Giters

netveil / Awesome-List

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Awesome Stars Awesome

A curated list of my GitHub stars! Generated by starred.

Contents

github

  • rzashakeri/beautify-github-profile - This repository helps you to have a more beautiful and attractive github profile, and you can access a complete set of tools and guides for beautifying your github profile. 🪄 ⭐
  • x1sec/commit-stream - #OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API
  • eth0izzle/shhgit - Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories: www.shhgit.com
  • 0xbug/Hawkeye - GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
  • github/roadmap - GitHub public roadmap
  • tom0li/collection-document - Collection of quality safety articles. Awesome articles.

github-api

  • rzashakeri/beautify-github-profile - This repository helps you to have a more beautiful and attractive github profile, and you can access a complete set of tools and guides for beautifying your github profile. 🪄 ⭐
  • eth0izzle/shhgit - Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories: www.shhgit.com
  • michenriksen/gitrob - Reconnaissance tool for GitHub organizations

markdown

terminal

  • chubin/cheat.sh - the only cheat sheet you need
  • tldr-pages/tldr - 📚 Collaborative cheatsheets for console commands
  • microsoft/terminal - The new Windows Terminal and the original Windows console host, all in the same place!
  • htr-tech/nexphisher - Advanced Phishing tool for Linux & Termux
  • ohmyzsh/ohmyzsh - 🙃 A delightful community-driven (with 2,000+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python,
  • jesseduffield/lazygit - simple terminal UI for git commands

cli

  • chubin/cheat.sh - the only cheat sheet you need
  • gnebbia/kb - A minimalist command line knowledge base manager
  • mempodippy/vlany - Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
  • alebcay/awesome-shell - A curated list of awesome command-line frameworks, toolkits, guides and gizmos. Inspired by awesome-php.
  • bitwarden/clients - Bitwarden client applications (web, browser extension, desktop, and cli)
  • gildas-lormeau/SingleFile - 📷 Web Extension for Firefox/Chrome/MS Edge and CLI tool to save a faithful copy of an entire web page in a single HTML file
  • ohmyzsh/ohmyzsh - 🙃 A delightful community-driven (with 2,000+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python,
  • jesseduffield/lazygit - simple terminal UI for git commands
  • asdf-vm/asdf - Extendable version manager with support for Ruby, Node.js, Elixir, Erlang & more
  • sherlock-project/sherlock - 🔎 Hunt down social media accounts by username across social networks
  • trimstray/sandmap - Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

documentation

  • chubin/cheat.sh - the only cheat sheet you need
  • tldr-pages/tldr - 📚 Collaborative cheatsheets for console commands
  • freeCodeCamp/devdocs - API Documentation Browser
  • cheat/cheat - cheat allows you to create and view interactive cheatsheets on the command-line. It was designed to help remind *nix system administrators of options for commands that they use frequently, but not fre

nlp

  • vi3k6i5/flashtext - Extract Keywords from sentence or Replace keywords in sentences.

others

shell

  • tldr-pages/tldr - 📚 Collaborative cheatsheets for console commands
  • Hackplayers/evil-winrm - The ultimate WinRM shell for hacking/pentesting
  • xl7dev/WebShell - Webshell && Backdoor Collection
  • alebcay/awesome-shell - A curated list of awesome command-line frameworks, toolkits, guides and gizmos. Inspired by awesome-php.
  • CISOfy/lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
  • carlospolop/PEASS-ng - PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
  • ohmyzsh/ohmyzsh - 🙃 A delightful community-driven (with 2,000+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python,
  • n1nj4sec/pupy - Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
  • asdf-vm/asdf - Extendable version manager with support for Ruby, Node.js, Elixir, Erlang & more
  • rbenv/rbenv - Manage your app's Ruby environment
  • pyenv/pyenv - Simple Python version management
  • PowerShell/PowerShell - PowerShell for every system!
  • backdoorhub/shell-backdoor-list - 🎯 PHP / ASP - Shell Backdoor List 🎯

hacktoberfest

  • tldr-pages/tldr - 📚 Collaborative cheatsheets for console commands
  • CedArctic/DigiSpark-Scripts - USB Rubber Ducky type scripts written for the DigiSpark.
  • freeCodeCamp/devdocs - API Documentation Browser
  • intelowlproject/IntelOwl - Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale
  • radareorg/radare2 - UNIX-like reverse engineering framework and command-line toolset
  • juice-shop/juice-shop - OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
  • HashPals/Name-That-Hash - 🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
  • 003random/getJS - A tool to fastly get all javascript sources/files
  • rmusser01/Infosec_Reference - An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
  • lirantal/awesome-nodejs-security - Awesome Node.js Security resources
  • BC-SECURITY/Starkiller - Starkiller is a Frontend for PowerShell Empire.
  • BC-SECURITY/Empire - Empire is a PowerShell and Python 3.x post-exploitation framework.
  • rapid7/metasploit-framework - Metasploit Framework
  • mitmproxy/mitmproxy - An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
  • anchore/grype - A vulnerability scanner for container images and filesystems
  • Ciphey/Ciphey - ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
  • bee-san/pyWhat - 🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️
  • starship/starship - ☄🌌️ The minimal, blazing-fast, and infinitely customizable prompt for any shell!
  • tiagorlampert/CHAOS - 🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
  • ohmyzsh/ohmyzsh - 🙃 A delightful community-driven (with 2,000+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python,
  • EbookFoundation/free-programming-books - 📚 Freely available programming books
  • epi052/feroxbuster - A fast, simple, recursive content discovery tool written in Rust.
  • Gallopsled/pwntools - CTF framework and exploit development library
  • lc/gau - Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
  • projectdiscovery/naabu - A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
  • swisskyrepo/SSRFmap - Automatic SSRF fuzzer and exploitation tool
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
  • swisskyrepo/PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
  • ivre/ivre - Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, coll
  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.
  • sherlock-project/sherlock - 🔎 Hunt down social media accounts by username across social networks
  • projectdiscovery/shuffledns - MassDNS wrapper written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.
  • PowerShell/PowerShell - PowerShell for every system!
  • spearow/juice - The Hacker's Machine Learning Engine
  • hslatman/awesome-threat-intelligence - A curated list of Awesome Threat Intelligence resources
  • prowler-cloud/prowler - Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 2
  • RustScan/RustScan - 🤖 The Modern Port Scanner 🤖

go

  • ehang-io/nps - 一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server,
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  • j3ssie/osmedeus - A Workflow Engine for Offensive Security
  • zricethezav/gitleaks - Protect and discover secrets using Gitleaks 🔑
  • anchore/grype - A vulnerability scanner for container images and filesystems
  • aquasecurity/tfsec - Security scanner for your Terraform code
  • fatedier/frp - A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
  • parsiya/Hacking-with-Go - Golang for Security Professionals
  • youngyangyang04/leetcode-master - 《代码随想录》LeetCode 刷题攻略：200道经典题目刷题顺序，共60w字的详细图解，视频难点剖析，50余张思维导图，支持C++，Java，Python，Go，JavaScript等多语言版本，从此算法学习不再迷茫！🔥🔥 来看看，你会发现相见恨晚！🚀
  • halfrost/LeetCode-Go - ✅ Solutions to LeetCode by Go, 100% test coverage, runtime beats 100% / LeetCode 题解
  • halfrost/Halfrost-Field - ✍🏻 这里是写博客的地方 —— Halfrost-Field 冰霜之地
  • panjf2000/ants - 🐜🐜🐜 ants is a high-performance and low-cost goroutine pool in Go, inspired by fasthttp./ ants 是一个高性能且低损耗的 goroutine 池。
  • dreddsa5dies/goHackTools - Hacker tools on Go (Golang)
  • crawlab-team/crawlab - Distributed web crawler admin platform for spiders management regardless of languages and frameworks. 分布式爬虫管理平台，支持任何语言和框架
  • dwisiswant0/crlfuzz - A fast tool to scan CRLF vulnerability written in Go
  • jaeles-project/gospider - Gospider - Fast web spider written in Go
  • OJ/gobuster - Directory/File, DNS and VHost busting tool written in Go
  • syndbg/goenv - 🚙 Like pyenv and rbenv, but for Go.
  • golang/go - The Go programming language
  • haccer/subjack - Subdomain Takeover tool written in Go
  • LearnGolang/365Golang - 《365天深入理解Go语言》Deep understanding of Golang.
  • caffix/amass - In-depth Attack Surface Mapping and Asset Discovery
  • OWASP/Amass - In-depth Attack Surface Mapping and Asset Discovery

http

  • ehang-io/nps - 一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server,
  • snail007/goproxy - 🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port
  • mitmproxy/mitmproxy - An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
  • projectdiscovery/interactsh - An OOB interaction gathering server and client library
  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

docker

  • IceWhaleTech/CasaOS - CasaOS - A simple, easy-to-use, elegant open-source Home Cloud system.
  • koutto/jok3r - Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
  • Hackplayers/evil-winrm - The ultimate WinRM shell for hacking/pentesting
  • TechXueXi/TechXueXi - 强国通 科技强国 学习强国 xuexiqiangguo 全网最好用开源网页学习强国助手：TechXueXi （懒人刷分工具 自动学习）技术强国，支持答题，支持 docker 45分/天
  • stepchowfun/toast - Containerize your development and continuous integration environments. 🥂
  • esrrhs/pingtunnel - Pingtunnel is a tool that send TCP/UDP traffic over ICMP
  • maliceio/malice - VirusTotal Wanna Be - Now with 100% more Hipster
  • PokemonGoF/PokemonGo-Bot - The Pokemon Go Bot, baking with community.
  • anchore/grype - A vulnerability scanner for container images and filesystems
  • FunnyWolf/Viper - Redteam operation platform with webui 图形化红队行动辅助平台
  • gildas-lormeau/SingleFile - 📷 Web Extension for Firefox/Chrome/MS Edge and CLI tool to save a faithful copy of an entire web page in a single HTML file
  • crawlab-team/crawlab - Distributed web crawler admin platform for spiders management regardless of languages and frameworks. 分布式爬虫管理平台，支持任何语言和框架
  • jaywcjlove/docker-tutorial - 🐳 Docker入门学习笔记
  • Medicean/VulApps - 快速搭建各种漏洞环境(Various vulnerability environment)
  • cdk-team/CDK - 📦 Make security testing of K8s, Docker, and Containerd easier.
  • RustScan/RustScan - 🤖 The Modern Port Scanner 🤖

golang

iot

windows

linux

  • man-pages-zh/manpages-zh - Chinese Manual Pages
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  • haydenjames/bench-scripts - A compilation of Linux server benchmarking scripts.
  • Adminisme/ServerScan - ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。
  • D4Vinci/One-Lin3r - Gives you one-liners that aids in penetration testing operations, privilege escalation and more
  • marktext/marktext - 📝A simple and elegant markdown editor, available for Linux, macOS and Windows.
  • screetsec/Vegile - This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will
  • jm33-m0/emp3r0r - Linux/Windows post-exploitation framework made by linux user
  • mempodippy/vlany - Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)
  • milabs/awesome-linux-rootkits - awesome-linux-rootkits
  • m0nad/Diamorphine - LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)
  • hugsy/gef - GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers
  • 1N3/PrivEsc - A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
  • rmusser01/Infosec_Reference - An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
  • imarvinle/awesome-cs-books - 经典编程书籍大全，涵盖：计算机系统与网络、系统架构、算法与数据结构、前端开发、后端开发、移动开发、数据库、测试、项目与团队、程序员职业修炼、求职面试等
  • rosehgal/BinExp - Linux Binary Exploitation
  • nathanlopez/Stitch - Python Remote Administration Tool (RAT)
  • CISOfy/lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
  • htr-tech/nexphisher - Advanced Phishing tool for Linux & Termux
  • SecWiki/linux-kernel-exploits - linux-kernel-exploits Linux平台提权漏洞集合
  • geemion/Khepri - Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++ like CobaltStrike.
  • GTFOBins/GTFOBins.github.io - GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
  • carlospolop/PEASS-ng - PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
  • screetsec/TheFatRat - Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then
  • ShutdownRepo/Exegol - Fully featured and community-driven hacking environment
  • htr-tech/zphisher - An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
  • thehackingsage/hacktronian - Tools for Pentesting
  • Gallopsled/pwntools - CTF framework and exploit development library
  • txthinking/brook - A cross-platform network tool designed for developers. 一个为开发者设计的跨平台网络工具.
  • n1nj4sec/pupy - Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
  • nmap/nmap - Nmap - the Network Mapper. Github mirror of official SVN repository.
  • v2rayA/v2rayA - A web GUI client of Project V which supports V2Ray, Xray, SS, SSR, Trojan and Pingtunnel 🚀
  • sherlock-project/sherlock - 🔎 Hunt down social media accounts by username across social networks
  • PowerShell/PowerShell - PowerShell for every system!
  • trimstray/sandmap - Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
  • cdk-team/CDK - 📦 Make security testing of K8s, Docker, and Containerd easier.
  • ckjbug/Hacking - 🌐Collate and develop network security, Hackers technical documentation and tools, code.
  • wuseman/EMAGNET - Automated hacking tool that will find leaked databases with 97.1% accurate to grab mail + password together from recent uploads from https://pastebin.com. Bruteforce support for spotify accounts, inst
  • trimstray/the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
  • Ascotbe/HackerMind - 渗透步骤，web安全，CTF，业务安全，人工智能，区块链安全，安全开发，无线安全，社会工程学，二进制安全，移动安全，红蓝对抗，运维安全，风控安全，linux安全
  • OpenCyberTranslationProject/Linux-Basics-for-Hackers - 书籍《Linux Basics for Hackers》2019版中文翻译版
  • 0xricksanchez/paper_collection - Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read
  • blaCCkHatHacEEkr/PENTESTING-BIBLE - Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.
  • Z4nzu/hackingtool - ALL IN ONE Hacking Tool For Hackers

git

automation

hacking

  • koutto/jok3r - Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
  • mitre/caldera - Automated Adversary Emulation Platform
  • Hackplayers/evil-winrm - The ultimate WinRM shell for hacking/pentesting
  • yaklang/yakit - Cyber Security ALL-IN-ONE Platform
  • D4Vinci/One-Lin3r - Gives you one-liners that aids in penetration testing operations, privilege escalation and more
  • j3ssie/osmedeus - A Workflow Engine for Offensive Security
  • XiphosResearch/exploits - Miscellaneous exploit code
  • gquere/pwn_jenkins - Notes about attacking Jenkins servers
  • m0nad/Diamorphine - LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)
  • gh0stkey/Web-Fuzzing-Box - Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1
  • aydinnyunus/Keylogger - Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
  • carlospolop/hacktricks - Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
  • TryCatchHCF/Cloakify - CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting C
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐
  • Ignitetechnologies/Privilege-Escalation - This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
  • juice-shop/juice-shop - OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
  • HashPals/Name-That-Hash - 🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
  • 0dayCTF/reverse-shell-generator - Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
  • 003random/getJS - A tool to fastly get all javascript sources/files
  • 1N3/PrivEsc - A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
  • diego-treitos/linux-smart-enumeration - Linux enumeration tool for pentesting and CTFs with verbosity levels
  • mgeeky/Penetration-Testing-Tools - A collection of more than 170+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least
  • nixawk/pentest-wiki - PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
  • rmusser01/Infosec_Reference - An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
  • The-Art-of-Hacking/h4cker - This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerabil
  • six2dez/pentest-book -
  • antonio-morales/Fuzzing101 - An step by step fuzzing tutorial. A GitHub Security Lab initiative
  • RhinoSecurityLabs/IPRotate_Burp_Extension - Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
  • payloadbox/sql-injection-payload-list - 🎯 SQL Injection Payload List
  • nil0x42/phpsploit - Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
  • bettercap/bettercap - The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.
  • infosecn1nja/Red-Teaming-Toolkit - This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
  • urbanadventurer/WhatWeb - Next generation web scanner
  • k8gege/K8tools - K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke
  • screetsec/TheFatRat - Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then
  • ShutdownRepo/Exegol - Fully featured and community-driven hacking environment
  • Ciphey/Ciphey - ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
  • bee-san/pyWhat - 🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️
  • jekil/awesome-hacking - Awesome hacking is an awesome collection of hacking tools.
  • Datalux/Osintgram - Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
  • tiagorlampert/CHAOS - 🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
  • yogeshojha/rengine - reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon
  • nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters - A list of resources for those interested in getting started in bug bounties
  • ffffffff0x/1earn - ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
  • S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet - A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
  • k8gege/Ladon - 大型内网渗透扫描器&Cobalt Strike，Ladon9.1.4内置150个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB
  • jaeles-project/jaeles - The Swiss Army knife for automated Web Application Testing
  • foospidy/payloads - Git All the Payloads! A collection of web attack payloads.
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
  • swisskyrepo/PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
  • hakluke/hakrawler - Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
  • D4Vinci/Cr3dOv3r - Know the dangers of credential reuse attacks.
  • yassineaboukir/sublert - Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
  • bhavsec/reconspider - 🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
  • khast3x/h8mail - Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
  • jofpin/trape - People tracker on the Internet: OSINT analysis and research tool by Jose Pino
  • blaCCkHatHacEEkr/OSINT_TIPS - OSINT
  • UnaPibaGeek/ctfr - Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
  • maurosoria/dirsearch - Web path scanner
  • projectdiscovery/subfinder - Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
  • anouarbensaad/vulnx - vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collecti
  • kelvinBen/AppInfoScanner - 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
  • sundowndev/hacker-roadmap - A collection of hacking tools, resources and references to practice ethical hacking.
  • hahwul/WebHackersWeapons - ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
  • D4Vinci/Dr0p1t-Framework - A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
  • trimstray/sandmap - Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
  • SofianeHamlaoui/Lockdoor-Framework - 🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
  • wuseman/EMAGNET - Automated hacking tool that will find leaked databases with 97.1% accurate to grab mail + password together from recent uploads from https://pastebin.com. Bruteforce support for spotify accounts, inst
  • trimstray/the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
  • Hack-with-Github/Free-Security-eBooks - Free Security and Hacking eBooks
  • toolswatch/blackhat-arsenal-tools - Official Black Hat Arsenal Security Tools Repository
  • OlivierLaflamme/Cheatsheet-God - Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
  • evyatarmeged/Raccoon - A high performance offensive security tool for reconnaissance and vulnerability scanning
  • smicallef/spiderfoot - SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
  • hahwul/a2sv - Auto Scanning to SSL Vulnerability
  • aaaguirrep/offensive-docker - Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
  • LasCC/Hack-Tools - The all-in-one Red Team extension for Web Pentester 🛠
  • We5ter/Scanners-Box - A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
  • tom0li/collection-document - Collection of quality safety articles. Awesome articles.
  • vitalysim/Awesome-Hacking-Resources - A collection of hacking / penetration testing resources to make you better!
  • Hack-with-Github/Awesome-Hacking - A collection of various awesome lists for hackers, pentesters and security researchers
  • backdoorhub/shell-backdoor-list - 🎯 PHP / ASP - Shell Backdoor List 🎯
  • Hacker0x01/hacker101 - Source code for Hacker101.com - a free online web and mobile security class.
  • husnainfareed/Awesome-Ethical-Hacking-Resources - 🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.
  • infoslack/awesome-web-hacking - A list of web application security
  • samratashok/nishang - Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
  • blaCCkHatHacEEkr/PENTESTING-BIBLE - Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.
  • RustScan/RustScan - 🤖 The Modern Port Scanner 🤖
  • rtcatc/Packer-Fuzzer - Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
  • Z4nzu/hackingtool - ALL IN ONE Hacking Tool For Hackers

security

  • koutto/jok3r - Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
  • eth0izzle/shhgit - Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories: www.shhgit.com
  • cyberark/kubesploit - Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.
  • intrigueio/intrigue-core - Discover Your Attack Surface!
  • momenbasel/keyFinder - Keyfinder🔑 is a tool that let you find keys while surfing the web!
  • arainho/awesome-api-security - A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  • snyk/cli - Snyk CLI scans and monitors your projects for security vulnerabilities.
  • processhacker/processhacker - A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
  • utkusen/urlhunter - a recon tool that allows searching on URLs that are exposed via shortener services
  • yaklang/yakit - Cyber Security ALL-IN-ONE Platform
  • lutfumertceylan/top25-parameter - For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙
  • Viralmaniar/Passhunt - Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
  • jeffzh3ng/fuxi - Penetration Testing Platform
  • ph4ntonn/Stowaway - 👻Stowaway -- Multi-hop Proxy Tool for pentesters
  • j3ssie/osmedeus - A Workflow Engine for Offensive Security
  • OWASP/Nettacker - Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
  • XiphosResearch/exploits - Miscellaneous exploit code
  • JoyChou93/java-sec-code - Java web common vulnerabilities and security code which is base on springboot and spring security
  • cilium/cilium - eBPF-based Networking, Security, and Observability
  • m0nad/Diamorphine - LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)
  • decalage2/oletools - oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
  • MISP/MISP - MISP (core software) - Open Source Threat Intelligence and Sharing Platform
  • radareorg/radare2 - UNIX-like reverse engineering framework and command-line toolset
  • JKornev/hidden - 🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
  • TryCatchHCF/Cloakify - CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting C
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐
  • sleventyeleven/linuxprivchecker - linuxprivchecker.py -- a Linux Privilege Escalation Check Script
  • juice-shop/juice-shop - OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
  • HashPals/Name-That-Hash - 🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
  • 0dayCTF/reverse-shell-generator - Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
  • andresriancho/w3af - w3af: web application attack and audit framework, the open source web vulnerability scanner.
  • apsdehal/awesome-ctf - A curated list of CTF frameworks, libraries, resources and softwares
  • nixawk/pentest-wiki - PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
  • xairy/linux-kernel-exploitation - A collection of links related to Linux kernel security and exploitation
  • six2dez/pentest-book -
  • antonio-morales/Fuzzing101 - An step by step fuzzing tutorial. A GitHub Security Lab initiative
  • OpenCTI-Platform/opencti - Open Cyber Threat Intelligence Platform
  • lirantal/awesome-nodejs-security - Awesome Node.js Security resources
  • airbnb/binaryalert - BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
  • googleprojectzero/winafl - A fork of AFL for fuzzing Windows binaries
  • jonasstrehle/supercookie - ⚠️ Browser fingerprinting via favicon!
  • aircrack-ng/aircrack-ng - WiFi security auditing tools suite
  • zricethezav/gitleaks - Protect and discover secrets using Gitleaks 🔑
  • mitmproxy/mitmproxy - An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
  • arkenfox/user.js - Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
  • anchore/grype - A vulnerability scanner for container images and filesystems
  • zer0yu/Awesome-CobaltStrike - cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources
  • bettercap/bettercap - The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.
  • urbanadventurer/WhatWeb - Next generation web scanner
  • aquasecurity/tfsec - Security scanner for your Terraform code
  • 0xbug/Hawkeye - GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
  • cddmp/enum4linux-ng - A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.
  • 0x4D31/awesome-threat-detection - A curated list of awesome threat detection and hunting resources
  • bee-san/pyWhat - 🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️
  • jekil/awesome-hacking - Awesome hacking is an awesome collection of hacking tools.
  • quasar/Quasar - Remote Administration Tool for Windows
  • parsiya/Hacking-with-Go - Golang for Security Professionals
  • ajinabraham/nodejsscan - nodejsscan is a static security code scanner for Node.js applications.
  • coreb1t/awesome-pentest-cheat-sheets - Collection of the cheat sheets useful for pentesting
  • projectdiscovery/nuclei-templates - Community curated list of templates for the nuclei engine to find security vulnerabilities.
  • ffffffff0x/1earn - ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
  • lc/gau - Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
  • chaitin/xray - 一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
  • S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet - A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
  • k8gege/Ladon - 大型内网渗透扫描器&Cobalt Strike，Ladon9.1.4内置150个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB
  • dreddsa5dies/goHackTools - Hacker tools on Go (Golang)
  • Dliv3/Venom - Venom - A Multi-hop Proxy for Penetration Testers
  • projectdiscovery/nuclei - Fast and customizable vulnerability scanner based on simple YAML based DSL.
  • nomi-sec/PoC-in-GitHub - 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
  • projectdiscovery/interactsh - An OOB interaction gathering server and client library
  • nmap/nmap - Nmap - the Network Mapper. Github mirror of official SVN repository.
  • EdOverflow/bugbounty-cheatsheet - A list of interesting payloads, tips and tricks for bug bounty hunters.
  • swisskyrepo/PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
  • sensepost/gowitness - 🔍 gowitness - a golang, web screenshot utility using Chrome Headless
  • rsmusllp/king-phisher - Phishing Campaign Toolkit
  • gophish/gophish - Open-Source Phishing Toolkit
  • ivre/ivre - Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, coll
  • infobyte/faraday - Collaborative Penetration Test and Vulnerability Management Platform
  • Nekmo/dirhunt - Find web directories without bruteforce
  • EdOverflow/can-i-take-over-xyz - "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
  • haccer/subjack - Subdomain Takeover tool written in Go
  • hahwul/dalfox - 🌙🦊 DalFox is an powerful open source XSS scanning tool and parameter analyzer, utility
  • nsonaniya2010/SubDomainizer - A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
  • yassineaboukir/sublert - Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
  • NullArray/AutoSploit - Automated Mass Exploiter
  • cure53/DOMPurify - DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
  • bhavsec/reconspider - 🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
  • google/oss-fuzz - OSS-Fuzz - continuous fuzzing for open source software.
  • evilsocket/xray - XRay is a tool for recon, mapping and OSINT gathering from public networks.
  • jofpin/trape - People tracker on the Internet: OSINT analysis and research tool by Jose Pino
  • blark/aiodnsbrute - Python 3.5+ DNS asynchronous brute force utility
  • AV1080p/Hacking-With-Golang - Golang安全资源合集
  • maurosoria/dirsearch - Web path scanner
  • michenriksen/aquatone - A Tool for Domain Flyovers
  • projectdiscovery/dnsprobe - DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.
  • kelvinBen/AppInfoScanner - 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
  • knownsec/404StarLink - 404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
  • sundowndev/hacker-roadmap - A collection of hacking tools, resources and references to practice ethical hacking.
  • hahwul/WebHackersWeapons - ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
  • onlurking/awesome-infosec - A curated list of awesome infosec courses and training resources.
  • fabacab/awesome-cybersecurity-blueteam - 💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
  • cleverhans-lab/cleverhans - An adversarial example library for constructing attacks, building defenses, and benchmarking both
  • trimstray/the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
  • Ascotbe/HackerMind - 渗透步骤，web安全，CTF，业务安全，人工智能，区块链安全，安全开发，无线安全，社会工程学，二进制安全，移动安全，红蓝对抗，运维安全，风控安全，linux安全
  • hslatman/awesome-threat-intelligence - A curated list of Awesome Threat Intelligence resources
  • Hack-with-Github/Free-Security-eBooks - Free Security and Hacking eBooks
  • OlivierLaflamme/Cheatsheet-God - Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
  • flipkart-incubator/Astra - Automated Security Testing For REST API's
  • michenriksen/gitrob - Reconnaissance tool for GitHub organizations
  • prowler-cloud/prowler - Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 2
  • hahwul/a2sv - Auto Scanning to SSL Vulnerability
  • Metnew/uxss-db - 🔪Browser logic vulnerabilities ☠️
  • scipag/vulscan - Advanced vulnerability scanning with Nmap NSE
  • tom0li/collection-document - Collection of quality safety articles. Awesome articles.
  • Hack-with-Github/Awesome-Hacking - A collection of various awesome lists for hackers, pentesters and security researchers
  • wpscanteam/wpscan - WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites.
  • qazbnm456/awesome-web-security - 🐶 A curated list of Web Security materials and resources.
  • findneo/Newbie-Security-List - 网络安全学习资料，欢迎补充
  • Hacker0x01/hacker101 - Source code for Hacker101.com - a free online web and mobile security class.
  • samratashok/nishang - Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
  • RustScan/RustScan - 🤖 The Modern Port Scanner 🤖

framework

kubernetes

  • cyberark/kubesploit - Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.
  • cilium/cilium - eBPF-based Networking, Security, and Observability
  • cdk-team/CDK - 📦 Make security testing of K8s, Docker, and Containerd easier.

java

  • apache/drill - Apache Drill is a distributed MPP query layer for self describing data
  • JoyChou93/java-sec-code - Java web common vulnerabilities and security code which is base on springboot and spring security
  • CalebFenton/simplify - Android virtual machine and deobfuscator
  • imarvinle/awesome-cs-books - 经典编程书籍大全，涵盖：计算机系统与网络、系统架构、算法与数据结构、前端开发、后端开发、移动开发、数据库、测试、项目与团队、程序员职业修炼、求职面试等
  • rememberber/WePush - 专注批量推送的小而美的工具，目前支持：模板消息-公众号、模板消息-小程序、微信客服消息、微信企业号/企业微信消息、阿里云短信、阿里大于模板短信 、腾讯云短信、云片网短信、E-Mail、HTTP请求、钉钉、华为云短信、百度云短信、又拍云短信、七牛云短信
  • youngyangyang04/leetcode-master - 《代码随想录》LeetCode 刷题攻略：200道经典题目刷题顺序，共60w字的详细图解，视频难点剖析，50余张思维导图，支持C++，Java，Python，Go，JavaScript等多语言版本，从此算法学习不再迷茫！🔥🔥 来看看，你会发现相见恨晚！🚀
  • frohoff/ysoserial - A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  • tom0li/collection-document - Collection of quality safety articles. Awesome articles.

sql

  • apache/drill - Apache Drill is a distributed MPP query layer for self describing data
  • 1N3/PrivEsc - A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

wordpress

  • Tuhinshubhra/RED_HAWK - All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
  • Tuhinshubhra/CMSeeK - CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
  • wpscanteam/wpscan - WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites.

js

chrome-extension

  • momenbasel/keyFinder - Keyfinder🔑 is a tool that let you find keys while surfing the web!
  • iamadamdev/bypass-paywalls-chrome - Bypass Paywalls web browser extension for Chrome and Firefox.
  • Kenshin/simpread - 简悦 ( SimpRead ) - 让你瞬间进入沉浸式阅读的扩展
  • gongjunhao/seckill - Chrome浏览器 抢购、秒杀插件，秒杀助手，定时自动点击
  • gildas-lormeau/SingleFile - 📷 Web Extension for Firefox/Chrome/MS Edge and CLI tool to save a faithful copy of an entire web page in a single HTML file
  • crimx/ext-saladict - 🥗 All-in-one professional pop-up dictionary and page translator which supports multiple search modes, page translations, new word notebook and PDF selection searching.
  • LasCC/Hack-Tools - The all-in-one Red Team extension for Web Pentester 🛠

awesome-list

cybersecurity

  • mitre/caldera - Automated Adversary Emulation Platform
  • future-architect/vuls - Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
  • Viralmaniar/Passhunt - Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
  • maliceio/malice - VirusTotal Wanna Be - Now with 100% more Hipster
  • MISP/MISP - MISP (core software) - Open Source Threat Intelligence and Sharing Platform
  • aydinnyunus/Keylogger - Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
  • The-Art-of-Hacking/h4cker - This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerabil
  • OpenCTI-Platform/opencti - Open Cyber Threat Intelligence Platform
  • lirantal/awesome-nodejs-security - Awesome Node.js Security resources
  • 0xCyberY/ehtk - Ethical Hacking Toolkit is a collection of tools, cheat sheets, and resources for Ethical hackers, Penetration Tester, and Security Researchers etc. It contains almost all tools mentioned in CEH, OSCP
  • bee-san/pyWhat - 🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️
  • ihebski/DefaultCreds-cheat-sheet - One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
  • foospidy/payloads - Git All the Payloads! A collection of web attack payloads.
  • Viralmaniar/BigBountyRecon - BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
  • 1N3/Sn1per - Attack Surface Management Platform | Sn1perSecurity LLC
  • projectdiscovery/httpx - httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.
  • bhavsec/reconspider - 🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
  • SofianeHamlaoui/Lockdoor-Framework - 🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
  • fabacab/awesome-cybersecurity-blueteam - 💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
  • smicallef/spiderfoot - SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
  • LasCC/Hack-Tools - The all-in-one Red Team extension for Web Pentester 🛠
  • rtcatc/Packer-Fuzzer - Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

c

monitoring

  • processhacker/processhacker - A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
  • cilium/cilium - eBPF-based Networking, Security, and Observability
  • bettercap/bettercap - The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

ruby

powershell

dotnet

python3

  • byt3bl33d3r/SILENTTRINITY - An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
  • aydinnyunus/Keylogger - Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
  • Marten4n6/EvilOSX - An evil RAT (Remote Administration Tool) for macOS / OS X.
  • Datalux/Osintgram - Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
  • Gallopsled/pwntools - CTF framework and exploit development library
  • thewhiteh4t/FinalRecon - The Last Web Recon Tool You'll Need
  • m8r0wn/subscraper - Perform subdomain enumeration through various techniques and retrieve detailed output to aid in further testing.
  • nsonaniya2010/SubDomainizer - A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
  • sherlock-project/sherlock - 🔎 Hunt down social media accounts by username across social networks
  • kelvinBen/AppInfoScanner - 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
  • Jack-Cherish/PythonPark - Python 开源项目之「自学编程之路」，保姆级教程：AI实验室、宝藏视频、数据结构、学习指南、机器学习实战、深度学习实战、网络爬虫、大厂面经、程序人生、资源分享。
  • rtcatc/Packer-Fuzzer - Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

python

  • byt3bl33d3r/CrackMapExec - A swiss army knife for pentesting networks
  • jivoi/pentest - ⛔ offsec batteries included
  • OWASP/Nettacker - Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
  • Manisso/fsociety - fsociety Hacking Tools Pack – A Penetration Testing Framework
  • nccgroup/Winpayloads - Undetectable Windows Payload Generation
  • 1N3/BlackWidow - A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
  • XiphosResearch/exploits - Miscellaneous exploit code
  • tennc/webshell - This is a webshell open source project
  • Neo23x0/yarGen - yarGen is a generator for YARA rules
  • decalage2/oletools - oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
  • intelowlproject/IntelOwl - Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale
  • lief-project/LIEF - LIEF - Library to Instrument Executable Formats
  • hugsy/gef - GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers
  • aydinnyunus/Keylogger - Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
  • HashPals/Name-That-Hash - 🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
  • ihack4falafel/OSCP - Collection of things made during my OSCP journey
  • vinta/awesome-python - A curated list of awesome Python frameworks, libraries, software and resources
  • imarvinle/awesome-cs-books - 经典编程书籍大全，涵盖：计算机系统与网络、系统架构、算法与数据结构、前端开发、后端开发、移动开发、数据库、测试、项目与团队、程序员职业修炼、求职面试等
  • PokemonGoF/PokemonGo-Bot - The Pokemon Go Bot, baking with community.
  • boto/boto3 - AWS SDK for Python
  • sqlmapproject/sqlmap - Automatic SQL injection and database takeover tool
  • nathanlopez/Stitch - Python Remote Administration Tool (RAT)
  • dashingsoft/pyarmor - A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.
  • mitmproxy/mitmproxy - An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
  • bhattsameer/Bombers - SMS/Email/Whatsapp/Twitter/Instagram bombers Collection 💣💣💣 💥 Also added collection of some Fake SMS utilities which helps in skip phone number based SMS verification by using a te
  • Marten4n6/EvilOSX - An evil RAT (Remote Administration Tool) for macOS / OS X.
  • Ciphey/Ciphey - ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
  • bee-san/pyWhat - 🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️
  • Datalux/Osintgram - Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
  • UndeadSec/SocialFish - Phishing Tool & Information Collector
  • youngyangyang04/leetcode-master - 《代码随想录》LeetCode 刷题攻略：200道经典题目刷题顺序，共60w字的详细图解，视频难点剖析，50余张思维导图，支持C++，Java，Python，Go，JavaScript等多语言版本，从此算法学习不再迷茫！🔥🔥 来看看，你会发现相见恨晚！🚀
  • donnemartin/system-design-primer - Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.
  • thehackingsage/hacktronian - Tools for Pentesting
  • Gallopsled/pwntools - CTF framework and exploit development library
  • facert/awesome-spider - 爬虫集合
  • rfyiamcool/share_ppt - 🚗 我个人曾经做过的技术分享...
  • n1nj4sec/pupy - Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
  • s0md3v/Hash-Buster - Crack hashes in seconds.
  • rsmusllp/king-phisher - Phishing Campaign Toolkit
  • ivre/ivre - Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, coll
  • Nekmo/dirhunt - Find web directories without bruteforce
  • pyenv/pyenv - Simple Python version management
  • yassineaboukir/sublert - Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
  • opsdisk/pagodo - pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
  • TebbaaX/Katana - Python Tool that gives you the ability to run Advanced Google Queries (Known as Google Dorks - Google Dorking)
  • NullArray/AutoSploit - Automated Mass Exploiter
  • bhavsec/reconspider - 🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
  • jofpin/trape - People tracker on the Internet: OSINT analysis and research tool by Jose Pino
  • blark/aiodnsbrute - Python 3.5+ DNS asynchronous brute force utility
  • maurosoria/dirsearch - Web path scanner
  • NikolaiT/GoogleScraper - A Python module to scrape several search engines (like Google, Yandex, Bing, Duckduckgo, ...). Including asynchronous networking support.
  • Trusted-AI/adversarial-robustness-toolbox - Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
  • MobSF/Mobile-Security-Framework-MobSF - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and
  • Jack-Cherish/PythonPark - Python 开源项目之「自学编程之路」，保姆级教程：AI实验室、宝藏视频、数据结构、学习指南、机器学习实战、深度学习实战、网络爬虫、大厂面经、程序人生、资源分享。
  • TophantTechnology/ARL - ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
  • curiousily/Deep-Learning-For-Hackers - Machine Learning tutorials with TensorFlow 2 and Keras in Python (Jupyter notebooks included) - (LSTMs, Hyperameter tuning, Data preprocessing, Bias-variance tradeoff, Anomaly Detection, Autoencoders,
  • shmilylty/OneForAll - OneForAll是一款功能强大的子域收集工具
  • flipkart-incubator/Astra - Automated Security Testing For REST API's
  • s0md3v/Photon - Incredibly fast crawler designed for OSINT.
  • smicallef/spiderfoot - SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
  • commixproject/commix - Automated All-in-One OS Command Injection Exploitation Tool.
  • toolswatch/vFeed - The Correlated CVE Vulnerability And Threat Intelligence Database API
  • laramies/theHarvester - E-mails, subdomains and names Harvester - OSINT

macos

  • Adminisme/ServerScan - ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。
  • marktext/marktext - 📝A simple and elegant markdown editor, available for Linux, macOS and Windows.
  • jaywcjlove/awesome-mac -  Now we have become very big, Different from the original idea. Collect premium software in various categories.
  • rubickCenter/rubick - 🔧 Electron based open source toolbox, free integration of rich plug-ins. 基于 electron 的开源工具箱，自由集成丰富插件。
  • neoneggplant/EggShell - iOS/macOS/Linux Remote Administration Tool
  • Marten4n6/EvilOSX - An evil RAT (Remote Administration Tool) for macOS / OS X.
  • geemion/Khepri - Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++ like CobaltStrike.
  • txthinking/brook - A cross-platform network tool designed for developers. 一个为开发者设计的跨平台网络工具.
  • sherlock-project/sherlock - 🔎 Hunt down social media accounts by username across social networks
  • PowerShell/PowerShell - PowerShell for every system!

mobile

  • nccgroup/house - A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
  • ctf-wiki/ctf-wiki - Come and join us, we need you!

android

  • nccgroup/house - A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
  • APKLab/APKLab - Android Reverse-Engineering Workbench for VS Code
  • rednaga/APKiD - Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
  • lief-project/LIEF - LIEF - Library to Instrument Executable Formats
  • CalebFenton/simplify - Android virtual machine and deobfuscator
  • quasarframework/quasar - Quasar Framework - Build high-performance VueJS user interfaces in record time
  • AhMyth/AhMyth-Android-RAT - Android Remote Administration Tool
  • txthinking/brook - A cross-platform network tool designed for developers. 一个为开发者设计的跨平台网络工具.
  • n1nj4sec/pupy - Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
  • kelvinBen/AppInfoScanner - 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
  • Hack-with-Github/Awesome-Hacking - A collection of various awesome lists for hackers, pentesters and security researchers

database

  • D4Vinci/One-Lin3r - Gives you one-liners that aids in penetration testing operations, privilege escalation and more
  • sqlmapproject/sqlmap - Automatic SQL injection and database takeover tool
  • k8gege/K8tools - K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke
  • wuseman/EMAGNET - Automated hacking tool that will find leaked databases with 97.1% accurate to grab mail + password together from recent uploads from https://pastebin.com. Bruteforce support for spotify accounts, inst
  • insightglacier/Dictionary-Of-Pentesting - Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
  • kwsch/PKHeX - Pokémon Save File Editor

raspberry-pi

  • ZerBea/hcxtools - Portable (that doesn't include proprietary/commercial operating systems) solution for conversion of cap/pcap/pcapng (gz compressed) WiFi dump files to hashcat formats (recommended by hashcat) and to J
  • s-matyukevich/raspberry-pi-os - Learning operating system development using Linux kernel and Raspberry Pi

pwa

electron

  • marktext/marktext - 📝A simple and elegant markdown editor, available for Linux, macOS and Windows.
  • rubickCenter/rubick - 🔧 Electron based open source toolbox, free integration of rich plug-ins. 基于 electron 的开源工具箱，自由集成丰富插件。
  • quasarframework/quasar - Quasar Framework - Build high-performance VueJS user interfaces in record time
  • bitwarden/clients - Bitwarden client applications (web, browser extension, desktop, and cli)

vue

latex

emoji

  • marktext/marktext - 📝A simple and elegant markdown editor, available for Linux, macOS and Windows.

continuous-integration

  • stepchowfun/toast - Containerize your development and continuous integration environments. 🥂

code-review

chrome

  • iamadamdev/bypass-paywalls-chrome - Bypass Paywalls web browser extension for Chrome and Firefox.
  • Mr-xn/hackbar2.1.3 - the free firefox extions of hackbar v2.1.3 v2.2.9 v2.3.1,hackbar 插件未收费的免费版本。适用于chrome浏览器的HackBar-v2.2.6.zip,HackBar-v2.3.1.zip
  • Kenshin/simpread - 简悦 ( SimpRead ) - 让你瞬间进入沉浸式阅读的扩展
  • jonasstrehle/supercookie - ⚠️ Browser fingerprinting via favicon!
  • bitwarden/clients - Bitwarden client applications (web, browser extension, desktop, and cli)
  • gildas-lormeau/SingleFile - 📷 Web Extension for Firefox/Chrome/MS Edge and CLI tool to save a faithful copy of an entire web page in a single HTML file
  • crimx/ext-saladict - 🥗 All-in-one professional pop-up dictionary and page translator which supports multiple search modes, page translations, new word notebook and PDF selection searching.
  • sensepost/gowitness - 🔍 gowitness - a golang, web screenshot utility using Chrome Headless

firefox

  • iamadamdev/bypass-paywalls-chrome - Bypass Paywalls web browser extension for Chrome and Firefox.
  • Kenshin/simpread - 简悦 ( SimpRead ) - 让你瞬间进入沉浸式阅读的扩展
  • jonasstrehle/supercookie - ⚠️ Browser fingerprinting via favicon!
  • arkenfox/user.js - Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
  • bitwarden/clients - Bitwarden client applications (web, browser extension, desktop, and cli)
  • gildas-lormeau/SingleFile - 📷 Web Extension for Firefox/Chrome/MS Edge and CLI tool to save a faithful copy of an entire web page in a single HTML file
  • crimx/ext-saladict - 🥗 All-in-one professional pop-up dictionary and page translator which supports multiple search modes, page translations, new word notebook and PDF selection searching.

web

php

code

  • JoyChou93/java-sec-code - Java web common vulnerabilities and security code which is base on springboot and spring security

operating-system

devops

  • openspug/spug - 开源运维平台：面向中小型企业设计的轻量级无Agent的自动化运维平台，整合了主机管理、主机批量执行、主机在线终端、文件在线上传下载、应用发布部署、在线任务计划、配置中心、监控、报警等一系列功能。
  • CISOfy/lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
  • aquasecurity/tfsec - Security scanner for your Terraform code
  • infobyte/faraday - Collaborative Penetration Test and Vulnerability Management Platform
  • trimstray/the-book-of-secret-knowledge - A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

postgresql

  • screetsec/Vegile - This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will
  • tarunkant/Gopherus - This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

library

awesome

reverse-engineering

cpp

  • vxunderground/VX-API - Collection of various WINAPI tricks / features used or abused by Malware
  • Ciphey/Ciphey - ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
  • youngyangyang04/leetcode-master - 《代码随想录》LeetCode 刷题攻略：200道经典题目刷题顺序，共60w字的详细图解，视频难点剖析，50余张思维导图，支持C++，Java，Python，Go，JavaScript等多语言版本，从此算法学习不再迷茫！🔥🔥 来看看，你会发现相见恨晚！🚀
  • Qv2ray/Qv2ray - ⭐ Linux / Windows / macOS 跨平台 V2Ray 客户端 | 支持 VMess / VLESS / SSR / Trojan / Trojan-Go / NaiveProxy / HTTP / HTTPS / SOCKS5 | 使用 C++ / Qt 开发 | 可拓展插件式设计 ⭐

machine-learning

parsing

emulator

discord

javascript

  • terjanq/Tiny-XSS-Payloads - A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐
  • juice-shop/juice-shop - OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
  • 003random/getJS - A tool to fastly get all javascript sources/files
  • rubickCenter/rubick - 🔧 Electron based open source toolbox, free integration of rich plug-ins. 基于 electron 的开源工具箱，自由集成丰富插件。
  • quasarframework/quasar - Quasar Framework - Build high-performance VueJS user interfaces in record time
  • jonasstrehle/supercookie - ⚠️ Browser fingerprinting via favicon!
  • fingerprintjs/fingerprintjs - Browser fingerprinting library with the highest accuracy and stability.
  • bitwarden/clients - Bitwarden client applications (web, browser extension, desktop, and cli)
  • gildas-lormeau/SingleFile - 📷 Web Extension for Firefox/Chrome/MS Edge and CLI tool to save a faithful copy of an entire web page in a single HTML file
  • youngyangyang04/leetcode-master - 《代码随想录》LeetCode 刷题攻略：200道经典题目刷题顺序，共60w字的详细图解，视频难点剖析，50余张思维导图，支持C++，Java，Python，Go，JavaScript等多语言版本，从此算法学习不再迷茫！🔥🔥 来看看，你会发现相见恨晚！🚀
  • halfrost/Halfrost-Field - ✍🏻 这里是写博客的地方 —— Halfrost-Field 冰霜之地
  • ajinabraham/nodejsscan - nodejsscan is a static security code scanner for Node.js applications.
  • cure53/DOMPurify - DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
  • Metnew/uxss-db - 🔪Browser logic vulnerabilities ☠️
  • tunz/js-vuln-db - A collection of JavaScript engine CVEs with PoCs

html

twitter

  • DavidBuchanan314/tweetable-polyglot-png - Pack up to 3MB of data into a tweetable PNG polyglot file.
  • GorvGoyl/Clone-Wars - 100+ open-source clones of popular sites like Airbnb, Amazon, Instagram, Netflix, Tiktok, Spotify, Whatsapp, Youtube etc. See source code, demo links, tech stack, github stars.

bash

  • ihack4falafel/OSCP - Collection of things made during my OSCP journey
  • alebcay/awesome-shell - A curated list of awesome command-line frameworks, toolkits, guides and gizmos. Inspired by awesome-php.
  • carlospolop/PEASS-ng - PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
  • starship/starship - ☄🌌️ The minimal, blazing-fast, and infinitely customizable prompt for any shell!
  • syndbg/goenv - 🚙 Like pyenv and rbenv, but for Go.
  • rbenv/rbenv - Manage your app's Ruby environment
  • screetsec/Sudomy - Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
  • leebaird/discover - Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

mysql

  • 1N3/PrivEsc - A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
  • tarunkant/Gopherus - This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
  • dahuoyzs/javapdf - 🍣100本 Java电子书 技术书籍PDF(以下载阅读为荣，以点赞收藏为耻)

testing

  • mgeeky/Penetration-Testing-Tools - A collection of more than 170+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least
  • antonio-morales/Fuzzing101 - An step by step fuzzing tutorial. A GitHub Security Lab initiative

react

  • Kenshin/simpread - 简悦 ( SimpRead ) - 让你瞬间进入沉浸式阅读的扩展
  • xanderfrangos/twinkle-tray - Easily manage the brightness of your monitors in Windows from the system tray
  • crimx/ext-saladict - 🥗 All-in-one professional pop-up dictionary and page translator which supports multiple search modes, page translations, new word notebook and PDF selection searching.

nodejs

software

reactjs

serverless

  • airbnb/binaryalert - BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

terraform

aws

  • airbnb/binaryalert - BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
  • boto/boto3 - AWS SDK for Python
  • aquasecurity/tfsec - Security scanner for your Terraform code
  • sa7mon/S3Scanner - Scan for open S3 buckets and dump the contents
  • prowler-cloud/prowler - Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 2

bot

telegram

ios

material-design

webapp

express

typescript

  • jonasstrehle/supercookie - ⚠️ Browser fingerprinting via favicon!
  • le5le-com/topology - A diagram (topology, UML) framework uses canvas and typescript. 一个轻量（100k左右）、功能丰富的绘图工具（微服务架构图、拓扑图、流程图、类图等UML图、脑图，动画、视频支持）。 【在线使用】：
  • bitwarden/clients - Bitwarden client applications (web, browser extension, desktop, and cli)
  • crimx/ext-saladict - 🥗 All-in-one professional pop-up dictionary and page translator which supports multiple search modes, page translations, new word notebook and PDF selection searching.

qt

  • geemion/Khepri - Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++ like CobaltStrike.

azure

csharp

  • carlospolop/PEASS-ng - PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
  • dotnetcore/DotnetSpider - DotnetSpider, a .NET standard web crawling library. It is lightweight, efficient and fast high-level web crawling & scraping framework
  • kwsch/PKHeX - Pokémon Save File Editor

angular

  • bitwarden/clients - Bitwarden client applications (web, browser extension, desktop, and cli)

rust

language

  • pfusik/cito - Ć programming language. Translated automatically to C, C++, C#, Java, JavaScript, Python, Swift, TypeScript and OpenCL C.
  • golang/go - The Go programming language

algorithm

  • youngyangyang04/leetcode-master - 《代码随想录》LeetCode 刷题攻略：200道经典题目刷题顺序，共60w字的详细图解，视频难点剖析，50余张思维导图，支持C++，Java，Python，Go，JavaScript等多语言版本，从此算法学习不再迷茫！🔥🔥 来看看，你会发现相见恨晚！🚀
  • halfrost/LeetCode-Go - ✅ Solutions to LeetCode by Go, 100% test coverage, runtime beats 100% / LeetCode 题解
  • halfrost/Halfrost-Field - ✍🏻 这里是写博客的地方 —— Halfrost-Field 冰霜之地
  • jwasham/coding-interview-university - A complete computer science study plan to become a software engineer.
  • yangshun/tech-interview-handbook - 💯 Curated interview preparation materials for busy engineers

objective-c

swift

api

open-source

data-structures

programming

design

node

perl

compiler

lua

  • nmap/nmap - Nmap - the Network Mapper. Github mirror of official SVN repository.
  • scipag/vulscan - Advanced vulnerability scanning with Nmap NSE

elixir

  • asdf-vm/asdf - Extendable version manager with support for Ruby, Node.js, Elixir, Erlang & more

homebrew

flask

  • jhao104/proxy_pool - Python爬虫代理IP池(proxy pool)
  • jofpin/trape - People tracker on the Internet: OSINT analysis and research tool by Jose Pino

google

  • opsdisk/pagodo - pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
  • mxrch/GHunt - 🕵️‍♂️ Offensive Google framework.

frameworks

ai

pytorch

  • Jack-Cherish/PythonPark - Python 开源项目之「自学编程之路」，保姆级教程：AI实验室、宝藏视频、数据结构、学习指南、机器学习实战、深度学习实战、网络爬虫、大厂面经、程序人生、资源分享。

deep-learning

  • Jack-Cherish/PythonPark - Python 开源项目之「自学编程之路」，保姆级教程：AI实验室、宝藏视频、数据结构、学习指南、机器学习实战、深度学习实战、网络爬虫、大厂面经、程序人生、资源分享。
  • curiousily/Deep-Learning-For-Hackers - Machine Learning tutorials with TensorFlow 2 and Keras in Python (Jupyter notebooks included) - (LSTMs, Hyperameter tuning, Data preprocessing, Bias-variance tradeoff, Anomaly Detection, Autoencoders,

tensorflow

  • curiousily/Deep-Learning-For-Hackers - Machine Learning tutorials with TensorFlow 2 and Keras in Python (Jupyter notebooks included) - (LSTMs, Hyperameter tuning, Data preprocessing, Bias-variance tradeoff, Anomaly Detection, Autoencoders,
  • BishopFox/deephack - PoC code from DEF CON 25 presentation

website

spring-boot

  • insightglacier/Dictionary-Of-Pentesting - Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

webpack

  • rtcatc/Packer-Fuzzer - Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

License

CC0

To the extent possible under law, netveil has waived all copyright and related or neighboring rights to this work.

About