Trending Projects

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers.

Fluxion is an AI-powered tool for cybersecurity researchers and penetration testers, focused on evil-twin attacks and captive portal exploits.

This is a Kali Linux-based tool for creating masked phishing URLs to conduct social engineering attacks.

A Swiss Army knife for automated web application testing, written in Go, useful for bug bounty hunters and security professionals.

Comprehensive scanning tool for security testing and penetration testing of websites and web applications.

A physical memory manipulation and hacking tool that exploits PCI-based DMA vulnerabilities.

A toolkit for creating various payloads, powershell attacks, and launching listeners for Human Interface Devices (Teensy).

A Python library for analyzing and securing drone systems against security vulnerabilities.

A repository showcasing security research and bug bounty case studies, not focused on vibe coders.

This repository contains the source code for the book 'Violent Python' focused on cybersecurity and ethical hacking tools.

A security tool to detect publicly disclosed vulnerabilities in application dependencies.

This is a script to install Kali Nethunter, a penetration testing Linux distro, on Android devices using Termux without root access.

A Python-based open-source vulnerability database and triage service for security professionals.

This is a hardware backdoor research project for x86 CPUs, not a developer discovery platform focused on vibe coders.

A customizable and automated penetration testing reporting platform for offensive security professionals.

A Python library that demonstrates a security vulnerability in QR code-based login systems.

A collection of setup scripts for security research tools, useful for penetration testing and ctf challenges.

A fast and safe Rust library for detecting memory vulnerabilities in software.

A repository of YARA rules, a pattern matching tool for malware detection and analysis.

This GitHub repository is a collection of tools and methods for open-source intelligence (OSINT) collection.

RedSnarf is a Windows-focused penetration testing and red-teaming tool for security professionals.

A collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+, a popular red team toolkit.

Automated all-in-one OS command injection exploitation tool for security researchers and penetration testers.

Snyk CLI scans and monitors projects for security vulnerabilities, helping developers secure their applications.

This repository provides dynamically updated IP blocklists for defending against cyber attacks and abuses.

This is an advanced phishing tool for Linux, not a developer platform focused on AI tools.

A privacy-focused Android app to monitor and control trackers and ads on your device.

A Python tool to find web directories without bruteforcing, useful for security researchers and penetration testers.

A Java agent-based tool to quickly generate memory shell payloads for common Java web frameworks.

A curated collection of periodic cyber security newsletters covering the latest news, research, and best practices.

A Python library that exploits a vulnerability in Apple software to craft PNG files that appear differently

This Python script allows you to abuse Exchange Server to escalate privileges and gain Domain Admin access.

A VoIP security testing toolset that helps security teams, QA, and developers test SIP-based VoIP systems and applications.

An open-source two-factor authentication app for Android with support for HOTP, TOTP, and OpenPGP.

A Python tool to automate Google Hacking Database scraping and searching for bug bounty and OSINT purposes.

CeWL is a Ruby library for generating custom word lists, useful for password cracking.

This is a repository for a free VPN service, but it does not appear to be directly related to AI coding tools or developer platforms.

A collection of tools, tips, and tricks for exploring and securing Industrial Control Systems (ICS) and SCADA systems.

BinaryAlert is a serverless, real-time and retroactive malware detection tool powered by AWS Lambda and Terraform.

This appears to be a collection of security-focused tools for developers.

This GitHub repository provides a Docker environment for testing various versions of the FastJson library for vulnerabilities and exploitation techniques.

A proof-of-concept server demonstrating a remote code execution vulnerability in Redis versions up to 5.0.5.

A modular, open-source vulnerability scanner with automatic report generation capabilities.

A collection of proof-of-concept exploits for various software vulnerabilities, primarily focused on Java-based applications.

This is a C++ rootkit designed to provide stealth and evasion capabilities to malicious software.

GmSSL is a cryptographic toolbox supporting Chinese national cryptography standards including SM2, SM3, SM4, SM9 and SSL/TLS protocols.

Unicorn is a tool for using a PowerShell downgrade attack and injecting shellcode into memory.

This repository provides a shell script to infect Android devices with a virus from a link in Termux.

RedEye is a visual analytic tool supporting Red & Blue Team operations for cybersecurity professionals.

Curated list of machine learning tools and resources for cybersecurity professionals.