Security Tools & Software

meshbird

github

Distributed private networking

AppInfoScanner

github

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

vulmap

github

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

Pentest-Windows

github

⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips

vulnerability-Checklist

github

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Ethical-Hacking-Labs

github

Practical Ethical Hacking Labs 🗡🛡

twofactorauth

github

List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.

emba

github

EMBA - The firmware security analyzer

solution-architecture-patterns

github

Reusable, vendor-neutral, industry-specific, vendor-specific solution architecture patterns for enterprise

Awesome-Cybersecurity-Handbooks

github

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

varlock

github

AI-safe .env files: Schemas for agents, Secrets for humans.

Stowaway

github

👻Stowaway -- Multi-hop Proxy Tool for pentesters

cariddi

github

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

blackarch

github

An ArchLinux based distribution for penetration testers and security researchers.

honggfuzz

github

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

OpenSK

github

OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.

oletools

github

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

timesketch

github

Collaborative forensic timeline analysis

NGCBot

github

一个基于✨HOOK机制的微信机器人，支持🌱安全新闻定时推送【FreeBuf，先知，安全客，奇安信攻防社区】，👯Kfc文案，⚡漏洞查询，⚡手机号归属地查询，⚡知识库查询，🎉星座查询，⚡天气查询，🌱摸鱼日历，⚡微步威胁情报查询， 🐛视频，⚡图片，👯帮助菜单。📫 支持积分功能，⚡支持自动拉人，，🌱自动群发，👯Ai回复（国内主流AI模型，扣子，FastGpt，Dify全面支持！），⚡视频号解析，😄自定义程度丰富，小白也可轻松上手！

filterlists

github

Collection of blocklists to fill in the gaps

botnets

github

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

pentest-tools

github

A collection of custom security tools for quick needs.

ssl-kill-switch2

github

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

express-rate-limit

github

Basic rate-limiting middleware for the Express web server