security-tools

Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

Language-agnostic SLSA provenance generation for Github Actions

Performing security tests inside your CI

VICE is a security auditing CLI tool that finds vulnerabilities in your web applications.

🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run 11 advanced detection engines to uncover hidden payloads.

OXO is a security scanning orchestrator for the modern age.

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

结合chrome-devtools-mcp的能力并加上Skill的规范，实现JSRPC+Flask+autoDecoder方案的前端JS逆向自动化分析，提升JS逆向的效率

Set of tools to audit SIP based VoIP Systems

Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.

Reverse shell generator written in Python 3.

Mapping the information system / Cartographie du système d'information

Framework for Automating Fuzzable Target Discovery with Static Analysis.

NodeJS Simple Network Scanner

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

All-in-one launcher and installer for popular penetration-testing and OSINT tools on Kali Linux and Termux.

AssemblyLine 4: File triage and malware analysis

Awesome .NET Security Resources

HackerOne "in scope" domains

Discover new target domains using Content Security Policy

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research

Repo with getting started projects for the Microsoft Security Updates API (msrc.microsoft.com/update-guide)

The Official Packet Squirrel Payload Repository

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

SDK providing threat detection & security monitoring for mobile devices. Works with Flutter, React Native, Android and iOS. Shield your app with free RASP. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.

Unleash Metadata Intelligence with MetaDetective. Your Assistant Beyond Metagoofil.

Execute ELF files without dropping them on disk