Trending Projects

A Python-based open-source vulnerability database and triage service for security professionals.

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

A collection of Google Dorks to find websites with responsible disclosure programs or bug bounty programs.

A collection of essential cybersecurity resources and tools for security researchers and pentesters.

Remote administration tool for Windows, focused on security and remote control capabilities.

A script that performs local Linux enumeration and privilege escalation checks.

Securely and anonymously share files, host websites, and chat using the Tor network.

This is a Python script for brute-force attacking Instagram accounts, not a tool for vibe coders.

A repository of YARA rules, a pattern matching tool for malware detection and analysis.

This Python program allows you to detect and view IMSI numbers of nearby cellphones.

A PowerShell script for enumerating privilege escalation vulnerabilities on Windows systems.

This Python repository provides a JSON file for performing user enumeration on various websites.

A large repository of cybersecurity-related links, but not focused on AI coding tools or platforms.

An open-source script that automatically removes DRM from Steam games

Curated list of awesome security resources for security operations, threat hunting, and incident response

This is a Python toolkit for conducting various brute-force attacks, including admin panel, CMS, and password cracking.

Leaked source code for the Mirai botnet, for research and indicator of compromise (IoC) development purposes.

A dictionary of attack patterns and primitives for application fault injection and resource discovery.

Automated all-in-one OS command injection exploitation tool for security researchers and penetration testers.

This project hosts security advisories and proof-of-concepts related to research conducted at Google.

This repository provides dynamically updated IP blocklists for defending against cyber attacks and abuses.

A Python tool for enumerating and abusing Active Directory Certificate Services (ADCS).

A Python-based Instagram brute force password cracking tool for hacking and security research.

This is an Albanian hacking tool with various functionalities for ethical hacking and information gathering.

GhostNet is an open-source, privacy-focused network tool for secure communication and anonymous web browsing.

Hemmelig is an encrypted secrets management tool that keeps sensitive information secure in chat logs, emails, and more.

XX-Net is a proxy tool to bypass GFW with multi-platform support and traffic obfuscation.

A security tool to detect publicly disclosed vulnerabilities in application dependencies.

Fluxion is an AI-powered tool for cybersecurity researchers and penetration testers, focused on evil-twin attacks and captive portal exploits.

A comprehensive collection of reverse engineering resources and tools for multiple platforms.

This GitHub repository provides hourly-updated data dumps of bug bounty platform scopes for developers to explore and use.

This repository provides a shell script to infect Android devices with a virus from a link in Termux.

A penetration testing tool for finding 'delicious candy' (sensitive data) on systems.

A small, fast, portable TLS/SSL implementation for embedded devices to the cloud.

Single-file PHP shell for penetration testing and system exploration.

This is a Windows kernel and user mode emulation library for malware analysis, not a vibe coder tool.

A curated list of web3 security resources for penetration testers and bug hunters.

A powerful OSINT analysis and research tool for tracking people on the internet.

A curated list of fuzzing resources for learning fuzzing and initial phases of exploit development.

A curated list of bug bounty writeups, a valuable resource for security researchers and bug hunters.

A comprehensive study plan to become a successful cybersecurity engineer across various roles.

A collection of tools and resources for web hackers and bug hunters.

A collection of tools and techniques for the Blue Team, focused on incident response and cybersecurity.

A powerful OSINT tool for gathering open-source intelligence and performing online investigations.

Android security patching framework that disables signature verification for system modifications

This is a tool for hacking Android pattern locks from the Termux terminal, likely used for phishing and penetration testing.

Daily feed of bad IP addresses with blacklist hit scores for security and threat monitoring.

This is a collection of password wordlists sorted by probability, useful for password generation and testing.

Snyk CLI scans and monitors projects for security vulnerabilities, helping developers secure their applications.

Automatically install all Kali Linux tools for security and penetration testing.