Repositories list

• hash-cracker

  Public
  Script to perform some hashcracking logic automagically

  automationbruteforcetoggle+ 17

  automationbruteforcetogglecombinatormd5ntlmhybridhasheshacktoberfesthashcat+ 10

  C

  •

  GNU General Public License v3.0

  •1313 forks•8484 stars•00 issues•00 pull requests•Updated Jul 1, 2026Jul 1, 2026

• assless-chaps

  Public
  Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

  Python

  •1919 forks•141141 stars•00 issues•00 pull requests•Updated Jun 24, 2026Jun 24, 2026

• depscanner

  Public
  Detect public repository dependencies in the GitHub repositories with an orphan required library.

  Python

  •

  GNU General Public License v3.0

  •33 forks•2424 stars•00 issues•00 pull requests•Updated Jun 19, 2026Jun 19, 2026

• common-substr

  Public
  Simple tool to extract the most common substrings from an input text. Built for password cracking.

  string-manipulationpasswordscracking+ 1

  string-manipulationpasswordscrackingwordlist-generator

  Go

  •

  GNU General Public License v3.0

  •1818 forks•6565 stars•00 issues•00 pull requests•Updated Jun 3, 2026Jun 3, 2026

• objection

  Public
  📱 objection - runtime mobile exploration

  androidsecurityios+ 5

  androidsecurityiosmobileframeworkinstrumentationpentestfrida

  Python

  •

  GNU General Public License v3.0

  •984984 forks•9.2k9.2k stars•4848 issues•1010 pull requests•Updated Jun 2, 2026Jun 2, 2026

• cipherchecks

  Public
  visually see issues with supported cipher suites

  Python

  •

  GNU General Public License v3.0

  •88 forks•1919 stars•11 issue•00 pull requests•Updated May 28, 2026May 28, 2026

• sconwar

  Public
  a bring your own client programming game

  gamechallengeprogramming+ 2

  gamechallengeprogrammingrestbyoc

  Go

  •

  GNU General Public License v3.0

  •11 fork•55 stars•00 issues•00 pull requests•Updated May 10, 2026May 10, 2026

• gowitness

  Public
  🔍 gowitness - a golang, web screenshot utility using Chrome Headless

  golangsecurityscreenshot+ 8

  golangsecurityscreenshotchromewebreportingheadlessfingerprinttechnologieschrome-headless+ 1

  Go

  •

  GNU General Public License v3.0

  •434434 forks•4.4k4.4k stars•2727 issues•77 pull requests•Updated Apr 22, 2026Apr 22, 2026

• memunpin

  Public
  memunpin

  JavaScript

  •

  GNU General Public License v3.0

  •00 forks•11 star•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• susinternals

  Public
  psexecsvc - a python implementation of PSExec's native service implementation

  Python

  •

  GNU General Public License v3.0

  •3232 forks•307307 stars•00 issues•00 pull requests•Updated Mar 24, 2026Mar 24, 2026

• DotNetHookerToolkit

  Public
  C#

  •00 forks•1111 stars•00 issues•00 pull requests•Updated Mar 2, 2026Mar 2, 2026

• go-out

  Public
  ☄️ go-out - A Golang egress buster.

  securitynetworkscanner+ 2

  securitynetworkscannerbusteregress-filtering

  Go

  •

  GNU General Public License v3.0

  •1313 forks•128128 stars•33 issues•11 pull request•Updated Feb 6, 2026Feb 6, 2026

• pipetap

  Public
  A Windows Named Pipe Multi-tool / Proxy

  researchproxynamedpipe

  researchproxynamedpipe

  C++

  •

  GNU General Public License v3.0

  •2424 forks•342342 stars•11 issue•00 pull requests•Updated Dec 7, 2025Dec 7, 2025

• CVE-2025-64446

  Public
  A scanner for the FortiNet vulnerability CVE-2025-64446

  cve-2025-64446

  cve-2025-64446

  Python

  •66 forks•3131 stars•00 issues•00 pull requests•Updated Nov 18, 2025Nov 18, 2025

• wpswag

  Public
  Create an OpenAPI/Swagger spec from a WordPress REST entry point.

  Python

  •22 forks•88 stars•00 issues•00 pull requests•Updated Sep 10, 2025Sep 10, 2025

• bloatware-pwn

  Public
  LPE / RCE Exploits for various vulnerable "Bloatware" products

  C#

  •55 forks•8888 stars•00 issues•00 pull requests•Updated Aug 5, 2025Aug 5, 2025

• shellnot

  Public
  Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed.

  shellsocketreverse-shell+ 4

  shellsocketreverse-shellproxysessionrcebind-shell

  C

  •

  GNU General Public License v3.0

  •33 forks•4747 stars•00 issues•00 pull requests•Updated Jun 12, 2025Jun 12, 2025

• mallet

  Public
  Mallet is an intercepting proxy for arbitrary protocols

  netty

  netty

  Java

  •4242 forks•292292 stars•1313 issues•11 pull request•Updated Apr 14, 2025Apr 14, 2025

• capchan

  Public
  Solving CAPTCHA with Image Classification

  Python

  •

  GNU General Public License v3.0

  •00 forks•1010 stars•00 issues•00 pull requests•Updated Mar 13, 2025Mar 13, 2025

• dresscode

  Public
  Scan websites CSP policies and visualise their vunlnerabilities from a dashboard

  csp

  csp

  Python

  •

  GNU General Public License v3.0

  •22 forks•1313 stars•00 issues•00 pull requests•Updated Mar 11, 2025Mar 11, 2025

• InvokeADCheck

  Public
  InvokeADCheck is a PowerShell module designed to evaluate the security of Active Directory environments.

  PowerShell

  •

  BSD 3-Clause "New" or "Revised" License

  •1515 forks•123123 stars•44 issues•00 pull requests•Updated Mar 10, 2025Mar 10, 2025

• goLAPS

  Public
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.

  Go

  •

  GNU General Public License v3.0

  •88 forks•8888 stars•00 issues•00 pull requests•Updated Mar 6, 2025Mar 6, 2025

• reGeorg

  Public
  The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

  Python

  •

  Other

  •824824 forks•3.2k3.2k stars•1717 issues•44 pull requests•Updated Mar 6, 2025Mar 6, 2025

• thumbscr-ews

  Public
  Exchangelib wrapper for pentesting

  Python

  •1010 forks•6969 stars•00 issues•00 pull requests•Updated Feb 17, 2025Feb 17, 2025

• berate_ap

  Public
  Script for orchestrating mana rogue WiFi Access Points.

  Shell

  •

  BSD 2-Clause "Simplified" License

  •1k1k forks•249249 stars•11 issue•00 pull requests•Updated Feb 3, 2025Feb 3, 2025

• mail-in-the-middle

  Public
  Python

  •

  GNU General Public License v3.0

  •1010 forks•109109 stars•00 issues•00 pull requests•Updated Nov 7, 2024Nov 7, 2024

• Frack

  Public archive
  Frack - Keep and Maintain your breach data

  osintbreaches

  osintbreaches

  Python

  •

  GNU General Public License v3.0

  •3030 forks•386386 stars•00 issues•00 pull requests•Updated Sep 1, 2024Sep 1, 2024

• hostapd-mana

  Public
  SensePost's modified hostapd for wifi attacks.

  C

  •

  Other

  •130130 forks•613613 stars•2020 issues•11 pull request•Updated Aug 5, 2024Aug 5, 2024

• steampipe-plugin-projectdiscovery

  Public archive
  A steampipe plugin to query projectdiscovery.io tools.

  projectdiscoverysteampipesteampipe-plugin

  projectdiscoverysteampipesteampipe-plugin

  Go

  •

  Apache License 2.0

  •22 forks•2727 stars•00 issues•11 pull request•Updated Jul 23, 2024Jul 23, 2024

• ruler

  Public
  A tool to abuse Exchange services

  exchangemapipentesting+ 1

  exchangemapipentestingshells

  Go

  •

  Other

  •359359 forks•2.3k2.3k stars•1313 issues•11 pull request•Updated Jun 10, 2024Jun 10, 2024