Clik here to view.
Clik here to view.
Scrapling — Updated!
Adaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for resilient data extraction.
View ArticleClik here to view.
Clik here to view.
facedancer
Implement your own USB device in Python, supported by a hardware peripheral such as Cynthion or GreatFET
View ArticleClik here to view.
MISP v2.5.50
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
View ArticleClik here to view.
Pentest-Windows
Collection of Windows internals research and exploitation techniques covering privilege escalation, token abuse, and post-exploitation tricks for red teamers and pentesters.
View ArticleClik here to view.
Clik here to view.
kingfisher
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
View ArticleClik here to view.
sast
Free offline SAST engine for CI/CD: AST and cross-file taint analysis, secret detection with live validation, SCA/CVE, IaC misconfiguration, and web-shell scanning with SARIF output.
View ArticleClik here to view.
Clik here to view.
-LogicSentry-AI
Offline SAST/DAST triage engine that parses source code and replays HAR traffic to detect business-logic flaws, BOLA, race conditions, and privilege issues with local LLM triage.
View ArticleClik here to view.
CloudGarrison
Offline browser-based multi-cloud posture workbench that simulates attack paths, audits IaC compliance, analyzes identity graphs, and maps audit logs locally via WebAssembly.
View ArticleClik here to view.
severitas
Authorized social-engineering simulation framework with an isolated loopback lab, synthetic audience generation, pre-flight authorization checks, and offline HTML/Markdown/JSON/CSV reporting.
View ArticleClik here to view.
SearchPhone
Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic report generation.
View ArticleClik here to view.
Clik here to view.
Overthrone
All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging, DCSync, and reporting in one static binary.
View ArticleClik here to view.
Clik here to view.
ESP32-BlueJammer
ESP32 and nRF24 based 2.4GHz jammer that disrupts Bluetooth, BLE, WiFi, and RC channels via noise and packet flooding for controlled security testing.
View ArticleClik here to view.
webhacklist
Archive of the Top 10 Web Hacking Techniques - every nominee since 2006, preserved
View ArticleClik here to view.
ad_attack_architecture
Active Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance
View Article
