Security · security Tools

ScubaGear

github

Automation to assess the state of your M365 tenant against CISA's baselines

nodejsscan

github

nodejsscan is a static security code scanner for Node.js applications.

c-jwt-cracker

github

JWT brute force cracker written in C

king-phisher

github

Phishing Campaign Toolkit

redteam_vul

github

红队作战中比较常遇到的一些重点系统漏洞整理。

Wifi-Hacking

github

Cyber Security Tool For Hacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2/TKIP/IES)

git-dumper

github

A tool to dump a git repository from a website

piknik

github

Copy/paste anything over the network.

FBI-tools

github

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

ProxyCat

github

一款部署于云端或本地的隧道代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用

fibratus

github

Adversary tradecraft detection, protection, and hunting

smart-contract-vulnerabilities

github

A collection of smart contract vulnerabilities along with prevention methods

u2f-zero

github

U2F USB token optimized for physical security, affordability, and style

wifipumpkin3

github

Powerful framework for rogue access point attack.

find-sec-bugs

github

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

brutespray

github

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

awesome-iot-hacks

github

A Collection of Hacks in IoT Space so that we can address them (hopefully).

Malcolm

github

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

solo1

github

Solo 1 firmware in C

creepjs

github

Creepy device and browser fingerprinting

secure

github

HTTP middleware for Go that facilitates some quick security wins.

noseyparker

github

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

boofuzz

github

A fork and successor of the Sulley Fuzzing Framework

SSH-Snake

github

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.