
Clik here to view.
-LogicSentry-AI
Offline SAST/DAST triage engine that parses source code and replays HAR traffic to detect business-logic flaws, BOLA, race conditions, and privilege issues with local LLM triage.
View ArticleClik here to view.
CloudGarrison
Offline browser-based multi-cloud posture workbench that simulates attack paths, audits IaC compliance, analyzes identity graphs, and maps audit logs locally via WebAssembly.
View ArticleClik here to view.
severitas
Authorized social-engineering simulation framework with an isolated loopback lab, synthetic audience generation, pre-flight authorization checks, and offline HTML/Markdown/JSON/CSV reporting.
View ArticleClik here to view.
SearchPhone
Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic report generation.
View ArticleClik here to view.
Clik here to view.
Overthrone
All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging, DCSync, and reporting in one static binary.
View ArticleClik here to view.
