gerimisc

Eunomia

Analyze your code locally using a GPT LLM.

realm

Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

offsecml

source code for the offsecml framework

lighthouse

A Coverage Explorer for Reverse Engineers

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Pwdb-Public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

maddy

✉️ Composable all-in-one mail server.

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

winutil

Chris Titus Tech's Windows Utility - Install Programs, Tweaks, Fixes, and Updates

Win11Debloat

A simple, easy to use PowerShell script to remove pre-installed apps from Windows, disable telemetry, remove Bing from Windows search as well as perform various other changes to declutter and improve your Windows experience. This script works for both Windows 10 and Windows 11.

QCSuper

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

DeepSeek-Coder

DeepSeek Coder: Let the Code Write Itself

Android-Security-Exploits-YouTube-Curriculum

🔓A curated list of modern Android exploitation conference talks.

kakaotalk_analysis

AI-For-Beginners

12 Weeks, 24 Lessons, AI for All!

aidapal

aiDAPal is an IDA Pro plugin that uses a locally running LLM that has been fine-tuned for Hex-Rays pseudocode to assist with code analysis.

PWA-Phishing

QRucible

Python utility that generates "imageless" QR codes in various formats

nerve

Instrument any LLM to do actual stuff.

goaccess

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

RedFlag

RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and add reviewers. RedFlag's flexible configuration makes it valuable for any team.

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

SteppingStones

A Red Team Activity Hub

goLAPS

Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.

WALK_WebAssembly_Lure_Krafter

A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims at aiding with initial access during red teams and phishing exercises leveraging WASM smuggling techniques.

awesome-cicd-attacks

Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

nmap-did-what

Nmap Dashboard Mini Project

apk.sh

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.