Readme_en.md

# PenetrationTesting


[中文版本](https://github.com/xrkk/awesome-cyber-security/blob/master/Readme.md)

The page You see here is a stripped version: Repos with less than 200 stars and last modified more than 500 days ago are not included.
Check FULL version here: [English Version-Full](https://github.com/xrkk/awesome-cyber-security/blob/master/Readme_full_en.md)


# Directory
- [Tools](#94ca60d12e210fdd7fd9e387339b293e)
    - [RecentAdded](#9eee96404f868f372a6cbc6769ccb7f8)
        - [(854) RecentAdded](#31185b925d5152c7469b963809ceb22d)
        - [NoCategory](#f34b4da04f2a77a185729b5af752efc5)
    - [AI&&MachineLearning&&DeepLearning&&NeturalNetwork](#cc80626cfd1f8411b968373eb73bc4ea)
        - [(21) NoCategory](#19dd474da6b715024ff44d27484d528a)
        - [Collection](#bab8f2640d6c5eb981003b3fd1ecc042)
    - [Collection](#a4ee2f4d4a944b54b2246c72c037cd2e)
        - [(156) NoCategory](#e97d183e67fa3f530e7d0e7e8c33ee62)
        - [(9) Mixed](#664ff1dbdafefd7d856c88112948a65b)
        - [(12) WithoutTools](#67acc04b20c99f87ee625b073330d8c2)
        - [(1) CollectionOfCollection](#24707dd322098f73c7e450d6b1eddf12)
        - [(5) Book&&Tutorial&&Courses](#9101434a896f20263d09c25ace65f398)
        - [Note&&Tips&&Tricks&&Talk&&Conference](#8088e46fc533286d88b945f1d472bf57)
            - [(11) NoCategory](#f57ccaab4279b60c17a03f90d96b815c)
            - [(1) blog](#0476f6b97e87176da0a0d7328f8747e7)
    - [Mobile](#06fccfcc4faa7da54d572c10ef29b42e)
        - [(76) Android](#fe88ee8c0df10870b44c2dedcd86d3d3)
        - [(16) NoCategory](#4a64f5e8fdbd531a8c95d94b28c6c2c1)
        - [(58) iOS&&MacOS&&iPhone&&iPad&&iWatch](#dbde77352aac39ee710d3150a921bcad)
    - [CTF&&HTB](#c7f35432806520669b15a28161a4d26a)
        - [(110) NoCategory](#c0fea206256a42e41fd5092cecf54d3e)
        - [(6) Collection](#30c4df38bcd1abaaaac13ffda7d206c6)
        - [(1) HTB](#0d871dfb0d2544d6952c04f69a763059)
        - [CTF](#e64cedb2d91d06b3eeac5ea414e12b27)
            - [(25) Writeup](#0591f47788c6926c482f385b1d71efec)
            - [(71) NoCategory](#e8853f1153694b24db203d960e394827)
            - [Collection](#dc89088263fc944901fd7a58197a5f6d)
    - [Vulnerability&&BugHunting&&Exploit&&Fuzzing](#683b645c2162a1fce5f24ac2abfa1973)
        - [(212) NoCategory](#9d1ce4a40c660c0ce15aec6daf7f56dd)
        - [ExploitDevelopment](#605b1b2b6eeb5138cb4bc273a30b28a5)
            - [(5) NoCategory](#68a64028eb1f015025d6f5a6ee6f6810)
            - [(20) ROP](#019cf10dbc7415d93a8d22ef163407ff)
        - [VulnerabilityScan&&BugHunting](#c0bec2b143739028ff4ec439e077aa63)
            - [NoCategory](#5d02822c22d815c94c58cdaed79d6482)
            - [VulnerabilityScan](#661f41705ac69ad4392372bd4bd02f01)
                - [(111) NoCategory](#0ed7e90d216a8a5be1dafebaf9eaeb5d)
                - [Web漏洞](#d22e52bd9f47349df896ca85675d1e5c)
                - [系统漏洞](#060dd7b419423ee644794fccd67c22a8)
                - [App漏洞](#67939d66cf2a9d9373cc0a877a8c72c2)
                - [移动平台漏洞](#2076af46c7104737d06dbe29eb7c9d3a)
            - [Fuzzing](#382aaa11dea4036c5b6d4a8b06f8f786)
                - [(2) Collection](#a9a8b68c32ede78eee0939cf16128300)
                - [(8) Fuzzer](#ff703caa7c3f7b197608abaa76b1a263)
                - [(315) NoCategory](#1c2903ee7afb903ccfaa26f766924385)
        - [Exploit](#41ae40ed61ab2b61f2971fea3ec26e7c)
            - [(119) 漏洞利用](#c83f77f27ccf5f26c8b596979d7151c3)
            - [(299) Exp&&PoC](#5c1af335b32e43dba993fceb66c470bc)
        - [XSS&&XXE](#5d7191f01544a12bdaf1315c3e986dff)
            - [(6) Collection](#493e36d0ceda2fb286210a27d617c44d)
            - [(134) NoCategory](#648e49b631ea4ba7c128b53764328c39)
        - [WellKnownVulnerability&&CVE&&SpecificProduct](#f799ff186643edfcf7ac1e94f08ba018)
            - [(248) NoCategory](#309751ccaee413cbf35491452d80480f)
            - [(1) CVE](#33386e1e125e0653f7a3c8b8aa75c921)
            - [(17) Spectre&&Meltdown](#67f7ce74d12e16cdee4e52c459afcba2)
            - [(7) BlueKeep](#10baba9b8e7a2041ad6c55939cf9691f)
            - [(4) Heartbleed](#a6ebcba5cc1b4d2e3a72509b47b84ade)
            - [(9) DirtyCow](#d84e7914572f626b338beeb03ea613de)
            - [(3) Blueborne](#dacdbd68d9ca31cee9688d6972698f63)
        - [(42) Collectioin](#750f4c05b5ab059ce4405f450b56d720)
        - [(21) CSRF](#79ed781159b7865dc49ffb5fe2211d87)
        - [(22) 容器&&Docker](#edbf1e5f4d570ed44080b30bc782c350)
        - [(2) 漏洞管理](#9f068ea97c2e8865fac21d6fc50f86b3)
        - [(2) 漏洞数据库](#4c80728d087c2f08c6012afd2377d544)
        - [(1) CORS](#13fb2b7d1617dd6e0f503f52b95ba86b)
        - [漏洞分析](#0af37d7feada6cb8ccd0c81097d0f115)
    - [SpecificTarget](#7e840ca27f1ff222fd25bc61a79b07ba)
        - [NoCategory](#eb2d1ffb231cee014ed24d59ca987da2)
        - [(89) AWS](#c71ad1932bbf9c908af83917fe1fd5da)
        - [(1) Phoenix](#88716f4591b1df2149c2b7778d15d04e)
        - [(2) Kubernetes](#4fd96686a470ff4e9e974f1503d735a2)
        - [(1) Azure](#786201db0bcc40fdf486cee406fdad31)
        - [(1) Nginx](#40dbffa18ec695a618eef96d6fd09176)
        - [(1) ELK](#6b90a3993f9846922396ec85713dc760)
    - [IoT&&EmbedDevice&&Router&&Switch&&SmartDevice&&Printer](#d55d9dfd081aa2a02e636b97ca1bad0b)
        - [(44) NoCategory](#cda63179d132f43441f8844c5df10024)
        - [(1) Printer](#72bffacc109d51ea286797a7d5079392)
        - [(4) Router&&Switch](#c9fd442ecac4e22d142731165b06b3fe)
        - [(1) EmbedDevice](#3d345feb9fee1c101aea3838da8cbaca)
    - [Communication&&Proxy&&RverseProxy&&Tunnel](#1a9934198e37d6d06b881705b863afc8)
        - [(233) NoCategory](#56acb7c49c828d4715dce57410d490d1)
        - [GFW](#837c9f22a3e1bb2ce29a0fb2bcd90b8f)
            - [(1) NoCategory](#fe72fb9498defbdbb98448511cd1eaca)
            - [(3) GFWBypass](#6e28befd418dc5b22fb3fd234db322d3)
            - [(9) GFW](#e9cc4e00d5851a7430a9b28d74f297db)
        - [(6) Proxy](#21cbd08576a3ead42f60963cdbfb8599)
        - [(13) ReverseProxy](#a136c15727e341b9427b6570910a3a1f)
        - [(8) Tunnel](#e996f5ff54050629de0d9d5e68fcb630)
        - [(2) ProxyCrawl&&ProxyPool](#b2241c68725526c88e69f1d71405c6b2)
        - [AnonymousNetwork](#b03a7c05fd5b154ad593b6327578718b)
            - [NoCategory](#f0979cd783d1d455cb5e3207d574aa1e)
            - [(47) Tor&&&Onion](#e99ba5f3de02f68412b13ca718a0afb6)
        - [(84) Socks&&ShadowSocksXx](#f932418b594acb6facfc35c1ec414188)
        - [(17) V2Ray](#dbc310300d300ae45b04779281fe6ec8)
        - [(2) VPN](#891b953fda837ead9eff17ff2626b20a)
    - [Pentest&&Offensive&&PentestFramework&&PostExp](#1233584261c0cd5224b6e90a98cc9a94)
        - [(285) NoCategory](#2e40f2f1df5d7f93a7de47bf49c24a0e)
        - [Wireless&&WiFi&&AP&&802.11](#39931e776c23e80229368dfc6fd54770)
            - [(172) NoCategory](#d4efda1853b2cb0909727188116a2a8c)
            - [(7) WPS&&WPA&&WPA2](#8d233e2d068cce2b36fd0cf44d10f5d8)
            - [(2) 802.11](#8863b7ba27658d687a85585e43b23245)
        - [Payload&&RAT](#80301821d0f5d8ec2dd3754ebb1b4b10)
            - [(86) NoCategory](#6602e118e0245c83b13ff0db872c3723)
            - [(20) PayloadCollection](#b5d99a78ddb383c208aae474fc2cb002)
            - [(32) RAT](#b318465d0d415e35fc0883e9894261d1)
            - [(57) PayloadGenerate](#ad92f6b801a18934f1971e2512f5ae4f)
            - [(30) Botnet](#c45a90ab810d536a889e4e2dd45132f8)
            - [(70) Backdooring&&Backdoor](#b6efee85bca01cde45faa45a92ece37f)
            - [(1) 混淆器&&Obfuscate](#85bb0c28850ffa2b4fd44f70816db306)
            - [(1) Payload管理](#78d0ac450a56c542e109c07a3b0225ae)
            - [(31) 勒索软件](#d08b7bd562a4bf18275c63ffe7d8fc91)
            - [(14) 键盘记录器](#82f546c7277db7919986ecf47f3c9495)
            - [(13) Meterpreter](#8f99087478f596139922cd1ad9ec961b)
            - [(6) Payload投递](#63e0393e375e008af46651a3515072d8)
        - [(13) AllInOne&&Framework](#2051fd9e171f2698d8e7486e3dd35d87)
        - [PostExp](#a9494547a9359c60f09aea89f96a2c83)
            - [(36) NoCategory](#12abc279c69d1fcf10692b9cb89bcdf7)
            - [(51) PrivilegeEscalation](#4c2095e7e192ac56f6ae17c8fc045c51)
            - [Windows](#caab36bba7fa8bb931a9133e37d397f6)
                - [(19) UAC](#58f3044f11a31d0371daa91486d3694e)
                - [(5) NoCategory](#7ed8ee71c4a733d5e5e5d239f0e8b9e0)
                - [(3) AppLocker](#b84c84a853416b37582c3b7f13eabb51)
                - [(1) ActiveDirectory](#e3c4c83dfed529ceee65040e565003c4)
                - [Domain](#25697cca32bd8c9492b8e2c8a3a93bfe)
            - [(9) Persistence](#2dd40db455d3c6f1f53f8a9c25bbe63e)
        - [(4) AutoXxx](#fc8737aef0f59c3952d11749fe582dac)
        - [(4) Collection](#9081db81f6f4b78d5c263723a3f7bd6d)
        - [Burp](#39e9a0fe929fffe5721f7d7bb2dae547)
            - [(2) Collection](#6366edc293f25b57bf688570b11d6584)
            - [(324) NoCategory](#5b761419863bc686be12c76451f49532)
        - [(3) DataExfiltration](#3ae4408f4ab03f99bab9ef9ee69642a8)
        - [Metasploit](#8e7a6a74ff322cbf2bad59092598de77)
            - [(127) NoCategory](#01be61d5bb9f6f7199208ff0fba86b5d)
        - [LateralMovement](#adfa06d452147ebacd35981ce56f916b)
        - [(25) AntiAV&&BypassAV](#b1161d6c4cb520d0cd574347cd18342e)
        - [(23) C&C](#98a851c8e6744850efcb27b8e93dff73)
        - [(43) DDOS](#a0897294e74a0863ea8b83d11994fad6)
        - [(129) Kali](#7667f6a0381b6cded2014a0d279b5722)
        - [(44) OWASP](#8e1069b2bce90b87eea762ee3d0935d8)
        - [(40) CobaltStrike](#0b8e79b79094082d0906153445d6ef9a)
    - [Scanner&&SecurityScan&&AppScan](#8f92ead9997a4b68d06a9acf9b01ef63)
        - [(283) NoCategory](#de63a029bda6a7e429af272f291bb769)
        - [(18) Secret&&Privacy](#58d8b993ffc34f7ded7f4a0077129eb2)
        - [PrivacyStorage](#1927ed0a77ff4f176b0b7f7abc551e4a)
            - [(1) NoCategory](#1af1c4f9dba1db2a4137be9c441778b8)
            - [(23) Steganography](#362dfd9c1f530dd20f922fd4e0faf0e3)
    - [Recon&&InfoGather&&SubDomainDiscovery&&OSINT](#a76463feb91d09b3d024fae798b92be6)
        - [(177) NoCategory](#05ab1b75266fddafc7195f5b395e4d99)
        - [(71) SubDomainDiscovery](#e945721056c78a53003e01c3d2f3b8fe)
        - [(69) Recon&&InfoGather](#375a8baa06f24de1b67398c1ac74ed24)
        - [(43) Fingerprinting](#016bb6bd00f1e0f8451f779fe09766db)
        - [(1) Collection](#6ea9006a5325dd21d246359329a3ede2)
        - [SocialNetwork](#dc74ad2dd53aa8c8bf3a3097ad1f12b7)
            - [(2) Twitter](#de93515e77c0ca100bbf92c83f82dc2a)
            - [(4) NoCategory](#6d36e9623aadaf40085ef5af89c8d698)
            - [(11) Github](#8d1ae776898748b8249132e822f6c919)
        - [(55) DNS](#a695111d8e30d645354c414cb27b7843)
        - [(33) Shodan](#18c7c1df2e6ae5e9135dfa2e4eb1d4db)
        - [(119) nmap](#94c01f488096fafc194b9a07f065594c)
    - [Database&&SQLAttack&&SQLInjection](#969212c047f97652ceb9c789e4d8dae5)
        - [(5) NoCategory](#e8d5cfc417b84fa90eff2e02c3231ed1)
        - [SQL](#3157bf5ee97c32454d99fd4a9fa3f04a)
            - [(6) SQLInjection](#0519846509746aa50a04abd3ccf2f1d5)
            - [(41) NoCategory](#1cfe1b2a2c88cd92a414f81605c8d8e7)
            - [(2) SQLVul](#5a7451cdff13bc6709da7c943dda967f)
        - [NoSQL](#ca6f4bd198f3712db7f24383e8544dfd)
            - [(2) NoCategory](#af0aaaf233cdff3a88d04556dc5871e0)
            - [(11) MongoDB](#54d36c89712652a7064db6179faa7e8c)
    - [Audit&&SecurityAudit&&CodeAudit](#df8a5514775570707cce56bb36ca32c8)
        - [(15) NoCategory](#6a5e7dd060e57d9fdb3fed8635d61bc7)
        - [(53) CodeAudit](#34569a6fdce10845eae5fbb029cd8dfa)
    - [SET&&Phishing&&SpearPhishing](#546f4fe70faa2236c0fbc2d486a83391)
        - [(11) NoCategory](#ce734598055ad3885d45d0b35d2bf0d7)
        - [(2) SET](#f30507893511f89b19934e082a54023e)
        - [(137) Phish](#290e9ae48108d21d6d8b9ea9e74d077d)
        - [SpearPhishing](#ab3e6e6526d058e35c7091d8801ebf3a)
    - [Hardware&&USB&&RaspberryPi](#04102345243a4bcaec83f703afff6cb3)
        - [(12) NoCategory](#ff462a6d508ef20aa41052b1cc8ad044)
        - [(57) USB](#48c53d1304b1335d9addf45b959b7d8a)
        - [(62) RaspberryPi](#77c39a0ad266ad42ab8157ba4b3d874a)
        - [(11) Car&&Vehicle](#da75af123f2f0f85a4c8ecc08a8aa848)
    - [EvnSetup&&Env](#dc89c90b80529c1f62f413288bca89c4)
        - [(10) NoCategory](#f5a7a43f964b2c50825f3e2fee5078c8)
        - [(5) Linux-Distro](#cf07b04dd2db1deedcf9ea18c05c83e0)
        - [(3) EnvAutoSetup](#4709b10a8bb691204c0564a3067a0004)
    - [VulnerableMachine](#761a373e2ec1c58c9cd205cd7a03e8a8)
        - [(107) NoCategory](#3e751670de79d2649ba62b177bd3e4ef)
        - [(12) WebApp](#a6a2bb02c730fc1e1f88129d4c2b3d2e)
        - [(4) Generate](#60b4d03a0cff6efc4b9b998a4a1a79d6)
        - [(2) Collection](#383ad9174d3f7399660d36cd6e0b2c00)
        - [(5) MobileApp](#aa60e957e4da03301643a7abe4c1938a)
    - [Network&&Sniff&&Mitm](#79499aeece9a2a9f64af6f61ee18cbea)
        - [(152) NoCategory](#99398a5a8aaf99228829dadff48fb6a7)
        - [(135) MITM](#11c73d3e2f71f3914a3bca35ba90de36)
        - [(7) PacketSniff&&Monitor](#c09843b4d4190dea0bf9773f8114300a)
        - [(9) pcap](#dde87061175108fc66b00ef665b1e7d0)
        - [Hijack&&TCP/HTTP](#1692d675f0fc7d190e0a33315f4abae8)
        - [(1) ProtocolAnalyze&&PacketAnalyze](#3c28b67524f117ed555daed9cc99e35e)
    - [Password&&Credential](#c49aef477cf3397f97f8b72185c3d100)
        - [(47) NoCategory](#20bf2e2fefd6de7aadbf0774f4921824)
        - [(43) Password](#86dc226ae8a71db10e4136f4b82ccd06)
    - [(3) Ancient](#d5e869a870d6e2c14911de2bc527a6ef)
    - [(2) Windows](#983f763457e9599b885b13ea49682130)
    - [webshell](#bad06ceb38098c26b1b8b46104f98d25)
        - [(4) Collection](#e08366dcf7aa021c6973d9e2a8944dff)
        - [(65) NoCategory](#faa91844951d2c29b7b571c6e8a3eb54)
    - [Other](#43b0310ac54c147a62c545a2b0f4bce2)
        - [(11) NoCategory](#569887799ee0148230cc5d7bf98e96d0)
        - [(5) TLS&&SSL&&HTTPS](#86d5daccb4ed597e85a0ec9c87f3c66f)
    - [IncidentResponse&&Forensics](#e1fc1d87056438f82268742dc2ba08f5)
        - [(55) IncidentResponse](#d0f59814394c5823210aa04a8fcd1220)
        - [(124) Forensics](#1fc5d3621bb13d878f337c8031396484)
        - [(4) NoCategory](#65f1e9dc3e08dff9fcda9d2ee245764e)
        - [(28) Volatility](#4d2a33083a894d6e6ef01b360929f30a)
    - [Honeypot](#a2df15c7819a024c2f5c4a7489285597)
        - [(142) Honeypot](#d20acdc34ca7c084eb52ca1c14f71957)
        - [(1) Collection](#efde8c850d8d09e7c94aa65a1ab92acf)
        - [(13) SSH&&Telnet](#c8f749888134d57b5fb32382c78ef2d1)
        - [(41) NoCategory](#2af349669891f54649a577b357aa81a6)
        - [TCP&&UDP](#356be393f6fb9215c14799e5cd723fca)
        - [(1) HTTP&&Web](#577fc2158ab223b65442fb0fd4eb8c3e)
        - [(1) ActiveDirectory](#35c6098cbdc5202bf7f60979a76a5691)
        - [(1) SMTP](#7ac08f6ae5c88efe2cd5b47a4d391e7e)
        - [(1) 打印机](#8c58c819e0ba0442ae90d8555876d465)
        - [(1) Elasticsearch](#1a6b81fd9550736d681d6d0e99ae69e3)
        - [(1) ADB](#57356b67511a9dc7497b64b007047ee7)
        - [(15) Bluetooth ](#c5b6762b3dc783a11d72dea648755435)
        - [Other](#2a77601ce72f944679b8c5650d50148d)
            - [(2) Wordpress](#1d0819697e6bc533f564383d0b98b386)
    - [ThreatIntelligence](#f56806b5b229bdf6c118f5fb1092e141)
        - [(60) NoCategory](#8fd1f0cfde78168c88fc448af9c6f20f)
        - [(2) Collection](#91dc39dc492ee8ef573e1199117bc191)
        - [IOC](#3e10f389acfbd56b79f52ab4765e11bf)
            - [(15) NoCategory](#c94be209c558a65c5e281a36667fc27a)
            - [(2) Collection](#20a019435f1c5cc75e574294c01f3fee)
            - [(3) IOCExtract](#1b1aa1dfcff3054bc20674230ee52cfe)
            - [(27) IOCCrawl](#9bcb156b2e3b7800c42d5461c0062c02)
    - [Defense](#946d766c6a0fb23b480ff59d4029ec71)
        - [(41) WAF](#784ea32a3f4edde1cd424b58b17e7269)
        - [(33) FireWall](#ce6532938f729d4c9d66a5c75d1676d3)
        - [(37) IDS&&IPS](#ff3e0b52a1477704b5f6a94ccf784b9a)
        - [(8) NoCategory](#7a277f8b0e75533e0b50d93c902fb351)
    - [(1) Spdier](#785ad72c95e857273dce41842f5e8873)
    - [wordlist](#609214b7c4d2f9bb574e2099313533a2)
        - [(20) NoCategory](#af1d71122d601229dc4aa9d08f4e3e15)
        - [(2) Collection](#3202d8212db5699ea5e6021833bf3fa2)
        - [(2) WordlistGenerate](#f2c76d99a0b1fda124d210bd1bbc8f3f)
    - [(2) Breach&&Leak](#96171a80e158b8752595329dd42e8bcf)
    - [(172) Crack&&BruteForce](#de81f9dd79c219c876c1313cd97852ce)
    - [(30) OSCP](#13d067316e9894cc40fe55178ee40f24)
    - [(23) MitreATT&CK](#249c9d207ed6743e412c8c8bcd8a2927)
    - [(21) Browser](#76df273beb09f6732b37a6420649179c)
    - [(3) Bluetooth](#ceb90405292daed9bb32ac20836c219a)
    - [(3) REST_API&&RESTFUL ](#7d5d2d22121ed8456f0c79098f5012bb)
    - [(12) Malware&&APT](#8cb1c42a29fa3e8825a0f8fca780c481)


# <a id="94ca60d12e210fdd7fd9e387339b293e"></a>Tools


***


## <a id="9eee96404f868f372a6cbc6769ccb7f8"></a>RecentAdded


### <a id="31185b925d5152c7469b963809ceb22d"></a>RecentAdded


- [**3527**Star][2m] [PowerShell] [bloodhoundad/bloodhound](https://github.com/BloodHoundAD/BloodHound) Six Degrees of Domain Admin
- [**1992**Star][2m] [C++] [darthton/blackbone](https://github.com/darthton/blackbone) Windows memory hacking library
- [**1879**Star][19d] [C] [chipsec/chipsec](https://github.com/chipsec/chipsec) Platform Security Assessment Framework
- [**1859**Star][1y] [C++] [y-vladimir/smartdeblur](https://github.com/y-vladimir/smartdeblur) Restoration of defocused and blurred photos/images
- [**1773**Star][5m] [Py] [veil-framework/veil](https://github.com/veil-framework/veil) Veil 3.1.X (Check version info in Veil at runtime)
- [**1560**Star][1m] [Shell] [internetwache/gittools](https://github.com/internetwache/gittools) A repository with 3 tools for pwn'ing websites with .git repositories available
- [**1400**Star][4m] [C] [ettercap/ettercap](https://github.com/ettercap/ettercap) Ettercap Project
- [**1384**Star][1y] [Go] [filosottile/whosthere](https://github.com/filosottile/whosthere) A ssh server that knows who you are. $ ssh whoami.filippo.io
- [**1339**Star][20d] [XSLT] [lolbas-project/lolbas](https://github.com/lolbas-project/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
- [**1328**Star][12m] [XSLT] [api0cradle/lolbas](https://github.com/api0cradle/lolbas) Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
- [**1314**Star][1y] [mortenoir1/virtualbox_e1000_0day](https://github.com/mortenoir1/virtualbox_e1000_0day) VirtualBox E1000 Guest-to-Host Escape
- [**1298**Star][2m] [PowerShell] [peewpw/invoke-psimage](https://github.com/peewpw/invoke-psimage) Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
- [**1272**Star][1y] [JS] [sakurity/securelogin](https://github.com/sakurity/securelogin) This version won't be maintained!
- [**1218**Star][1y] [Go] [cloudflare/redoctober](https://github.com/cloudflare/redoctober) Go server for two-man rule style file encryption and decryption.
- [**1209**Star][1m] [Go] [google/martian](https://github.com/google/martian) Martian is a library for building custom HTTP/S proxies
- [**1136**Star][3m] [C] [dgiese/dustcloud](https://github.com/dgiese/dustcloud) Xiaomi Smart Home Device Reverse Engineering and Hacking
- [**1128**Star][2m] [HTML] [cure53/httpleaks](https://github.com/cure53/httpleaks) HTTPLeaks - All possible ways, a website can leak HTTP requests
- [**1105**Star][2m] [Py] [thoughtfuldev/eagleeye](https://github.com/thoughtfuldev/eagleeye) Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
- [**1073**Star][14d] [Go] [looterz/grimd](https://github.com/looterz/grimd) 
- [**1052**Star][1m] [PHP] [nbs-system/php-malware-finder](https://github.com/nbs-system/php-malware-finder) Detect potentially malicious PHP files
- [**1023**Star][13d] [Py] [yelp/detect-secrets](https://github.com/yelp/detect-secrets) An enterprise friendly way of detecting and preventing secrets in code.
- [**967**Star][25d] [HTML] [n0tr00t/sreg](https://github.com/n0tr00t/sreg) Sreg可对使用者通过输入email、phone、username的返回用户注册的所有互联网护照信息。
- [**923**Star][7m] [Py] [osirislab/hack-night](https://github.com/osirislab/Hack-Night) Hack Night is an open weekly training session run by the OSIRIS lab.
- [**904**Star][26d] [Ruby] [david942j/one_gadget](https://github.com/david942j/one_gadget) The best tool for finding one gadget RCE in libc.so.6
- [**903**Star][12m] [C++] [miek/inspectrum](https://github.com/miek/inspectrum) Offline radio signal analyser
- [**902**Star][3m] [Go] [dominicbreuker/pspy](https://github.com/dominicbreuker/pspy) Monitor linux processes without root permissions
- [**894**Star][25d] [C] [arm-software/arm-trusted-firmware](https://github.com/arm-software/arm-trusted-firmware) Read-only mirror of Trusted Firmware-A
- [**885**Star][1m] [C#] [google/sandbox-attacksurface-analysis-tools](https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools) Set of tools to analyze and attack Windows sandboxes.
- [**874**Star][4m] [JS] [dpnishant/appmon](https://github.com/dpnishant/appmon) Documentation:
- [**873**Star][4m] [bugcrowd/bugcrowd_university](https://github.com/bugcrowd/bugcrowd_university) Open source education content for the researcher community
- [**852**Star][20d] [Py] [shmilylty/oneforall](https://github.com/shmilylty/oneforall) OneForAll是一款功能强大的子域收集工具
- [**850**Star][3m] [CSS] [outflanknl/redelk](https://github.com/outflanknl/redelk) Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
- [**838**Star][13d] [Py] [circl/ail-framework](https://github.com/circl/ail-framework) AIL framework - Analysis Information Leak framework
- [**835**Star][13d] [Roff] [slimm609/checksec.sh](https://github.com/slimm609/checksec.sh) Checksec.sh
- [**832**Star][7m] [JS] [serpicoproject/serpico](https://github.com/serpicoproject/serpico) SimplE RePort wrIting and COllaboration tool
- [**819**Star][10m] [Shell] [thelinuxchoice/userrecon](https://github.com/thelinuxchoice/userrecon) Find usernames across over 75 social networks
- [**818**Star][21d] [C#] [borntoberoot/networkmanager](https://github.com/borntoberoot/networkmanager) A powerful tool for managing networks and troubleshoot network problems!
- [**814**Star][9m] [Py] [ietf-wg-acme/acme](https://github.com/ietf-wg-acme/acme) A protocol for automating certificate issuance
- [**814**Star][16d] [Py] [lylemi/learn-web-hacking](https://github.com/lylemi/learn-web-hacking) Study Notes For Web Hacking / Web安全学习笔记
- [**812**Star][14d] [Java] [lamster2018/easyprotector](https://github.com/lamster2018/easyprotector) 一行代码检测XP/调试/多开/模拟器/root
- [**807**Star][8m] [Py] [nccgroup/featherduster](https://github.com/nccgroup/featherduster) An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
- [**802**Star][6m] [Py] [corelan/mona](https://github.com/corelan/mona) Corelan Repository for mona.py
- [**797**Star][2m] [JS] [sindresorhus/is-online](https://github.com/sindresorhus/is-online) Check if the internet connection is up
- [**793**Star][1m] [Py] [hellman/xortool](https://github.com/hellman/xortool) A tool to analyze multi-byte xor cipher
- [**769**Star][1m] [Go] [dreddsa5dies/gohacktools](https://github.com/dreddsa5dies/gohacktools) Hacker tools on Go (Golang)
- [**765**Star][12m] [PowerShell] [kevin-robertson/invoke-thehash](https://github.com/kevin-robertson/invoke-thehash) PowerShell Pass The Hash Utils
- [**761**Star][24d] [C++] [shekyan/slowhttptest](https://github.com/shekyan/slowhttptest) Application Layer DoS attack simulator
- [**757**Star][9m] [Py] [hlldz/spookflare](https://github.com/hlldz/spookflare) Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
- [**757**Star][4m] [TSQL] [threathunterx/nebula](https://github.com/threathunterx/nebula) "星云"业务风控系统，主工程
- [**746**Star][1y] [Py] [greatsct/greatsct](https://github.com/greatsct/greatsct) The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.
- [**745**Star][1m] [Go] [bishopfox/sliver](https://github.com/bishopfox/sliver) Implant framework
- [**739**Star][1m] [PHP] [symfony/security-csrf](https://github.com/symfony/security-csrf) The Security CSRF (cross-site request forgery) component provides a class CsrfTokenManager for generating and validating CSRF tokens.
- [**738**Star][2m] [C++] [snort3/snort3](https://github.com/snort3/snort3) Snort++
- [**735**Star][7m] [Py] [ricterz/genpass](https://github.com/ricterz/genpass) 中国特色的弱口令生成器
- [**734**Star][5m] [Go] [talkingdata/owl](https://github.com/talkingdata/owl) distributed monitoring system
- [**731**Star][1m] [HTML] [m4cs/babysploit](https://github.com/m4cs/babysploit) 
- [**729**Star][1y] [C#] [eladshamir/internal-monologue](https://github.com/eladshamir/internal-monologue) Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
- [**719**Star][5m] [Go] [anshumanbh/git-all-secrets](https://github.com/anshumanbh/git-all-secrets) A tool to capture all the git secrets by leveraging multiple open source git searching tools
- [**711**Star][3m] [Py] [f-secure/see](https://github.com/f-secure/see) Sandboxed Execution Environment
- [**709**Star][24d] [Py] [globaleaks/globaleaks](https://github.com/globaleaks/globaleaks) GlobaLeaks - The Open-Source Whistleblowing Software
- [**708**Star][5m] [Py] [adamlaurie/rfidiot](https://github.com/adamlaurie/rfidiot) python RFID / NFC library & tools
- [**707**Star][1m] [Perl] [gouveaheitor/nipe](https://github.com/GouveaHeitor/nipe) Nipe is a script to make Tor Network your default gateway.
- [**706**Star][4m] [aleenzz/cobalt_strike_wiki](https://github.com/aleenzz/cobalt_strike_wiki) Cobalt Strike系列
- [**706**Star][1y] [C#] [p3nt4/powershdll](https://github.com/p3nt4/powershdll) Run PowerShell with rundll32. Bypass software restrictions.
- [**706**Star][1m] [Py] [shawndevans/smbmap](https://github.com/shawndevans/smbmap) SMBMap is a handy SMB enumeration tool
- [**698**Star][13d] [C] [iaik/zombieload](https://github.com/iaik/zombieload) Proof-of-concept for the ZombieLoad attack
- [**692**Star][3m] [netflix/security-bulletins](https://github.com/netflix/security-bulletins) Security Bulletins that relate to Netflix Open Source
- [**687**Star][5m] [C++] [google/certificate-transparency](https://github.com/google/certificate-transparency) Auditing for TLS certificates.
- [**687**Star][7m] [C] [hfiref0x/tdl](https://github.com/hfiref0x/tdl) Driver loader for bypassing Windows x64 Driver Signature Enforcement
- [**684**Star][2m] [Py] [mjg59/python-broadlink](https://github.com/mjg59/python-broadlink) Python module for controlling Broadlink RM2/3 (Pro) remote controls, A1 sensor platforms and SP2/3 smartplugs
- [**684**Star][25d] [streaak/keyhacks](https://github.com/streaak/keyhacks) Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
- [**682**Star][12d] [Java] [peergos/peergos](https://github.com/peergos/peergos) A decentralised, secure file storage and social network
- [**673**Star][7m] [Py] [mr-un1k0d3r/powerlessshell](https://github.com/mr-un1k0d3r/powerlessshell) Run PowerShell command without invoking powershell.exe
- [**665**Star][1y] [Py] [endgameinc/rta](https://github.com/endgameinc/rta) 
- [**665**Star][12m] [PowerShell] [arvanaghi/sessiongopher](https://github.com/Arvanaghi/SessionGopher) SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.
- [**664**Star][2m] [Py] [skelsec/pypykatz](https://github.com/skelsec/pypykatz) Mimikatz implementation in pure Python
- [**662**Star][2m] [Go] [pquerna/otp](https://github.com/pquerna/otp) TOTP library for Go
- [**658**Star][5m] [Py] [golismero/golismero](https://github.com/golismero/golismero) GoLismero - The Web Knife
- [**654**Star][1y] [Py] [deepzec/bad-pdf](https://github.com/deepzec/bad-pdf) Steal Net-NTLM Hash using Bad-PDF
- [**651**Star][4m] [C#] [outflanknl/evilclippy](https://github.com/outflanknl/evilclippy) A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
- [**650**Star][12d] [ptresearch/attackdetection](https://github.com/ptresearch/attackdetection) Attack Detection
- [**647**Star][8m] [C] [samdenty/wi-pwn](https://github.com/samdenty/Wi-PWN) ESP8266 Deauther ​with a material design WebUI
- [**642**Star][11m] [C#] [wwillv/godofhacker](https://github.com/wwillv/godofhacker) 黑客神器
- [**637**Star][3m] [C#] [ghostpack/rubeus](https://github.com/ghostpack/rubeus) Trying to tame the three-headed dog.
- [**631**Star][2m] [Py] [gquere/pwn_jenkins](https://github.com/gquere/pwn_jenkins) Notes about attacking Jenkins servers
- [**628**Star][5m] [PHP] [l3m0n/bypass_disable_functions_shell](https://github.com/l3m0n/bypass_disable_functions_shell) 一个各种方式突破Disable_functions达到命令执行的shell
- [**615**Star][10m] [Py] [dirkjanm/privexchange](https://github.com/dirkjanm/privexchange) Exchange your privileges for Domain Admin privs by abusing Exchange
- [**606**Star][1y] [Shell] [wireghoul/htshells](https://github.com/wireghoul/htshells) Self contained htaccess shells and attacks
- [**602**Star][2m] [JS] [evilsocket/arc](https://github.com/evilsocket/arc) A manager for your secrets.
- [**592**Star][2m] [PHP] [hongrisec/php-audit-labs](https://github.com/hongrisec/php-audit-labs) 一个关于PHP的代码审计项目
- [**592**Star][1m] [PowerShell] [ramblingcookiemonster/powershell](https://github.com/ramblingcookiemonster/powershell) Various PowerShell functions and scripts
- [**589**Star][3m] [Py] [webrecorder/pywb](https://github.com/webrecorder/pywb) Core Python Web Archiving Toolkit for replay and recording of web archives
- [**584**Star][16d] [YARA] [didierstevens/didierstevenssuite](https://github.com/didierstevens/didierstevenssuite) Please no pull requests for this repository. Thanks!
- [**575**Star][8m] [C#] [0xbadjuju/tokenvator](https://github.com/0xbadjuju/tokenvator) A tool to elevate privilege with Windows Tokens
- [**575**Star][9m] [Py] [romanz/amodem](https://github.com/romanz/amodem) Audio MODEM Communication Library in Python
- [**574**Star][8m] [C] [mrexodia/titanhide](https://github.com/mrexodia/titanhide) Hiding kernel-driver for x86/x64.
- [**567**Star][1y] [C#] [tyranid/dotnettojscript](https://github.com/tyranid/dotnettojscript) A tool to create a JScript file which loads a .NET v2 assembly from memory.
- [**561**Star][1y] [Solidity] [trailofbits/not-so-smart-contracts](https://github.com/crytic/not-so-smart-contracts) Examples of Solidity security issues
- [**558**Star][5m] [Py] [nidem/kerberoast](https://github.com/nidem/kerberoast)  a series of tools for attacking MS Kerberos implementations
- [**550**Star][10m] [C] [justinsteven/dostackbufferoverflowgood](https://github.com/justinsteven/dostackbufferoverflowgood) 
- [**545**Star][1y] [Go] [cw1997/natbypass](https://github.com/cw1997/natbypass) 一款lcx在golang下的实现
- [**545**Star][3m] [Py] [its-a-feature/apfell](https://github.com/its-a-feature/apfell) A collaborative, multi-platform, red teaming framework
- [**543**Star][1m] [Go] [shopify/kubeaudit](https://github.com/shopify/kubeaudit) kubeaudit helps you audit your Kubernetes clusters against common security controls
- [**536**Star][8m] [C] [hfiref0x/upgdsed](https://github.com/hfiref0x/upgdsed) Universal PatchGuard and Driver Signature Enforcement Disable
- [**536**Star][2m] [C] [vanhauser-thc/thc-ipv6](https://github.com/vanhauser-thc/thc-ipv6) IPv6 attack toolkit
- [**533**Star][1m] [Go] [yggdrasil-network/yggdrasil-go](https://github.com/yggdrasil-network/yggdrasil-go) An experiment in scalable routing as an encrypted IPv6 overlay network
- [**530**Star][5m] [HCL] [coalfire-research/red-baron](https://github.com/coalfire-research/red-baron) Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.
- [**530**Star][2m] [C] [eliasoenal/multimon-ng](https://github.com/EliasOenal/multimon-ng) 
- [**526**Star][28d] [Ruby] [hdm/mac-ages](https://github.com/hdm/mac-ages) MAC address age tracking
- [**524**Star][1y] [Py] [n00py/wpforce](https://github.com/n00py/wpforce) Wordpress Attack Suite
- [**523**Star][1y] [C#] [ghostpack/safetykatz](https://github.com/ghostpack/safetykatz) SafetyKatz is a combination of slightly modified version of
- [**515**Star][11m] [PowerShell] [a-min3/winspect](https://github.com/a-min3/winspect) Powershell-based Windows Security Auditing Toolbox
- [**513**Star][1m] [Shell] [trailofbits/twa](https://github.com/trailofbits/twa) A tiny web auditor with strong opinions.
- [**509**Star][11m] [Go] [mthbernardes/gtrs](https://github.com/mthbernardes/gtrs) GTRS - Google Translator Reverse Shell
- [**507**Star][1m] [JS] [mr-un1k0d3r/thundershell](https://github.com/mr-un1k0d3r/thundershell) Python / C# Unmanaged PowerShell based RAT
- [**505**Star][7m] [Visual Basic] [mr-un1k0d3r/maliciousmacrogenerator](https://github.com/mr-un1k0d3r/maliciousmacrogenerator) Malicious Macro Generator
- [**501**Star][24d] [Go] [sensepost/gowitness](https://github.com/sensepost/gowitness) Go 语言编写的网站快照工具
- [**489**Star][2m] [PHP] [nzedb/nzedb](https://github.com/nzedb/nzedb) nZEDb - a fork of nnplus(2011) | NNTP / Usenet / Newsgroup indexer.
- [**485**Star][2m] [Go] [gen2brain/cam2ip](https://github.com/gen2brain/cam2ip) Turn any webcam into an IP camera
- [**480**Star][1y] [Java] [continuumsecurity/bdd-security](https://github.com/continuumsecurity/bdd-security) BDD Automated Security Tests for Web Applications
- [**479**Star][11m] [Go] [evanmiller/hecate](https://github.com/evanmiller/hecate) The Hex Editor From Hell
- [**475**Star][1m] [C] [m0nad/diamorphine](https://github.com/m0nad/diamorphine) LKM rootkit for Linux Kernels 2.6.x/3.x/4.x (x86 and x86_64)
- [**474**Star][10m] [Shell] [craigz28/firmwalker](https://github.com/craigz28/firmwalker) Script for searching the extracted firmware file system for goodies!
- [**474**Star][2m] [Go] [gorilla/csrf](https://github.com/gorilla/csrf) gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services
- [**468**Star][2m] [Py] [bashfuscator/bashfuscator](https://github.com/bashfuscator/bashfuscator) A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
- [**465**Star][18d] [Py] [aoii103/darknet_chinesetrading](https://github.com/aoii103/darknet_chinesetrading) 
- [**457**Star][21d] [LLVM] [jonathansalwan/tigress_protection](https://github.com/jonathansalwan/tigress_protection) Playing with the Tigress binary protection. Break some of its protections and solve some of its challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.
- [**456**Star][12m] [Py] [mehulj94/radium](https://github.com/mehulj94/Radium) Python keylogger with multiple features.
- [**454**Star][5m] [C] [phoenhex/files](https://github.com/phoenhex/files) 
- [**453**Star][27d] [Go] [gen0cide/gscript](https://github.com/gen0cide/gscript) framework to rapidly implement custom droppers for all three major operating systems
- [**449**Star][3m] [C++] [omerya/invisi-shell](https://github.com/omerya/invisi-shell) Hide your Powershell script in plain sight. Bypass all Powershell security features
- [**448**Star][2m] [Py] [bit4woo/teemo](https://github.com/bit4woo/teemo) A Domain Name & Email Address Collection Tool
- [**448**Star][2m] [PowerShell] [rvrsh3ll/misc-powershell-scripts](https://github.com/rvrsh3ll/misc-powershell-scripts) Random Tools
- [**445**Star][13d] [Shell] [wireghoul/graudit](https://github.com/wireghoul/graudit) grep rough audit - source code auditing tool
- [**444**Star][9m] [C] [martinmarinov/tempestsdr](https://github.com/martinmarinov/tempestsdr) Remote video eavesdropping using a software-defined radio platform
- [**443**Star][2m] [Py] [portantier/habu](https://github.com/portantier/habu) Hacking Toolkit
- [**443**Star][1y] [JS] [simonepri/upash](https://github.com/simonepri/upash) 
- [**437**Star][6m] [PHP] [flozz/p0wny-shell](https://github.com/flozz/p0wny-shell) Single-file PHP shell
- [**432**Star][1m] [PowerShell] [mr-un1k0d3r/redteampowershellscripts](https://github.com/mr-un1k0d3r/redteampowershellscripts) Various PowerShell scripts that may be useful during red team exercise
- [**428**Star][6m] [Pascal] [mojtabatajik/robber](https://github.com/mojtabatajik/robber) Robber is open source tool for finding executables prone to DLL hijacking
- [**426**Star][6m] [Py] [stamparm/fetch-some-proxies](https://github.com/stamparm/fetch-some-proxies) Simple Python script for fetching "some" (usable) proxies
- [**423**Star][28d] [Py] [super-l/superl-url](https://github.com/super-l/superl-url) 【公告：不提供技术支持服务，不接定制，有问题可发技术群】根据关键词，对搜索引擎内容检索结果的网址内容进行采集的一款轻量级软程序。 程序主要运用于安全渗透测试项目，以及批量评估各类CMS系统0DAY的影响程度，同时也是批量采集自己获取感兴趣的网站的一个小程序~~ 可自动从搜索引擎采集相关网站的真实地址与标题等信息，可保存为文件，自动去除重复URL。同时，也可以自定义忽略多条域名等。
- [**421**Star][10m] [Py] [d4vinci/cuteit](https://github.com/d4vinci/cuteit) IP obfuscator made to make a malicious ip a bit cuter
- [**408**Star][10m] [Py] [powerscript/katanaframework](https://github.com/powerscript/katanaframework) The New Hacking Framework
- [**404**Star][2m] [C++] [hoshimin/kernel-bridge](https://github.com/hoshimin/kernel-bridge) Windows kernel hacking framework, driver template, hypervisor and API written on C++
- [**401**Star][5m] [Py] [ytisf/pyexfil](https://github.com/ytisf/pyexfil) A Python Package for Data Exfiltration
- [**396**Star][2m] [HTML] [w3c/webappsec](https://github.com/w3c/webappsec) Web Application Security Working Group repo
- [**387**Star][1y] [C#] [squalr/squalr](https://github.com/squalr/squalr) Squalr Memory Editor - Game Hacking Tool Written in C#
- [**378**Star][1y] [JS] [empireproject/empire-gui](https://github.com/empireproject/empire-gui) Empire client application
- [**376**Star][1m] [JS] [nccgroup/tracy](https://github.com/nccgroup/tracy) A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.
- [**375**Star][13d] [C++] [simsong/bulk_extractor](https://github.com/simsong/bulk_extractor) This is the development tree. For downloads please see:
- [**375**Star][8m] [Java] [tiagorlampert/saint](https://github.com/tiagorlampert/saint) a Spyware Generator for Windows systems written in Java
- [**372**Star][8m] [Py] [k4m4/onioff](https://github.com/k4m4/onioff) onioff：url检测器，深度检测网页链接
- [**365**Star][1m] [C++] [crypto2011/idr](https://github.com/crypto2011/idr) Interactive Delphi Reconstructor
- [**362**Star][17d] [C#] [bloodhoundad/sharphound](https://github.com/bloodhoundad/sharphound) The BloodHound C# Ingestor
- [**361**Star][20d] [Py] [emtunc/slackpirate](https://github.com/emtunc/slackpirate) Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
- [**360**Star][26d] [Ruby] [david942j/seccomp-tools](https://github.com/david942j/seccomp-tools) Provide powerful tools for seccomp analysis
- [**360**Star][4m] [Shell] [trimstray/otseca](https://github.com/trimstray/otseca) Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.
- [**354**Star][2m] [Py] [fox-it/bloodhound.py](https://github.com/fox-it/bloodhound.py) A Python based ingestor for BloodHound
- [**351**Star][6m] [Py] [tidesec/tidefinger](https://github.com/tidesec/tidefinger) TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。
- [**350**Star][10m] [Py] [secynic/ipwhois](https://github.com/secynic/ipwhois) Retrieve and parse whois data for IPv4 and IPv6 addresses
- [**348**Star][2m] [Py] [lockgit/hacking](https://github.com/lockgit/hacking) hacking is a kind of spirit !
- [**342**Star][30d] [Ruby] [sunitparekh/data-anonymization](https://github.com/sunitparekh/data-anonymization) Want to use production data for testing, data-anonymization can help you.
- [**339**Star][1m] [C] [nccgroup/phantap](https://github.com/nccgroup/phantap) Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams
- [**338**Star][1y] [Ruby] [srcclr/commit-watcher](https://github.com/srcclr/commit-watcher) Find interesting and potentially hazardous commits in git projects
- [**336**Star][4m] [Perl] [keydet89/regripper2.8](https://github.com/keydet89/regripper2.8) RegRipper version 2.8
- [**331**Star][12m] [Assembly] [egebalci/amber](https://github.com/egebalci/amber) Reflective PE packer.
- [**328**Star][8m] [Py] [dirkjanm/ldapdomaindump](https://github.com/dirkjanm/ldapdomaindump) Active Directory information dumper via LDAP
- [**327**Star][28d] [PowerShell] [joelgmsec/autordpwn](https://github.com/joelgmsec/autordpwn) The Shadow Attack Framework
- [**327**Star][1y] [Py] [leapsecurity/inspy](https://github.com/leapsecurity/InSpy) A python based LinkedIn enumeration tool
- [**325**Star][10m] [C#] [ghostpack/sharpdump](https://github.com/ghostpack/sharpdump) SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.
- [**322**Star][1y] [Shell] [1n3/goohak](https://github.com/1n3/goohak) Automatically Launch Google Hacking Queries Against A Target Domain
- [**318**Star][22d] [Py] [codingo/interlace](https://github.com/codingo/interlace) Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
- [**317**Star][1y] [JS] [nccgroup/wssip](https://github.com/nccgroup/wssip) Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.
- [**316**Star][1m] [JS] [meituan-dianping/lyrebird](https://github.com/meituan-dianping/lyrebird) 基于拦截以及模拟HTTP/HTTPS网络请求的面向移动应用的插件化测试工作台
- [**316**Star][1y] [Java] [ysrc/liudao](https://github.com/ysrc/liudao) “六道”实时业务风控系统
- [**314**Star][1y] [Go] [benjojo/bgp-battleships](https://github.com/benjojo/bgp-battleships) Play battleships using BGP
- [**312**Star][2m] [Py] [circl/lookyloo](https://github.com/circl/lookyloo) Lookyloo is a web interface allowing to scrape a website and then displays a tree of domains calling each other.
- [**312**Star][11m] [crazywa1ker/darthsidious-chinese](https://github.com/crazywa1ker/darthsidious-chinese) DarthSidious 中文版
- [**311**Star][12d] [C] [vanhauser-thc/aflplusplus](https://github.com/vanhauser-thc/aflplusplus) afl++ is afl 2.56b with community patches, AFLfast power schedules, qemu 3.1 upgrade + laf-intel support, MOpt mutators, InsTrim instrumentation, unicorn_mode and a lot more!
- [**310**Star][5m] [YARA] [needmorecowbell/hamburglar](https://github.com/needmorecowbell/hamburglar) Hamburglar -- collect useful information from urls, directories, and files
- [**307**Star][1m] [Go] [wangyihang/platypus](https://github.com/wangyihang/platypus)  A modern multiple reverse shell sessions/clients manager via terminal written in go
- [**306**Star][3m] [PowerShell] [enigma0x3/misc-powershell-stuff](https://github.com/enigma0x3/misc-powershell-stuff) random powershell goodness
- [**304**Star][2m] [Py] [coalfire-research/slackor](https://github.com/coalfire-research/slackor) A Golang implant that uses Slack as a command and control server
- [**304**Star][6m] [C] [pmem/syscall_intercept](https://github.com/pmem/syscall_intercept) The system call intercepting library
- [**302**Star][7m] [C] [tomac/yersinia](https://github.com/tomac/yersinia) A framework for layer 2 attacks
- [**298**Star][26d] [Py] [salls/angrop](https://github.com/salls/angrop) a rop gadget finder and chain builder 
- [**298**Star][1m] [Py] [skylined/bugid](https://github.com/skylined/bugid) Detect, analyze and uniquely identify crashes in Windows applications
- [**296**Star][1y] [PowerShell] [onelogicalmyth/zeroday-powershell](https://github.com/onelogicalmyth/zeroday-powershell) A PowerShell example of the Windows zero day priv esc
- [**295**Star][6m] [HTML] [nccgroup/crosssitecontenthijacking](https://github.com/nccgroup/crosssitecontenthijacking) Content hijacking proof-of-concept using Flash, PDF and Silverlight
- [**295**Star][1y] [C++] [nevermoe/unity_metadata_loader](https://github.com/nevermoe/unity_metadata_loader)  load strings and method/class names in global-metadata.dat to IDA
- [**295**Star][1y] [JS] [xxxily/fiddler-plus](https://github.com/xxxily/fiddler-plus) 自定义的Fiddler规则，多环境切换、解决跨域开发、快速调试线上代码必备|高效调试分析利器
- [**294**Star][27d] [JS] [doyensec/electronegativity](https://github.com/doyensec/electronegativity) Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
- [**294**Star][13d] [C++] [squalr/squally](https://github.com/squalr/squally) 2D Platformer Game for Teaching Game Hacking - C++/cocos2d-x
- [**290**Star][3m] [Shell] [fdiskyou/zines](https://github.com/fdiskyou/zines) Mirror of my favourite hacking Zines for the lulz, nostalgy, and reference
- [**290**Star][1m] [C] [mboehme/aflfast](https://github.com/mboehme/aflfast) AFLFast (extends AFL with Power Schedules)
- [**288**Star][2m] [C] [9176324/shark](https://github.com/9176324/shark) Turn off PatchGuard in real time for win7 (7600) ~ win10 (18950).
- [**288**Star][3m] [Visual Basic] [itm4n/vba-runpe](https://github.com/itm4n/vba-runpe) A VBA implementation of the RunPE technique or how to bypass application whitelisting.
- [**286**Star][8m] [C] [gianlucaborello/libprocesshider](https://github.com/gianlucaborello/libprocesshider) Hide a process under Linux using the ld preloader (
- [**286**Star][1y] [Java] [webgoat/webgoat-legacy](https://github.com/webgoat/webgoat-legacy) Legacy WebGoat 6.0 - Deliberately insecure JavaEE application
- [**285**Star][3m] [Py] [apache/incubator-spot](https://github.com/apache/incubator-spot) Mirror of Apache Spot
- [**284**Star][6m] [C#] [matterpreter/offensivecsharp](https://github.com/matterpreter/offensivecsharp) Collection of Offensive C# Tooling
- [**279**Star][11m] [Py] [justicerage/ffm](https://github.com/justicerage/ffm) Freedom Fighting Mode: open source hacking harness
- [**278**Star][1m] [Go] [cruise-automation/fwanalyzer](https://github.com/cruise-automation/fwanalyzer) a tool to analyze filesystem images
- [**278**Star][3m] [Py] [joxeankoret/pyew](https://github.com/joxeankoret/pyew) Official repository for Pyew.
- [**277**Star][1y] [HTML] [google/p0tools](https://github.com/googleprojectzero/p0tools) Project Zero Docs and Tools
- [**277**Star][16d] [Shell] [trimstray/mkchain](https://github.com/trimstray/mkchain) Open source tool to help you build a valid SSL certificate chain.
- [**276**Star][4m] [geerlingguy/ansible-role-security](https://github.com/geerlingguy/ansible-role-security) Ansible Role - Security
- [**276**Star][2m] [Go] [mdsecactivebreach/o365-attack-toolkit](https://github.com/mdsecactivebreach/o365-attack-toolkit) A toolkit to attack Office365
- [**275**Star][4m] [Py] [opsdisk/pagodo](https://github.com/opsdisk/pagodo) pagodo (Passive Google Dork) - Automate Google Hacking Database scraping
- [**273**Star][3m] [PowerShell] [nullbind/powershellery](https://github.com/nullbind/powershellery) This repo contains Powershell scripts used for general hackery.
- [**272**Star][9m] [C++] [anhkgg/superdllhijack](https://github.com/anhkgg/superdllhijack) SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了
- [**272**Star][3m] [Py] [invernizzi/scapy-http](https://github.com/invernizzi/scapy-http) Support for HTTP in Scapy
- [**271**Star][3m] [artsploit/solr-injection](https://github.com/artsploit/solr-injection) Apache Solr Injection Research
- [**269**Star][6m] [Py] [ropnop/windapsearch](https://github.com/ropnop/windapsearch) Python script to enumerate users, groups and computers from a Windows domain through LDAP queries
- [**268**Star][4m] [Py] [den1al/jsshell](https://github.com/den1al/jsshell) An interactive multi-user web JS shell
- [**264**Star][7m] [s0md3v/mypapers](https://github.com/s0md3v/mypapers) Repository for hosting my research papers
- [**264**Star][7m] [Py] [s0md3v/breacher](https://github.com/s0md3v/Breacher) An advanced multithreaded admin panel finder written in python.
- [**263**Star][1y] [Ruby] [evait-security/envizon](https://github.com/evait-security/envizon) network visualization tool with focus on red / blue team requirements
- [**261**Star][2m] [Shell] [al0ne/linuxcheck](https://github.com/al0ne/linuxcheck) linux信息收集/应急响应/常见后门检测脚本
- [**260**Star][10m] [Py] [ant4g0nist/susanoo](https://github.com/ant4g0nist/susanoo) A REST API security testing framework.
- [**260**Star][5m] [C++] [d35ha/callobfuscator](https://github.com/d35ha/callobfuscator) Obfuscate specific windows apis with different apis
- [**260**Star][3m] [C] [portcullislabs/linikatz](https://github.com/portcullislabs/linikatz) linikatz is a tool to attack AD on UNIX
- [**259**Star][2m] [C] [eua/wxhexeditor](https://github.com/eua/wxhexeditor) wxHexEditor official GIT repo
- [**258**Star][25d] [Py] [frint0/email-enum](https://github.com/frint0/email-enum) Email-Enum searches mainstream websites and tells you if an email is registered!
- [**256**Star][1y] [PowerShell] [fox-it/invoke-aclpwn](https://github.com/fox-it/invoke-aclpwn) 
- [**256**Star][8m] [C] [landhb/hideprocess](https://github.com/landhb/hideprocess) A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
- [**256**Star][1y] [Py] [m4ll0k/galileo](https://github.com/m4ll0k/galileo) Galileo - Web Application Audit Framework
- [**256**Star][11m] [Py] [hysnsec/devsecops-studio](https://github.com/hysnsec/DevSecOps-Studio) DevSecOps Distribution - Virtual Environment to learn DevSecOps
- [**254**Star][1m] [Shell] [cytoscape/cytoscape](https://github.com/cytoscape/cytoscape) Cytoscape: an open source platform for network analysis and visualization
- [**254**Star][9m] [C] [p0f/p0f](https://github.com/p0f/p0f) p0f unofficial git repo
- [**253**Star][1y] [C] [benjamin-42/trident](https://github.com/benjamin-42/trident) 
- [**253**Star][1y] [Java] [jackofmosttrades/gadgetinspector](https://github.com/jackofmosttrades/gadgetinspector) A byte code analyzer for finding deserialization gadget chains in Java applications
- [**252**Star][2m] [C++] [poweradminllc/paexec](https://github.com/poweradminllc/paexec) Remote execution, like PsExec
- [**251**Star][6m] [Go] [lavalamp-/ipv666](https://github.com/lavalamp-/ipv666) Golang IPv6 address enumeration
- [**250**Star][14d] [C++] [fransbouma/injectablegenericcamerasystem](https://github.com/fransbouma/injectablegenericcamerasystem) This is a generic camera system to be used as the base for cameras for taking screenshots within games. The main purpose of the system is to hijack the in-game 3D camera by overwriting values in its camera structure with our own values so we can control where the camera is located, it's pitch/yaw/roll values, its FoV and the camera's look vector.
- [**250**Star][2m] [Py] [hacktoolspack/hack-tools](https://github.com/hacktoolspack/hack-tools) hack tools
- [**249**Star][6m] [Py] [itskindred/procspy](https://github.com/itskindred/procspy) Python tool that monitors and logs user-run commands on a Linux system for either offensive or defensive purposes..
- [**247**Star][14d] [Py] [rvrsh3ll/findfrontabledomains](https://github.com/rvrsh3ll/findfrontabledomains) Search for potential frontable domains
- [**246**Star][4m] [Py] [redteamoperations/pivotsuite](https://github.com/redteamoperations/pivotsuite) Network Pivoting Toolkit
- [**244**Star][7m] [ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet](https://github.com/ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet) WordPress Plugin Security Testing Cheat Sheet
- [**243**Star][9m] [Py] [wh0ale/src-experience](https://github.com/wh0ale/src-experience) 工欲善其事，必先利其器
- [**239**Star][7m] [Py] [openstack/syntribos](https://github.com/openstack/syntribos) Python API security testing tool from OpenStack Security Group
- [**236**Star][1y] [Py] [matthewclarkmay/geoip-attack-map](https://github.com/matthewclarkmay/geoip-attack-map) Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.
- [**236**Star][8m] [Py] [mazen160/bfac](https://github.com/mazen160/bfac) BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.
- [**234**Star][15d] [Py] [cisco-config-analysis-tool/ccat](https://github.com/cisco-config-analysis-tool/ccat) Cisco Config Analysis Tool
- [**234**Star][3m] [Rust] [hippolot/anevicon](https://github.com/Hippolot/anevicon) 
- [**233**Star][2m] [JS] [martinzhou2015/srcms](https://github.com/martinzhou2015/srcms) SRCMS企业应急响应与缺陷管理系统
- [**231**Star][11m] [xcsh/unity-game-hacking](https://github.com/xcsh/unity-game-hacking) A guide for hacking unity games
- [**230**Star][29d] [Py] [timlib/webxray](https://github.com/timlib/webxray) webxray is a tool for analyzing third-party content on webpages and identifying the companies which collect user data.
- [**226**Star][10m] [duoergun0729/2book](https://github.com/duoergun0729/2book) 《Web安全之深度学习实战》
- [**226**Star][7m] [Shell] [r00t-3xp10it/meterpreter_paranoid_mode-ssl](https://github.com/r00t-3xp10it/meterpreter_paranoid_mode-ssl) Meterpreter Paranoid Mode - SSL/TLS connections
- [**225**Star][1y] [Go] [netxfly/sec_check](https://github.com/netxfly/sec_check) Cross platform security detection tool
- [**224**Star][6m] [JS] [jesusprubio/strong-node](https://github.com/jesusprubio/strong-node) 
- [**222**Star][22d] [Py] [webbreacher/whatsmyname](https://github.com/webbreacher/whatsmyname) This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.
- [**221**Star][2m] [Py] [guimaizi/get_domain](https://github.com/guimaizi/get_domain) 域名收集与监测
- [**217**Star][6m] [bhdresh/dejavu](https://github.com/bhdresh/dejavu) DejaVU - Open Source Deception Framework
- [**215**Star][9m] [Py] [mckinsey666/vocabs](https://github.com/Mckinsey666/vocabs) A lightweight online dictionary integration to the command line
- [**213**Star][3m] [JS] [varchashva/letsmapyournetwork](https://github.com/varchashva/letsmapyournetwork) Lets Map Your Network enables you to visualise your physical network in form of graph with zero manual error
- [**212**Star][4m] [Shell] [cryptolok/crykex](https://github.com/cryptolok/crykex) Linux Memory Cryptographic Keys Extractor
- [**212**Star][1m] [Py] [wazuh/wazuh-ruleset](https://github.com/wazuh/wazuh-ruleset) Wazuh - Ruleset
- [**212**Star][8m] [JS] [zhuyingda/veneno](https://github.com/zhuyingda/veneno) 用Node.js编写的Web安全测试框架
- [**209**Star][1y] [basilfx/tradfri-hacking](https://github.com/basilfx/tradfri-hacking) Hacking the IKEA TRÅDFRI light bulbs and accessories.
- [**208**Star][5m] [C#] [erfg12/memory.dll](https://github.com/erfg12/memory.dll) C# Hacking library for making PC game trainers.
- [**208**Star][2m] [Py] [jordanpotti/cloudscraper](https://github.com/jordanpotti/cloudscraper) CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
- [**205**Star][4m] [PowerShell] [harmj0y/damp](https://github.com/harmj0y/damp) The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
- [**205**Star][12m] [Py] [orf/xcat](https://github.com/orf/xcat) Automate XPath injection attacks to retrieve documents
- [**205**Star][12m] [C#] [tevora-threat/sharpview](https://github.com/tevora-threat/sharpview) C# implementation of harmj0y's PowerView
- [**204**Star][8m] [1hack0/facebook-bug-bounty-write-ups](https://github.com/1hack0/facebook-bug-bounty-write-ups) Hunting Bugs for Fun and Profit
- [**203**Star][14d] [Py] [seahoh/gotox](https://github.com/seahoh/gotox) 本地自动代理，修改自 goagent。
- [**201**Star][12d] [CoffeeScript] [bevry/getmac](https://github.com/bevry/getmac) Get the mac address of the current machine you are on via Node.js
- [**201**Star][6m] [JS] [wingleung/save-page-state](https://github.com/wingleung/save-page-state) A chrome extension to save the state of a page for further analysis
- [**200**Star][1m] [Py] [nyxgeek/lyncsmash](https://github.com/nyxgeek/lyncsmash) locate and attack Lync/Skype for Business


### <a id="f34b4da04f2a77a185729b5af752efc5"></a>NoCategory






***


## <a id="cc80626cfd1f8411b968373eb73bc4ea"></a>AI&&MachineLearning&&DeepLearning&&NeturalNetwork


### <a id="19dd474da6b715024ff44d27484d528a"></a>NoCategory


- [**4216**Star][25d] [Py] [tensorflow/cleverhans](https://github.com/tensorflow/cleverhans) An adversarial example library for constructing attacks, building defenses, and benchmarking both
- [**3263**Star][18d] [jivoi/awesome-ml-for-cybersecurity](https://github.com/jivoi/awesome-ml-for-cybersecurity) 针对网络安全的机器学习资源列表
- [**2480**Star][15d] [Py] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) (⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
    - Also In Section: [Tools/Network&&Sniff&&Mitm/MITM](#11c73d3e2f71f3914a3bca35ba90de36) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Wireless&&WiFi&&AP&&802.11/NoCategory](#d4efda1853b2cb0909727188116a2a8c) |
- [**1049**Star][1m] [Py] [13o-bbr-bbq/machine_learning_security](https://github.com/13o-bbr-bbq/machine_learning_security) Source code about machine learning and security.
- [**569**Star][20d] [404notf0und/ai-for-security-learning](https://github.com/404notf0und/ai-for-security-learning) 安全场景、基于AI的安全算法和安全数据分析学习资料整理
- [**513**Star][21d] [Py] [gyoisamurai/gyoithon](https://github.com/gyoisamurai/gyoithon) GyoiThon is a growing penetration test tool using Machine Learning.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/AllInOne&&Framework](#2051fd9e171f2698d8e7486e3dd35d87) |
- [**445**Star][4m] [Py] [cchio/deep-pwning](https://github.com/cchio/deep-pwning) Metasploit for machine learning.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Metasploit/NoCategory](#01be61d5bb9f6f7199208ff0fba86b5d) |
- [**283**Star][1m] [Py] [bishopfox/eyeballer](https://github.com/bishopfox/eyeballer) Convolutional neural network for analyzing pentest screenshots
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/NoCategory](#2e40f2f1df5d7f93a7de47bf49c24a0e) |


### <a id="bab8f2640d6c5eb981003b3fd1ecc042"></a>Collection






***


## <a id="a4ee2f4d4a944b54b2246c72c037cd2e"></a>Collection


### <a id="e97d183e67fa3f530e7d0e7e8c33ee62"></a>NoCategory


- [**4097**Star][20d] [qazbnm456/awesome-web-security](https://github.com/qazbnm456/awesome-web-security) web 安全资源列表
- [**2778**Star][4m] [C] [juliocesarfort/public-pentesting-reports](https://github.com/juliocesarfort/public-pentesting-reports) Curated list of public penetration test reports released by several consulting firms and academic security groups
- [**2747**Star][2m] [infosecn1nja/red-teaming-toolkit](https://github.com/infosecn1nja/red-teaming-toolkit) A collection of open source and commercial tools that aid in red team operations.
- [**2592**Star][1m] [rmusser01/infosec_reference](https://github.com/rmusser01/infosec_reference) An Information Security Reference That Doesn't Suck
- [**2483**Star][2m] [kbandla/aptnotes](https://github.com/kbandla/aptnotes) Various public documents, whitepapers and articles about APT campaigns
- [**2353**Star][22d] [Py] [0xinfection/awesome-waf](https://github.com/0xinfection/awesome-waf) 
- [**2253**Star][11m] [yeyintminthuhtut/awesome-red-teaming](https://github.com/yeyintminthuhtut/awesome-red-teaming) List of Awesome Red Teaming Resources
- [**2058**Star][3m] [infoslack/awesome-web-hacking](https://github.com/infoslack/awesome-web-hacking) A list of web application security
- [**2024**Star][1y] [bluscreenofjeff/red-team-infrastructure-wiki](https://github.com/bluscreenofjeff/red-team-infrastructure-wiki) Wiki to collect Red Team infrastructure hardening resources
- [**2008**Star][1m] [tanprathan/mobileapp-pentest-cheatsheet](https://github.com/tanprathan/mobileapp-pentest-cheatsheet) The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
- [**1897**Star][2m] [toolswatch/blackhat-arsenal-tools](https://github.com/toolswatch/blackhat-arsenal-tools) Official Black Hat Arsenal Security Tools Repository
- [**1767**Star][1m] [djadmin/awesome-bug-bounty](https://github.com/djadmin/awesome-bug-bounty) A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
- [**1706**Star][4m] [ngalongc/bug-bounty-reference](https://github.com/ngalongc/bug-bounty-reference) Inspired by
- [**1698**Star][1y] [coreb1t/awesome-pentest-cheat-sheets](https://github.com/coreb1t/awesome-pentest-cheat-sheets) Collection of the cheat sheets useful for pentesting
- [**1602**Star][6m] [Py] [w1109790800/penetration](https://github.com/w1109790800/penetration) 渗透 超全面的渗透资料
- [**1587**Star][6m] [Ruby] [brunofacca/zen-rails-security-checklist](https://github.com/brunofacca/zen-rails-security-checklist) Checklist of security precautions for Ruby on Rails applications.
- [**1510**Star][24d] [emijrp/awesome-awesome](https://github.com/emijrp/awesome-awesome) A curated list of awesome curated lists of many topics.
- [**1340**Star][19d] [grrrdog/java-deserialization-cheat-sheet](https://github.com/grrrdog/java-deserialization-cheat-sheet) The cheat sheet about Java Deserialization vulnerabilities
- [**1170**Star][7m] [joe-shenouda/awesome-cyber-skills](https://github.com/joe-shenouda/awesome-cyber-skills) A curated list of hacking environments where you can train your cyber skills legally and safely
- [**1126**Star][2m] [Batchfile] [ckjbug/hacking](https://github.com/ckjbug/hacking) 
- [**1124**Star][2m] [m4ll0k/awesome-hacking-tools](https://github.com/m4ll0k/awesome-hacking-tools) Awesome Hacking Tools
- [**1095**Star][13d] [w00t3k/awesome-cellular-hacking](https://github.com/w00t3k/awesome-cellular-hacking) Awesome-Cellular-Hacking
- [**1095**Star][1y] [paulsec/awesome-windows-domain-hardening](https://github.com/PaulSec/awesome-windows-domain-hardening) A curated list of awesome Security Hardening techniques for Windows.
- [**1088**Star][4m] [zbetcheckin/security_list](https://github.com/zbetcheckin/security_list) Great security list for fun and profit
- [**994**Star][1y] [JS] [0xsobky/hackvault](https://github.com/0xsobky/hackvault) A container repository for my public web hacks!
- [**961**Star][4m] [Py] [jekil/awesome-hacking](https://github.com/jekil/awesome-hacking) Awesome hacking is an awesome collection of hacking tools.
- [**944**Star][7m] [0x4d31/awesome-threat-detection](https://github.com/0x4d31/awesome-threat-detection) A curated list of awesome threat detection and hunting resources
- [**940**Star][6m] [sundowndev/hacker-roadmap](https://github.com/sundowndev/hacker-roadmap) 
- [**908**Star][9m] [wtsxdev/penetration-testing](https://github.com/wtsxdev/penetration-testing) List of awesome penetration testing resources, tools and other shiny things
- [**905**Star][6m] [PowerShell] [api0cradle/ultimateapplockerbypasslist](https://github.com/api0cradle/ultimateapplockerbypasslist) The goal of this repository is to document the most common techniques to bypass AppLocker.
- [**899**Star][6m] [cn0xroot/rfsec-toolkit](https://github.com/cn0xroot/rfsec-toolkit) RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools.无线通信协议相关的工具集，可借助SDR硬件+相关工具对无线通信进行研究。Collect with ♥ by HackSmith
- [**894**Star][24d] [tom0li/collection-document](https://github.com/tom0li/collection-document) Collection of quality safety articles
- [**862**Star][5m] [Shell] [dominicbreuker/stego-toolkit](https://github.com/dominicbreuker/stego-toolkit) Collection of steganography tools - helps with CTF challenges
- [**848**Star][13d] [explife0011/awesome-windows-kernel-security-development](https://github.com/explife0011/awesome-windows-kernel-security-development) windows kernel security development
- [**803**Star][4m] [Shell] [danielmiessler/robotsdisallowed](https://github.com/danielmiessler/robotsdisallowed) A curated list of the most common and most interesting robots.txt disallowed directories.
- [**762**Star][10m] [v2-dev/awesome-social-engineering](https://github.com/v2-dev/awesome-social-engineering) A curated list of awesome social engineering resources.
- [**761**Star][1m] [daviddias/awesome-hacking-locations](https://github.com/daviddias/awesome-hacking-locations) 
- [**723**Star][1y] [Py] [averagesecurityguy/scripts](https://github.com/averagesecurityguy/scripts) Scripts I use during pentest engagements.
- [**709**Star][1y] [snifer/security-cheatsheets](https://github.com/snifer/security-cheatsheets) A collection of cheatsheets for various infosec tools and topics.
- [**696**Star][4m] [bit4woo/python_sec](https://github.com/bit4woo/python_sec) python安全和代码审计相关资料收集 resource collection of python security and code review
- [**685**Star][2m] [C#] [harleyqu1nn/aggressorscripts](https://github.com/harleyqu1nn/aggressorscripts) Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
- [**681**Star][1m] [andrewjkerr/security-cheatsheets](https://github.com/andrewjkerr/security-cheatsheets) 
- [**667**Star][8m] [XSLT] [adon90/pentest_compilation](https://github.com/adon90/pentest_compilation) Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
    - Also In Section: [Tools/OSCP](#13d067316e9894cc40fe55178ee40f24) |
- [**649**Star][1y] [dsasmblr/hacking-online-games](https://github.com/dsasmblr/hacking-online-games) A curated list of tutorials/resources for hacking online games.
- [**628**Star][9m] [webbreacher/offensiveinterview](https://github.com/webbreacher/offensiveinterview) Interview questions to screen offensive (red team/pentest) candidates
- [**627**Star][2m] [redhuntlabs/awesome-asset-discovery](https://github.com/redhuntlabs/awesome-asset-discovery) List of Awesome Asset Discovery Resources
- [**619**Star][3m] [3gstudent/pentest-and-development-tips](https://github.com/3gstudent/pentest-and-development-tips) A collection of pentest and development tips
- [**603**Star][2m] [Shell] [ashishb/osx-and-ios-security-awesome](https://github.com/ashishb/osx-and-ios-security-awesome) OSX and iOS related security tools
- [**589**Star][1y] [jiangsir404/audit-learning](https://github.com/jiangsir404/audit-learning) 记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获
- [**587**Star][11m] [pandazheng/ioshackstudy](https://github.com/pandazheng/ioshackstudy) IOS安全学习资料汇总
- [**575**Star][16d] [Py] [hslatman/awesome-industrial-control-system-security](https://github.com/hslatman/awesome-industrial-control-system-security) A curated list of resources related to Industrial Control System (ICS) security.
- [**552**Star][8m] [guardrailsio/awesome-python-security](https://github.com/guardrailsio/awesome-python-security) Awesome Python Security resources
- [**452**Star][8m] [gradiuscypher/infosec_getting_started](https://github.com/gradiuscypher/infosec_getting_started) A collection of resources/documentation/links/etc to help people learn about Infosec and break into the field.
- [**444**Star][7m] [jnusimba/miscsecnotes](https://github.com/jnusimba/miscsecnotes) some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building
- [**426**Star][1y] [meitar/awesome-lockpicking](https://github.com/meitar/awesome-lockpicking) awesome-lockpicking：有关锁、保险箱、钥匙的指南、工具及其他资源的列表
- [**404**Star][19d] [meitar/awesome-cybersecurity-blueteam](https://github.com/meitar/awesome-cybersecurity-blueteam) 
- [**398**Star][21d] [Py] [bl4de/security-tools](https://github.com/bl4de/security-tools) Collection of small security tools created mostly in Python. CTFs, pentests and so on
- [**394**Star][3m] [re4lity/hacking-with-golang](https://github.com/re4lity/hacking-with-golang) Golang安全资源合集
- [**390**Star][6m] [HTML] [gexos/hacking-tools-repository](https://github.com/gexos/hacking-tools-repository) A list of security/hacking tools that have been collected from the internet. Suggestions are welcomed.
- [**384**Star][1m] [husnainfareed/awesome-ethical-hacking-resources](https://github.com/husnainfareed/Awesome-Ethical-Hacking-Resources) 
- [**380**Star][1m] [dsopas/assessment-mindset](https://github.com/dsopas/assessment-mindset) Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.
- [**350**Star][16d] [fkromer/awesome-ros2](https://github.com/fkromer/awesome-ros2) The Robot Operating System Version 2.0 is awesome!
- [**331**Star][1m] [softwareunderground/awesome-open-geoscience](https://github.com/softwareunderground/awesome-open-geoscience) Curated from repositories that make our lives as geoscientists, hackers and data wranglers easier or just more awesome
- [**328**Star][27d] [PowerShell] [mgeeky/penetration-testing-tools](https://github.com/mgeeky/penetration-testing-tools) A collection of my Penetration Testing scripts, tools, cheatsheets collected over years, used during real-world assignments or collected from various good quality sources.
- [**308**Star][16d] [cryptax/confsec](https://github.com/cryptax/confsec) Security, hacking conferences (list)
- [**303**Star][4m] [trimstray/technical-whitepapers](https://github.com/trimstray/technical-whitepapers) Collection of IT whitepapers, presentations, pdfs; hacking, web app security, db, reverse engineering and more; EN/PL.
- [**299**Star][1m] [HTML] [eugenekolo/sec-tools](https://github.com/eugenekolo/sec-tools) A set of security related tools
- [**289**Star][1m] [hongrisec/web-security-attack](https://github.com/hongrisec/web-security-attack) Web安全相关内容
- [**265**Star][1y] [JS] [ropnop/serverless_toolkit](https://github.com/ropnop/serverless_toolkit) A collection of useful Serverless functions I use when pentesting
- [**260**Star][3m] [mattnotmax/cyber-chef-recipes](https://github.com/mattnotmax/cyber-chef-recipes) A list of cyber-chef recipes
- [**243**Star][4m] [zhaoweiho/web-sec-interview](https://github.com/zhaoweiho/web-sec-interview) Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路
- [**232**Star][21d] [pe3zx/my-infosec-awesome](https://github.com/pe3zx/my-infosec-awesome) My curated list of awesome links, resources and tools on infosec related topics
- [**224**Star][25d] [euphrat1ca/security_w1k1](https://github.com/euphrat1ca/security_w1k1) collect
- [**211**Star][5m] [guardrailsio/awesome-dotnet-security](https://github.com/guardrailsio/awesome-dotnet-security) Awesome .NET Security Resources
- [**207**Star][9m] [jeansgit/redteam](https://github.com/jeansgit/redteam) RedTeam资料收集整理
- [**205**Star][9m] [puresec/awesome-serverless-security](https://github.com/puresec/awesome-serverless-security) A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
- [**201**Star][1y] [faizann24/resources-for-learning-hacking](https://github.com/faizann24/resources-for-learning-hacking) All the resources I could find for learning Ethical Hacking and penetration testing.
- [**201**Star][1y] [sigp/solidity-security-blog](https://github.com/sigp/solidity-security-blog) Comprehensive list of known attack vectors and common anti-patterns


### <a id="664ff1dbdafefd7d856c88112948a65b"></a>Mixed


- [**24225**Star][15d] [trimstray/the-book-of-secret-knowledge](https://github.com/trimstray/the-book-of-secret-knowledge) A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
- [**10176**Star][17d] [enaqx/awesome-pentest](https://github.com/enaqx/awesome-pentest) A collection of awesome penetration testing resources, tools and other shiny things
- [**5384**Star][8m] [carpedm20/awesome-hacking](https://github.com/carpedm20/awesome-hacking) A curated list of awesome Hacking tutorials, tools and resources
- [**4994**Star][1m] [sbilly/awesome-security](https://github.com/sbilly/awesome-security) A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
- [**3116**Star][20d] [Rich Text Format] [the-art-of-hacking/h4cker](https://github.com/The-Art-of-Hacking/h4cker) This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.
- [**1710**Star][20d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Biggest Reference Bank - OSCP / PTP & PTX Cheatsheet
    - Also In Section: [Tools/OSCP](#13d067316e9894cc40fe55178ee40f24) |
- [**573**Star][5m] [d30sa1/rootkits-list-download](https://github.com/d30sa1/rootkits-list-download) This is the list of all rootkits found so far on github and other sites.
- [**551**Star][17d] [Perl] [bollwarm/sectoolset](https://github.com/bollwarm/sectoolset) The security tool(project) Set from github。github安全项目工具集合


### <a id="67acc04b20c99f87ee625b073330d8c2"></a>WithoutTools


- [**33516**Star][1y] [Py] [minimaxir/big-list-of-naughty-strings](https://github.com/minimaxir/big-list-of-naughty-strings) The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
- [**8929**Star][2m] [vitalysim/awesome-hacking-resources](https://github.com/vitalysim/awesome-hacking-resources) A collection of hacking / penetration testing resources to make you better!
- [**2935**Star][1m] [blacckhathaceekr/pentesting-bible](https://github.com/blacckhathaceekr/pentesting-bible) This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
- [**2660**Star][1m] [secwiki/sec-chart](https://github.com/secwiki/sec-chart) 安全思维导图集合
- [**2580**Star][1y] [HTML] [chybeta/web-security-learning](https://github.com/chybeta/web-security-learning) Web-Security-Learning
- [**2427**Star][1y] [onlurking/awesome-infosec](https://github.com/onlurking/awesome-infosec) A curated list of awesome infosec courses and training resources.
- [**2306**Star][10m] [hack-with-github/free-security-ebooks](https://github.com/hack-with-github/free-security-ebooks) Free Security and Hacking eBooks
- [**2054**Star][2m] [yeahhub/hacking-security-ebooks](https://github.com/yeahhub/hacking-security-ebooks) Top 100 Hacking & Security E-Books (Free Download)
- [**1917**Star][3m] [Py] [nixawk/pentest-wiki](https://github.com/nixawk/pentest-wiki) PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
- [**1434**Star][4m] [hmaverickadams/beginner-network-pentesting](https://github.com/hmaverickadams/beginner-network-pentesting) Notes for Beginner Network Pentesting Course


### <a id="24707dd322098f73c7e450d6b1eddf12"></a>CollectionOfCollection


- [**32197**Star][2m] [hack-with-github/awesome-hacking](https://github.com/hack-with-github/awesome-hacking) A collection of various awesome lists for hackers, pentesters and security researchers


### <a id="9101434a896f20263d09c25ace65f398"></a>Book&&Tutorial&&Courses


- [**10844**Star][1m] [CSS] [hacker0x01/hacker101](https://github.com/hacker0x01/hacker101) Hacker101
- [**3897**Star][3m] [PHP] [paragonie/awesome-appsec](https://github.com/paragonie/awesome-appsec) A curated list of resources for learning about application security


### <a id="8088e46fc533286d88b945f1d472bf57"></a>Note&&Tips&&Tricks&&Talk&&Conference


#### <a id="f57ccaab4279b60c17a03f90d96b815c"></a>NoCategory


- [**2786**Star][29d] [paulsec/awesome-sec-talks](https://github.com/paulsec/awesome-sec-talks) A collected list of awesome security talks
- [**671**Star][2m] [uknowsec/active-directory-pentest-notes](https://github.com/uknowsec/active-directory-pentest-notes) 个人域渗透学习笔记
- [**540**Star][9m] [PowerShell] [threatexpress/red-team-scripts](https://github.com/threatexpress/red-team-scripts) A collection of Red Team focused tools, scripts, and notes


#### <a id="0476f6b97e87176da0a0d7328f8747e7"></a>blog


- [**1231**Star][5m] [chalker/notes](https://github.com/chalker/notes) Some public notes






***


## <a id="06fccfcc4faa7da54d572c10ef29b42e"></a>Mobile


### <a id="4a64f5e8fdbd531a8c95d94b28c6c2c1"></a>NoCategory


- [**4885**Star][14d] [HTML] [owasp/owasp-mstg](https://github.com/owasp/owasp-mstg) The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
- [**4785**Star][13d] [JS] [mobsf/mobile-security-framework-mobsf](https://github.com/MobSF/Mobile-Security-Framework-MobSF) Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- [**1940**Star][20d] [Py] [sensepost/objection](https://github.com/sensepost/objection) objection： runtimemobile exploration
- [**1839**Star][6m] [Java] [fuzion24/justtrustme](https://github.com/fuzion24/justtrustme) An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
- [**604**Star][6m] [JS] [vincentcox/stacoan](https://github.com/vincentcox/stacoan) StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
    - Also In Section: [Tools/Audit&&SecurityAudit&&CodeAudit/NoCategory](#6a5e7dd060e57d9fdb3fed8635d61bc7) |
- [**529**Star][17d] [Shell] [owasp/owasp-masvs](https://github.com/owasp/owasp-masvs) The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security.
- [**370**Star][1y] [CSS] [nowsecure/secure-mobile-development](https://github.com/nowsecure/secure-mobile-development) A Collection of Secure Mobile Development Best Practices
- [**320**Star][5m] [Java] [datatheorem/trustkit-android](https://github.com/datatheorem/trustkit-android) Easy SSL pinning validation and reporting for Android.


### <a id="fe88ee8c0df10870b44c2dedcd86d3d3"></a>Android


- [**4221**Star][23d] [Shell] [ashishb/android-security-awesome](https://github.com/ashishb/android-security-awesome) A collection of android security related resources
- [**2294**Star][1y] [Java] [csploit/android](https://github.com/csploit/android) cSploit - The most complete and advanced IT security professional toolkit on Android.
- [**2089**Star][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) Tool to look for several security related Android application vulnerabilities
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/VulnerabilityScan&&BugHunting/VulnerabilityScan/NoCategory](#0ed7e90d216a8a5be1dafebaf9eaeb5d) |
- [**2033**Star][9m] [jermic/android-crack-tool](https://github.com/jermic/android-crack-tool) 
- [**1966**Star][7m] [Py] [fsecurelabs/drozer](https://github.com/FSecureLABS/drozer) The Leading Security Assessment Framework for Android.
- [**1414**Star][10m] [Java] [aslody/legend](https://github.com/aslody/legend) A framework for hook java methods.
- [**1393**Star][13d] [Java] [chrisk44/hijacker](https://github.com/chrisk44/hijacker) Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android
- [**1202**Star][26d] [Java] [find-sec-bugs/find-sec-bugs](https://github.com/find-sec-bugs/find-sec-bugs) The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
- [**1199**Star][2m] [Java] [javiersantos/piracychecker](https://github.com/javiersantos/piracychecker) An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.
- [**781**Star][2m] [sh4hin/androl4b](https://github.com/sh4hin/androl4b) A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
    - Also In Section: [Tools/EvnSetup&&Env/NoCategory](#f5a7a43f964b2c50825f3e2fee5078c8) |
- [**664**Star][17d] [doridori/android-security-reference](https://github.com/doridori/android-security-reference) A W.I.P Android Security Ref
- [**511**Star][3m] [JS] [wooyundota/droidsslunpinning](https://github.com/wooyundota/droidsslunpinning) Android certificate pinning disable tools
- [**462**Star][3m] [JS] [lyxhh/lxhtoolhttpdecrypt](https://github.com/lyxhh/lxhtoolhttpdecrypt) Simple Android/iOS protocol analysis and utilization tool
- [**383**Star][1y] [Py] [thehackingsage/hacktronian](https://github.com/thehackingsage/hacktronian) All in One Hacking Tool for Linux & Android
- [**372**Star][3m] [Java] [megatronking/netbare](https://github.com/megatronking/netbare) Net packets capture & injection library designed for Android
- [**358**Star][4m] [C] [the-cracker-technology/andrax-mobile-pentest](https://github.com/the-cracker-technology/andrax-mobile-pentest) ANDRAX The first and unique Penetration Testing platform for Android smartphones
- [**348**Star][4m] [Makefile] [crifan/android_app_security_crack](https://github.com/crifan/android_app_security_crack) 安卓应用的安全和破解
- [**341**Star][4m] [b3nac/android-reports-and-resources](https://github.com/b3nac/android-reports-and-resources) A big list of Android Hackerone disclosed reports and other resources.
- [**326**Star][14d] [TypeScript] [shroudedcode/apk-mitm](https://github.com/shroudedcode/apk-mitm) 
    - Also In Section: [Tools/Network&&Sniff&&Mitm/NoCategory](#99398a5a8aaf99228829dadff48fb6a7) |[Tools/Network&&Sniff&&Mitm/MITM](#11c73d3e2f71f3914a3bca35ba90de36) |
- [**248**Star][9m] [C] [chef-koch/android-vulnerabilities-overview](https://github.com/chef-koch/android-vulnerabilities-overview) An small overview of known Android vulnerabilities
- [**233**Star][1y] [Ruby] [hahwul/droid-hunter](https://github.com/hahwul/droid-hunter) Android application vulnerability analysis and Android pentest tool


### <a id="dbde77352aac39ee710d3150a921bcad"></a>iOS&&MacOS&&iPhone&&iPad&&iWatch


- [**5299**Star][5m] [C] [pwn20wndstuff/undecimus](https://github.com/pwn20wndstuff/undecimus) unc0ver jailbreak for iOS 11.0 - 12.4
- [**5097**Star][2m] [Py] [axi0mx/ipwndfu](https://github.com/axi0mx/ipwndfu) open-source jailbreaking tool for many iOS devices
- [**4143**Star][7m] [Objective-C] [alonemonkey/monkeydev](https://github.com/alonemonkey/monkeydev) CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.
- [**3411**Star][6m] [icodesign/potatso](https://github.com/icodesign/Potatso) Potatso is an iOS client that implements different proxies with the leverage of NetworkExtension framework in iOS 10+.
- [**3072**Star][9m] [JS] [jipegit/osxauditor](https://github.com/jipegit/osxauditor) OS X Auditor is a free Mac OS X computer forensics tool
- [**1685**Star][5m] [Py] [yelp/osxcollector](https://github.com/yelp/osxcollector) A forensic evidence collection & analysis toolkit for OS X
- [**1366**Star][6m] [Objective-C] [nabla-c0d3/ssl-kill-switch2](https://github.com/nabla-c0d3/ssl-kill-switch2) Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps
- [**1259**Star][5m] [JS] [feross/spoof](https://github.com/feross/spoof) Easily spoof your MAC address in macOS, Windows, & Linux!
- [**1218**Star][5m] [Vue] [chaitin/passionfruit](https://github.com/chaitin/passionfruit) [WIP] Crappy iOS app analyzer
- [**1214**Star][19d] [C] [datatheorem/trustkit](https://github.com/datatheorem/trustkit) Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
- [**1174**Star][29d] [YARA] [horsicq/detect-it-easy](https://github.com/horsicq/detect-it-easy) Program for determining types of files for Windows, Linux and MacOS.
- [**1121**Star][4m] [JS] [alonemonkey/frida-ios-dump](https://github.com/alonemonkey/frida-ios-dump) pull decrypted ipa from jailbreak device
- [**1094**Star][1y] [Objective-C] [neoneggplant/eggshell](https://github.com/neoneggplant/eggshell) iOS/macOS/Linux Remote Administration Tool
- [**969**Star][1y] [Py] [mwrlabs/needle](https://github.com/FSecureLABS/needle) The iOS Security Testing Framework
- [**898**Star][2m] [Objective-C] [ptoomey3/keychain-dumper](https://github.com/ptoomey3/keychain-dumper) A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
- [**577**Star][2m] [siguza/ios-resources](https://github.com/siguza/ios-resources) Useful resources for iOS hacking
- [**475**Star][1y] [Swift] [icepa/icepa](https://github.com/icepa/icepa) iOS system-wide VPN based Tor client
- [**385**Star][3m] [ansjdnakjdnajkd/ios](https://github.com/ansjdnakjdnajkd/ios) Most usable tools for iOS penetration testing
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/NoCategory](#2e40f2f1df5d7f93a7de47bf49c24a0e) |
- [**321**Star][30d] [Objective-C] [auth0/simplekeychain](https://github.com/auth0/simplekeychain) A Keychain helper for iOS to make it very simple to store/obtain values from iOS Keychain
- [**213**Star][10m] [AppleScript] [lifepillar/csvkeychain](https://github.com/lifepillar/csvkeychain) Import/export between Apple Keychain.app and plain CSV file.
- [**204**Star][7m] [C] [owasp/igoat](https://github.com/owasp/igoat) OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar




***


## <a id="c7f35432806520669b15a28161a4d26a"></a>CTF&&HTB


### <a id="c0fea206256a42e41fd5092cecf54d3e"></a>NoCategory


- [**952**Star][2m] [ctfs/resources](https://github.com/ctfs/resources) A general collection of information, tools, and tips regarding CTFs and similar security competitions
- [**744**Star][1m] [Py] [ashutosh1206/crypton](https://github.com/ashutosh1206/crypton) Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Authentication methods along with example challenges from CTFs
- [**634**Star][8m] [cryptogenic/exploit-writeups](https://github.com/cryptogenic/exploit-writeups) A collection where my current and future writeups for exploits/CTF will go
- [**474**Star][5m] [PHP] [wonderkun/ctf_web](https://github.com/wonderkun/ctf_web) a project aim to collect CTF web practices .
- [**472**Star][3m] [PHP] [susers/writeups](https://github.com/susers/writeups) 国内各大CTF赛题及writeup整理
- [**450**Star][8m] [Py] [christhecoolhut/zeratool](https://github.com/christhecoolhut/zeratool) Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
- [**410**Star][3m] [ctftraining/ctftraining](https://github.com/ctftraining/ctftraining) CTF Training 经典赛题复现环境
- [**307**Star][5m] [C] [sixstars/ctf](https://github.com/sixstars/ctf) A writeup summary for CTF competitions, problems.
- [**294**Star][28d] [HTML] [balsn/ctf_writeup](https://github.com/balsn/ctf_writeup) CTF writeups from Balsn
- [**290**Star][9m] [HTML] [s1gh/ctf-literature](https://github.com/s1gh/ctf-literature) Collection of free books, papers and articles related to CTF challenges.
- [**283**Star][10m] [Shell] [ctf-wiki/ctf-tools](https://github.com/ctf-wiki/ctf-tools) CTF 工具集合
- [**260**Star][5m] [CSS] [l4wio/ctf-challenges-by-me](https://github.com/l4wio/ctf-challenges-by-me) Pwnable|Web Security|Cryptography CTF-style challenges
- [**253**Star][6m] [Shell] [lieanu/libcsearcher](https://github.com/lieanu/libcsearcher) glibc offset search for ctf.
- [**233**Star][8m] [harmoc/ctftools](https://github.com/harmoc/ctftools) Personal CTF Toolkit
- [**209**Star][1y] [Py] [3summer/ctf-rsa-tool](https://github.com/3summer/CTF-RSA-tool) a little tool help CTFer solve RSA problem


### <a id="30c4df38bcd1abaaaac13ffda7d206c6"></a>Collection


- [**3857**Star][1m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
- [**3857**Star][1m] [JS] [apsdehal/awesome-ctf](https://github.com/apsdehal/awesome-ctf) A curated list of CTF frameworks, libraries, resources and softwares
- [**1709**Star][1m] [PHP] [orangetw/my-ctf-web-challenges](https://github.com/orangetw/my-ctf-web-challenges) Collection of CTF Web challenges I made
- [**945**Star][19d] [C] [bt3gl/pentesting-toolkit](https://github.com/bt3gl/Pentesting-Toolkit) Tools for pentesting, CTFs & wargames.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/NoCategory](#2e40f2f1df5d7f93a7de47bf49c24a0e) |
- [**358**Star][4m] [xtiankisutsa/awesome-mobile-ctf](https://github.com/xtiankisutsa/awesome-mobile-ctf) This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.
    - Also In Section: [Tools/VulnerableMachine/Collection](#383ad9174d3f7399660d36cd6e0b2c00) |


### <a id="0d871dfb0d2544d6952c04f69a763059"></a>HTB


- [**642**Star][28d] [hackplayers/hackthebox-writeups](https://github.com/hackplayers/hackthebox-writeups) Writeups for HacktheBox 'boot2root' machines


### <a id="e64cedb2d91d06b3eeac5ea414e12b27"></a>CTF


#### <a id="e8853f1153694b24db203d960e394827"></a>NoCategory


- [**6102**Star][1y] [Hack] [facebook/fbctf](https://github.com/facebook/fbctf) Platform to host Capture the Flag competitions
- [**5861**Star][14d] [Py] [gallopsled/pwntools](https://github.com/gallopsled/pwntools) CTF framework and exploit development library
- [**4317**Star][1m] [Shell] [zardus/ctf-tools](https://github.com/zardus/ctf-tools) Some setup scripts for security research tools.
- [**2756**Star][19d] [HTML] [ctf-wiki/ctf-wiki](https://github.com/ctf-wiki/ctf-wiki) CTF Wiki Online. Come and join us, we need you!
- [**2295**Star][19d] [Py] [ctfd/ctfd](https://github.com/CTFd/CTFd) CTFs as you need them
- [**1531**Star][1m] [C] [firmianay/ctf-all-in-one](https://github.com/firmianay/ctf-all-in-one) CTF竞赛入门指南
- [**1343**Star][4m] [Go] [google/google-ctf](https://github.com/google/google-ctf) Google CTF
- [**1340**Star][3m] [C] [taviso/ctftool](https://github.com/taviso/ctftool) Interactive CTF Exploration Tool
- [**1248**Star][11m] [Py] [unapibageek/ctfr](https://github.com/unapibageek/ctfr) Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
- [**1244**Star][2m] [Py] [ganapati/rsactftool](https://github.com/ganapati/rsactftool) RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data
- [**1132**Star][16d] [Py] [p4-team/ctf](https://github.com/p4-team/ctf) Ctf solutions from p4 team
- [**1034**Star][2m] [C] [trailofbits/ctf](https://github.com/trailofbits/ctf) CTF Field Guide
- [**1013**Star][12m] [naetw/ctf-pwn-tips](https://github.com/naetw/ctf-pwn-tips) Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.
- [**845**Star][1m] [Ruby] [w181496/web-ctf-cheatsheet](https://github.com/w181496/web-ctf-cheatsheet) Web CTF CheatSheet
- [**824**Star][28d] [ignitetechnologies/privilege-escalation](https://github.com/ignitetechnologies/privilege-escalation) This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
- [**780**Star][2m] [Py] [acmesec/ctfcracktools](https://github.com/Acmesec/CTFCrackTools) China's first CTFTools framework.中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
- [**609**Star][1m] [Shell] [diego-treitos/linux-smart-enumeration](https://github.com/diego-treitos/linux-smart-enumeration) Linux enumeration tool for pentesting and CTFs with verbosity levels
- [**423**Star][6m] [HTML] [ctf-wiki/ctf-challenges](https://github.com/ctf-wiki/ctf-challenges) 
- [**397**Star][2m] [Py] [j00ru/ctf-tasks](https://github.com/j00ru/ctf-tasks) An archive of low-level CTF challenges developed over the years
- [**381**Star][14d] [Py] [moloch--/rootthebox](https://github.com/moloch--/rootthebox) A Game of Hackers (CTF Scoreboard & Game Manager)
- [**373**Star][4m] [C] [hackgnar/ble_ctf](https://github.com/hackgnar/ble_ctf) A Bluetooth low energy capture the flag
- [**309**Star][2m] [PHP] [nakiami/mellivora](https://github.com/nakiami/mellivora) Mellivora is a CTF engine written in PHP
- [**302**Star][7m] [Py] [screetsec/brutesploit](https://github.com/screetsec/brutesploit) BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p
- [**292**Star][2m] [Py] [christhecoolhut/pinctf](https://github.com/christhecoolhut/pinctf) Using Intel's PIN tool to solve CTF problems
- [**275**Star][11m] [Py] [hongrisec/ctf-training](https://github.com/hongrisec/ctf-training) 收集各大比赛的题目和Writeup
- [**252**Star][5m] [Shell] [ctfhacker/epictreasure](https://github.com/ctfhacker/EpicTreasure) Batteries included CTF VM
- [**236**Star][12m] [Java] [shiltemann/ctf-writeups-public](https://github.com/shiltemann/ctf-writeups-public) Writeups for infosec Capture the Flag events by team Galaxians
- [**218**Star][2m] [HTML] [sectalks/sectalks](https://github.com/sectalks/sectalks) CTFs, solutions and presentations
- [**215**Star][1m] [C] [david942j/ctf-writeups](https://github.com/david942j/ctf-writeups) Collection of scripts and writeups


#### <a id="0591f47788c6926c482f385b1d71efec"></a>Writeup


- [**1813**Star][1y] [CSS] [ctfs/write-ups-2015](https://github.com/ctfs/write-ups-2015) Wiki-like CTF write-ups repository, maintained by the community. 2015
- [**1763**Star][11m] [Py] [ctfs/write-ups-2017](https://github.com/ctfs/write-ups-2017) Wiki-like CTF write-ups repository, maintained by the community. 2017
- [**586**Star][1m] [Py] [pwning/public-writeup](https://github.com/pwning/public-writeup) CTF write-ups by Plaid Parliament of Pwning
- [**489**Star][8m] [manoelt/50m_ctf_writeup](https://github.com/manoelt/50m_ctf_writeup) $50 Million CTF from Hackerone - Writeup
- [**275**Star][7m] [HTML] [bl4de/ctf](https://github.com/bl4de/ctf) CTF (Capture The Flag) writeups, code snippets, notes, scripts
- [**222**Star][1y] [Shell] [ctfs/write-ups-2018](https://github.com/ctfs/write-ups-2018) Wiki-like CTF write-ups repository, maintained by the community. 2018


#### <a id="dc89088263fc944901fd7a58197a5f6d"></a>Collection








***


## <a id="683b645c2162a1fce5f24ac2abfa1973"></a>Vulnerability&&BugHunting&&Exploit&&Fuzzing


### <a id="9d1ce4a40c660c0ce15aec6daf7f56dd"></a>NoCategory


- [**1968**Star][12d] [Java] [jeremylong/dependencycheck](https://github.com/jeremylong/dependencycheck) OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- [**1797**Star][27d] [TypeScript] [snyk/snyk](https://github.com/snyk/snyk) CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies
- [**1619**Star][18d] [roave/securityadvisories](https://github.com/roave/securityadvisories) ensures that your application doesn't have installed dependencies with known security vulnerabilities
- [**1535**Star][1m] [Java] [spotbugs/spotbugs](https://github.com/spotbugs/spotbugs) SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
- [**1284**Star][12m] [Py] [xyntax/poc-t](https://github.com/xyntax/poc-t) 渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
- [**1232**Star][30d] [JS] [archerysec/archerysec](https://github.com/archerysec/archerysec) Centralize Vulnerability Assessment and Management for DevSecOps Team
- [**1079**Star][19d] [Jupyter Notebook] [ibm/adversarial-robustness-toolbox](https://github.com/ibm/adversarial-robustness-toolbox) Python library for adversarial machine learning, attacks and defences for neural networks, logistic regression, decision trees, SVM, gradient boosted trees, Gaussian processes and more with multiple framework support
- [**1074**Star][1y] [PowerShell] [rasta-mouse/sherlock](https://github.com/rasta-mouse/sherlock) PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
- [**1018**Star][16d] [HTML] [defectdojo/django-defectdojo](https://github.com/defectdojo/django-defectdojo) DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
- [**901**Star][19d] [Py] [knownsec/pocsuite3](https://github.com/knownsec/pocsuite3) pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
- [**814**Star][6m] [numirias/security](https://github.com/numirias/security) Some of my security stuff and vulnerabilities. Nothing advanced. More to come.
- [**813**Star][3m] [JS] [creditease-sec/insight](https://github.com/creditease-sec/insight) 洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
- [**806**Star][1y] [Py] [leviathan-framework/leviathan](https://github.com/tearsecurity/leviathan) wide range mass audit toolkit
- [**625**Star][5m] [Py] [pyupio/safety](https://github.com/pyupio/safety) Safety checks your installed dependencies for known security vulnerabilities
- [**578**Star][7m] [Java] [olacabs/jackhammer](https://github.com/olacabs/jackhammer) Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
- [**567**Star][12d] [arkadiyt/bounty-targets-data](https://github.com/arkadiyt/bounty-targets-data) This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports
- [**541**Star][1y] [Java] [mr5m1th/poc-collect](https://github.com/Mr5m1th/POC-Collect) 各种开源CMS 各种版本的漏洞以及EXP 该项目将不断更新
- [**540**Star][10m] [PHP] [zhuifengshaonianhanlu/pikachu](https://github.com/zhuifengshaonianhanlu/pikachu) 一个好玩的Web安全-漏洞测试平台
- [**462**Star][1m] [Java] [joychou93/java-sec-code](https://github.com/joychou93/java-sec-code) Java common vulnerabilities and security code.
- [**430**Star][28d] [Py] [google/vulncode-db](https://github.com/google/vulncode-db) Vulncode-DB project
- [**428**Star][4m] [Py] [crocs-muni/roca](https://github.com/crocs-muni/roca) ROCA: Infineon RSA key vulnerability
- [**409**Star][4m] [Java] [nccgroup/freddy](https://github.com/nccgroup/freddy) Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
- [**395**Star][17d] [Go] [cbeuw/cloak](https://github.com/cbeuw/cloak) A universal pluggable transport utilising TLS domain fronting to evade deep packet inspection and active probing from state-level adversaries
- [**379**Star][10m] [skyblueeternal/thinkphp-rce-poc-collection](https://github.com/skyblueeternal/thinkphp-rce-poc-collection) thinkphp v5.x 远程代码执行漏洞-POC集合
- [**372**Star][6m] [tidesec/tide](https://github.com/tidesec/tide) 目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~
- [**361**Star][12m] [hannob/vulns](https://github.com/hannob/vulns) Named vulnerabilities and their practical impact
- [**357**Star][8m] [C] [vulnreproduction/linuxflaw](https://github.com/vulnreproduction/linuxflaw) This repo records all the vulnerabilities of linux software I have reproduced in my local workspace
- [**354**Star][6m] [PHP] [fate0/prvd](https://github.com/fate0/prvd) PHP Runtime Vulnerability Detection
- [**351**Star][6m] [Py] [orangetw/awesome-jenkins-rce-2019](https://github.com/orangetw/awesome-jenkins-rce-2019) There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
- [**342**Star][2m] [snyk/zip-slip-vulnerability](https://github.com/snyk/zip-slip-vulnerability) Zip Slip Vulnerability (Arbitrary file write through archive extraction)
- [**335**Star][2m] [Java] [denimgroup/threadfix](https://github.com/denimgroup/threadfix) ThreadFix is a software vulnerability management platform. This GitHub site is far out of date. Please go to
- [**314**Star][27d] [Java] [sap/vulnerability-assessment-tool](https://github.com/sap/vulnerability-assessment-tool) Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy.
- [**312**Star][11m] [cryin/paper](https://github.com/cryin/paper) Web Security Technology & Vulnerability Analysis Whitepapers
- [**299**Star][16d] [Py] [ym2011/poc-exp](https://github.com/ym2011/poc-exp) Collecting and writing PoC or EXP for vulnerabilities on some application
- [**291**Star][3m] [Py] [christhecoolhut/firmware_slap](https://github.com/christhecoolhut/firmware_slap) Discovering vulnerabilities in firmware through concolic analysis and function clustering.
- [**286**Star][2m] [Py] [fplyth0ner-combie/bug-project-framework](https://github.com/fplyth0ner-combie/bug-project-framework) 漏洞利用框架模块分享仓库
- [**283**Star][4m] [C#] [l0ss/grouper2](https://github.com/l0ss/grouper2) Find vulnerabilities in AD Group Policy
- [**283**Star][7m] [C] [tangsilian/android-vuln](https://github.com/tangsilian/android-vuln) 安卓内核提权漏洞分析
- [**271**Star][21d] [disclose/disclose](https://github.com/disclose/disclose) Driving safety, simplicity, and standardization in vulnerability disclosure.
- [**265**Star][1y] [Py] [ucsb-seclab/bootstomp](https://github.com/ucsb-seclab/bootstomp) BootStomp: a bootloader vulnerability finder
- [**263**Star][1y] [JS] [portswigger/hackability](https://github.com/portswigger/hackability) Probe a rendering engine for vulnerabilities and other features
- [**249**Star][5m] [Py] [jcesarstef/dotdotslash](https://github.com/jcesarstef/dotdotslash) Search for Directory Traversal Vulnerabilities
- [**234**Star][19d] [HTML] [edoverflow/bugbountyguide](https://github.com/edoverflow/bugbountyguide) Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.
- [**220**Star][2m] [Py] [ismailtasdelen/hackertarget](https://github.com/pyhackertarget/hackertarget) attack surface discovery and identification of security vulnerabilities
- [**211**Star][2m] [C++] [atxsinn3r/vulncases](https://github.com/atxsinn3r/VulnCases) Oh it's just a bunch of vulns for references.
- [**207**Star][6m] [Py] [jas502n/cnvd-c-2019-48814](https://github.com/jas502n/cnvd-c-2019-48814) WebLogic wls9-async反序列化远程命令执行漏洞
- [**202**Star][6m] [Py] [greekn/rce-bug](https://github.com/greekn/rce-bug) 新漏洞感知项目 主要帮助大家 记录一些重大漏洞 漏洞方面的细节
- [**201**Star][2m] [Ruby] [appfolio/gemsurance](https://github.com/appfolio/gemsurance) Gem vulnerability checker using rubysec/ruby-advisory-db
- [**201**Star][7m] [C++] [j00ru/kfetch-toolkit](https://github.com/googleprojectzero/bochspwn) A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities


### <a id="750f4c05b5ab059ce4405f450b56d720"></a>Collectioin


- [**3444**Star][8m] [C] [rpisec/mbe](https://github.com/rpisec/mbe) Course materials for Modern Binary Exploitation by RPISEC
- [**3429**Star][4m] [PHP] [hanc00l/wooyun_public](https://github.com/hanc00l/wooyun_public) This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
- [**2954**Star][8m] [C] [secwiki/linux-kernel-exploits](https://github.com/secwiki/linux-kernel-exploits) linux-kernel-exploits Linux平台提权漏洞集合
- [**2600**Star][1m] [xairy/linux-kernel-exploitation](https://github.com/xairy/linux-kernel-exploitation) A bunch of links related to Linux kernel exploitation
- [**2072**Star][14d] [PowerShell] [k8gege/k8tools](https://github.com/k8gege/k8tools) K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
- [**1962**Star][14d] [qazbnm456/awesome-cve-poc](https://github.com/qazbnm456/awesome-cve-poc) CVE PoC列表
- [**1882**Star][1m] [HTML] [gtfobins/gtfobins.github.io](https://github.com/gtfobins/gtfobins.github.io) Curated list of Unix binaries that can be exploited to bypass system security restrictions
- [**1701**Star][3m] [tunz/js-vuln-db](https://github.com/tunz/js-vuln-db) A collection of JavaScript engine CVEs with PoCs
- [**1196**Star][1y] [felixgr/secure-ios-app-dev](https://github.com/felixgr/secure-ios-app-dev) Collection of the most common vulnerabilities found in iOS applications
- [**1093**Star][5m] [Py] [coffeehb/some-poc-or-exp](https://github.com/coffeehb/some-poc-or-exp) 各种漏洞poc、Exp的收集或编写
- [**1044**Star][14d] [Py] [offensive-security/exploitdb-bin-sploits](https://github.com/offensive-security/exploitdb-bin-sploits) Exploit Database binary exploits located in the /sploits directory
- [**1020**Star][1m] [C] [xairy/kernel-exploits](https://github.com/xairy/kernel-exploits) My proof-of-concept exploits for the Linux kernel
- [**1006**Star][19d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/VulnerabilityScan&&BugHunting/Fuzzing/NoCategory](#1c2903ee7afb903ccfaa26f766924385) |
- [**977**Star][10m] [Py] [xiphosresearch/exploits](https://github.com/xiphosresearch/exploits) Miscellaneous exploit code
- [**962**Star][11m] [PHP] [secwiki/cms-hunter](https://github.com/secwiki/cms-hunter) CMS漏洞测试用例集合
- [**938**Star][5m] [C] [dhavalkapil/heap-exploitation](https://github.com/dhavalkapil/heap-exploitation) This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.
- [**894**Star][2m] [Py] [nullsecuritynet/tools](https://github.com/nullsecuritynet/tools) Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
- [**672**Star][1y] [C] [billy-ellis/exploit-challenges](https://github.com/billy-ellis/exploit-challenges) A collection of vulnerable ARM binaries for practicing exploit development
- [**609**Star][7m] [yeyintminthuhtut/awesome-advanced-windows-exploitation-references](https://github.com/yeyintminthuhtut/Awesome-Advanced-Windows-Exploitation-References) List of Awesome Advanced Windows Exploitation References
- [**568**Star][1y] [C] [externalist/exploit_playground](https://github.com/externalist/exploit_playground) Analysis of public exploits or my 1day exploits
- [**483**Star][7m] [C] [jiayy/android_vuln_poc-exp](https://github.com/jiayy/android_vuln_poc-exp) This project contains pocs and exploits for vulneribilities I found (mostly)
- [**417**Star][9m] [C] [hardenedlinux/linux-exploit-development-tutorial](https://github.com/hardenedlinux/linux-exploit-development-tutorial) a series tutorial for linux exploit development to newbie.
- [**329**Star][1y] [snyk/vulnerabilitydb](https://github.com/snyk/vulnerabilitydb) Snyk's public vulnerability database
- [**268**Star][10m] [Py] [secwiki/office-exploits](https://github.com/secwiki/office-exploits) office-exploits Office漏洞集合
- [**222**Star][2m] [Py] [boy-hack/airbug](https://github.com/boy-hack/airbug) Airbug(空气洞)，收集漏洞poc用于安全产品
- [**222**Star][1y] [C++] [wnagzihxa1n/browsersecurity](https://github.com/wnagzihxa1n/browsersecurity) 我在学习浏览器安全过程中整理的漏洞分析笔记与相关的学习资料


### <a id="605b1b2b6eeb5138cb4bc273a30b28a5"></a>ExploitDevelopment


#### <a id="68a64028eb1f015025d6f5a6ee6f6810"></a>NoCategory


- [**3705**Star][10m] [Py] [longld/peda](https://github.com/longld/peda) PEDA - Python Exploit Development Assistance for GDB
- [**2488**Star][13d] [Py] [hugsy/gef](https://github.com/hugsy/gef) GEF - GDB Enhanced Features for exploit devs & reversers
- [**2362**Star][22d] [Py] [pwndbg/pwndbg](https://github.com/pwndbg/pwndbg) Exploit Development and Reverse Engineering with GDB Made Easy
- [**465**Star][10m] [Py] [wapiflapi/villoc](https://github.com/wapiflapi/villoc) Visualization of heap operations.


#### <a id="019cf10dbc7415d93a8d22ef163407ff"></a>ROP


- [**2101**Star][27d] [Py] [jonathansalwan/ropgadget](https://github.com/jonathansalwan/ropgadget) This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.
- [**931**Star][13d] [Py] [sashs/ropper](https://github.com/sashs/ropper) Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
- [**677**Star][11m] [HTML] [zhengmin1989/myarticles](https://github.com/zhengmin1989/myarticles) 蒸米的文章（iOS冰与火之歌系列，一步一步学ROP系列，安卓动态调试七种武器系列等）




### <a id="c0bec2b143739028ff4ec439e077aa63"></a>VulnerabilityScan&&BugHunting


#### <a id="5d02822c22d815c94c58cdaed79d6482"></a>NoCategory




#### <a id="661f41705ac69ad4392372bd4bd02f01"></a>VulnerabilityScan


##### <a id="0ed7e90d216a8a5be1dafebaf9eaeb5d"></a>NoCategory


- [**6953**Star][24d] [Go] [future-architect/vuls](https://github.com/future-architect/vuls) Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices
- [**6516**Star][16d] [Java] [zaproxy/zaproxy](https://github.com/zaproxy/zaproxy) The OWASP ZAP core project
- [**5563**Star][17d] [Ruby] [presidentbeef/brakeman](https://github.com/presidentbeef/brakeman) A static analysis security vulnerability scanner for Ruby on Rails applications
- [**2904**Star][21d] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) w3af: web application attack and audit framework, the open source web vulnerability scanner.
    - Also In Section: [Tools/Scanner&&SecurityScan&&AppScan/NoCategory](#de63a029bda6a7e429af272f291bb769) |
- [**2440**Star][6m] [Py] [ysrc/xunfeng](https://github.com/ysrc/xunfeng) 巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
- [**2403**Star][28d] [Go] [knqyf263/trivy](https://github.com/aquasecurity/trivy) A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
- [**2089**Star][8m] [Py] [linkedin/qark](https://github.com/linkedin/qark) Tool to look for several security related Android application vulnerabilities
    - Also In Section: [Tools/Mobile/Android](#fe88ee8c0df10870b44c2dedcd86d3d3) |
- [**1873**Star][1m] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/Recon&&InfoGather](#375a8baa06f24de1b67398c1ac74ed24) |
- [**1864**Star][3m] [Py] [python-security/pyt](https://github.com/python-security/pyt) A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
- [**1629**Star][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) A high performance offensive security tool for reconnaissance and vulnerability scanning
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/Recon&&InfoGather](#375a8baa06f24de1b67398c1ac74ed24) |
- [**1370**Star][6m] [Py] [almandin/fuxploider](https://github.com/almandin/fuxploider) File upload vulnerability scanner and exploitation tool.
- [**1339**Star][5m] [Py] [s0md3v/striker](https://github.com/s0md3v/Striker) Striker is an offensive information and vulnerability scanner.
- [**1023**Star][7m] [Py] [lucifer1993/angelsword](https://github.com/lucifer1993/angelsword) Python3编写的CMS漏洞检测框架
- [**932**Star][1y] [Java] [google/firing-range](https://github.com/google/firing-range)  a test bed for web application security scanners, providing synthetic, wide coverage for an array of vulnerabilities.
- [**913**Star][4m] [threathuntingproject/threathunting](https://github.com/threathuntingproject/threathunting) An informational repo about hunting for adversaries in your IT environment.
- [**884**Star][1m] [Go] [opensec-cn/kunpeng](https://github.com/opensec-cn/kunpeng) kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。
- [**884**Star][2m] [Py] [hasecuritysolutions/vulnwhisperer](https://github.com/HASecuritySolutions/VulnWhisperer) Create actionable data from your Vulnerability Scans
- [**852**Star][3m] [Py] [boy-hack/w9scan](https://github.com/w-digital-scanner/w9scan) Plug-in type web vulnerability scanner
- [**840**Star][3m] [Py] [lijiejie/bbscan](https://github.com/lijiejie/bbscan) A vulnerability scanner focus on scanning large number of targets in short time with a minimal set of rules.
- [**725**Star][10m] [PowerShell] [l0ss/grouper](https://github.com/l0ss/grouper) A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
- [**643**Star][5m] [Perl] [moham3driahi/xattacker](https://github.com/moham3driahi/xattacker) X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
- [**632**Star][5m] [PHP] [mattiasgeniar/php-exploit-scripts](https://github.com/mattiasgeniar/php-exploit-scripts) A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
- [**602**Star][10m] [Dockerfile] [aquasecurity/microscanner](https://github.com/aquasecurity/microscanner) Scan your container images for package vulnerabilities with Aqua Security
- [**539**Star][5m] [JS] [seccubus/seccubus](https://github.com/seccubus/seccubus) Easy automated vulnerability scanning, reporting and analysis
- [**523**Star][3m] [Py] [hatboy/struts2-scan](https://github.com/hatboy/struts2-scan) Struts2全漏洞扫描利用工具
- [**513**Star][7m] [Py] [wyatu/perun](https://github.com/wyatu/perun) Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架
- [**491**Star][14d] [C#] [k8gege/ladon](https://github.com/k8gege/ladon) Ladon一款用于大型网络渗透的多线程插件化综合扫描神器，含端口扫描、服务识别、网络资产、密码爆破、高危漏洞检测以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描。5.5版本内置39个功能模块,通过多种协议以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、数据库等信息，漏洞检测包含MS17010、Weblogic、ActiveMQ、Tomcat、Struts2等，密码爆破11种含数据库(Mysql、Oracle、MSSQL)、FTP、SSH(Linux主机)、VNC、Windows密码(IPC、WMI、SMB)、Weblogic后台、Rar压缩包密码等，Web指…
- [**488**Star][2m] [Perl 6] [rezasp/joomscan](https://github.com/rezasp/joomscan) OWASP Joomla Vulnerability Scanner Project
- [**452**Star][1m] [C] [greenbone/openvas-scanner](https://github.com/greenbone/openvas) Open Vulnerability Assessment Scanner
- [**443**Star][5m] [Py] [dr0op/weblogicscan](https://github.com/dr0op/weblogicscan) 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持
- [**436**Star][15d] [Py] [k8gege/k8cscan](https://github.com/k8gege/k8cscan) K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动
- [**375**Star][10m] [Py] [hahwul/a2sv](https://github.com/hahwul/a2sv) Auto Scanning to SSL Vulnerability
- [**362**Star][1m] [Py] [l4ys/lazyida](https://github.com/l4ys/lazyida) Make your IDA Lazy!
        <details>
        <summary>View Details</summary>


        ### 功能
        - 快速移除函数返回类型
        - 数据格式(format)快速转换
        - 扫描字符串格式化漏洞
        - 双击跳转vtable函数
        - 快捷键: w/c/v
        </details>


- [**351**Star][1m] [C#] [security-code-scan/security-code-scan](https://github.com/security-code-scan/security-code-scan) Vulnerability Patterns Detector for C# and VB.NET
- [**343**Star][2m] [Py] [chenjj/corscanner](https://github.com/chenjj/corscanner) Fast CORS misconfiguration vulnerabilities scanner
- [**319**Star][3m] [Py] [vulmon/vulmap](https://github.com/vulmon/vulmap) Vulmap Online Local Vulnerability Scanners Project
- [**318**Star][7m] [C#] [yalcinyolalan/wssat](https://github.com/yalcinyolalan/wssat) WEB SERVICE SECURITY ASSESSMENT TOOL
- [**297**Star][4m] [Py] [zhaoweiho/securitymanageframwork](https://github.com/zhaoweiho/securitymanageframwork) Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer securit…
- [**287**Star][1y] [Py] [flipkart-incubator/watchdog](https://github.com/flipkart-incubator/watchdog) Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
- [**285**Star][2m] [Py] [utiso/dorkbot](https://github.com/utiso/dorkbot) Command-line tool to scan Google search results for vulnerabilities
- [**279**Star][7m] [Py] [vulscanteam/vulscan](https://github.com/vulscanteam/vulscan) vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
- [**276**Star][5m] [Perl] [rezasp/vbscan](https://github.com/rezasp/vbscan) OWASP VBScan is a Black Box vBulletin Vulnerability Scanner
- [**257**Star][2m] [JS] [stono/hawkeye](https://github.com/hawkeyesec/scanner-cli) A project security/vulnerability/risk scanning tool
- [**246**Star][4m] [Shell] [peterpt/eternal_scanner](https://github.com/peterpt/eternal_scanner) An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)
- [**226**Star][1y] [Py] [leapsecurity/libssh-scanner](https://github.com/leapsecurity/libssh-scanner) Script to identify hosts vulnerable to CVE-2018-10933
- [**222**Star][1y] [C++] [ucsb-seclab/dr_checker](https://github.com/ucsb-seclab/dr_checker) DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers
- [**218**Star][7m] [Py] [skewwg/vulscan](https://github.com/skewwg/vulscan) 漏洞扫描：st2、tomcat、未授权访问等等
- [**211**Star][6m] [Py] [kingkaki/weblogic-scan](https://github.com/kingkaki/weblogic-scan) weblogic 漏洞扫描工具
- [**208**Star][20d] [Py] [sethsec/celerystalk](https://github.com/sethsec/celerystalk) An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.


##### <a id="d22e52bd9f47349df896ca85675d1e5c"></a>Web漏洞




##### <a id="060dd7b419423ee644794fccd67c22a8"></a>系统漏洞




##### <a id="67939d66cf2a9d9373cc0a877a8c72c2"></a>App漏洞




##### <a id="2076af46c7104737d06dbe29eb7c9d3a"></a>移动平台漏洞






#### <a id="382aaa11dea4036c5b6d4a8b06f8f786"></a>Fuzzing


##### <a id="1c2903ee7afb903ccfaa26f766924385"></a>NoCategory


- [**4649**Star][29d] [C] [google/oss-fuzz](https://github.com/google/oss-fuzz) OSS-Fuzz - continuous fuzzing of open source software.
- [**3992**Star][12d] [Py] [google/clusterfuzz](https://github.com/google/clusterfuzz) Scalable fuzzing infrastructure.
- [**3169**Star][1m] [Go] [dvyukov/go-fuzz](https://github.com/dvyukov/go-fuzz) Randomized testing for Go
- [**1706**Star][1y] [PowerShell] [fuzzysecurity/powershell-suite](https://github.com/fuzzysecurity/powershell-suite) My musings with PowerShell
- [**1335**Star][2m] [C] [googleprojectzero/winafl](https://github.com/googleprojectzero/winafl) A fork of AFL for fuzzing Windows binaries
- [**1107**Star][9m] [Py] [openrce/sulley](https://github.com/openrce/sulley) A pure-python fully automated and unattended fuzzing framework.
- [**1100**Star][28d] [bo0om/fuzz.txt](https://github.com/bo0om/fuzz.txt) Potentially dangerous files
- [**1006**Star][19d] [Py] [thekingofduck/fuzzdicts](https://github.com/thekingofduck/fuzzdicts) Web Pentesting Fuzz 字典,一个就够了。
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/Collectioin](#750f4c05b5ab059ce4405f450b56d720) |
- [**990**Star][28d] [C] [google/fuzzer-test-suite](https://github.com/google/fuzzer-test-suite) Set of tests for fuzzing engines
- [**859**Star][18d] [Py] [swisskyrepo/ssrfmap](https://github.com/swisskyrepo/ssrfmap) Automatic SSRF fuzzer and exploitation tool
- [**850**Star][25d] [Go] [sahilm/fuzzy](https://github.com/sahilm/fuzzy) Go library that provides fuzzy string matching optimized for filenames and code symbols in the style of Sublime Text, VSCode, IntelliJ IDEA et al.
- [**808**Star][1m] [C] [rust-fuzz/afl.rs](https://github.com/rust-fuzz/afl.rs) 
- [**788**Star][17d] [Swift] [googleprojectzero/fuzzilli](https://github.com/googleprojectzero/fuzzilli) A JavaScript Engine Fuzzer
- [**748**Star][23d] [Py] [jtpereyda/boofuzz](https://github.com/jtpereyda/boofuzz) A fork and successor of the Sulley Fuzzing Framework
- [**736**Star][7m] [HTML] [tennc/fuzzdb](https://github.com/tennc/fuzzdb) 一个fuzzdb扩展库
- [**689**Star][14d] [Go] [ffuf/ffuf](https://github.com/ffuf/ffuf) Fast web fuzzer written in Go
- [**634**Star][28d] [Go] [google/gofuzz](https://github.com/google/gofuzz) Fuzz testing for go.
- [**628**Star][4m] [C] [kernelslacker/trinity](https://github.com/kernelslacker/trinity) Linux system call fuzzer
- [**608**Star][14d] [C] [google/afl](https://github.com/google/afl) american fuzzy lop - a security-oriented fuzzer
- [**588**Star][4m] [Py] [nongiach/arm_now](https://github.com/nongiach/arm_now) arm_now is a qemu powered tool that allows instant setup of virtual machines on arm cpu, mips, powerpc, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose.
- [**569**Star][19d] [Py] [1n3/blackwidow](https://github.com/1n3/blackwidow) A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
- [**541**Star][8m] [Py] [shellphish/fuzzer](https://github.com/shellphish/fuzzer) A Python interface to AFL, allowing for easy injection of testcases and other functionality.
- [**516**Star][2m] [C++] [angorafuzzer/angora](https://github.com/angorafuzzer/angora) Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
- [**500**Star][12d] [Py] [mozillasecurity/funfuzz](https://github.com/mozillasecurity/funfuzz) A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.
- [**472**Star][1y] [Py] [c0ny1/upload-fuzz-dic-builder](https://github.com/c0ny1/upload-fuzz-dic-builder) 上传漏洞fuzz字典生成脚本
- [**471**Star][16d] [Py] [trailofbits/deepstate](https://github.com/trailofbits/deepstate) A unit test-like interface for fuzzing and symbolic execution
- [**453**Star][1m] [Rust] [rust-fuzz/cargo-fuzz](https://github.com/rust-fuzz/cargo-fuzz) Command line helpers for fuzzing
- [**424**Star][2m] [Perl] [wireghoul/dotdotpwn](https://github.com/wireghoul/dotdotpwn) DotDotPwn - The Directory Traversal Fuzzer
- [**404**Star][6m] [Ruby] [tidesec/fuzzscanner](https://github.com/tidesec/fuzzscanner) 一个主要用于信息搜集的工具集，主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。
- [**398**Star][4m] [C] [mykter/afl-training](https://github.com/mykter/afl-training) Exercises to learn how to fuzz with American Fuzzy Lop
- [**384**Star][6m] [C] [coolervoid/0d1n](https://github.com/coolervoid/0d1n) Web security tool to make fuzzing at HTTP/S, Beta
- [**379**Star][27d] [Haskell] [crytic/echidna](https://github.com/crytic/echidna) Ethereum fuzz testing framework
- [**378**Star][3m] [Rust] [microsoft/lain](https://github.com/microsoft/lain) A fuzzer framework built in Rust
- [**370**Star][1m] [TypeScript] [fuzzitdev/jsfuzz](https://github.com/fuzzitdev/jsfuzz) coverage guided fuzz testing for javascript
- [**364**Star][1y] [C] [battelle/afl-unicorn](https://github.com/Battelle/afl-unicorn) afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
- [**357**Star][3m] [C++] [googleprojectzero/brokentype](https://github.com/googleprojectzero/BrokenType) TrueType and OpenType font fuzzing toolset
- [**340**Star][4m] [Java] [google/graphicsfuzz](https://github.com/google/graphicsfuzz) A testing framework for automatically finding and simplifying bugs in graphics shader compilers.
- [**340**Star][1m] [C++] [sslab-gatech/qsym](https://github.com/sslab-gatech/qsym) QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
- [**337**Star][11m] [Py] [joxeankoret/nightmare](https://github.com/joxeankoret/nightmare) A distributed fuzzing testing suite with web administration
- [**311**Star][3m] [lcatro/source-and-fuzzing](https://github.com/lcatro/Source-and-Fuzzing) 一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
- [**306**Star][5m] [Py] [cisco-talos/mutiny-fuzzer](https://github.com/cisco-talos/mutiny-fuzzer) 
- [**304**Star][9m] [Py] [cisco-sas/kitty](https://github.com/cisco-sas/kitty) Fuzzing framework written in python
- [**298**Star][10m] [Py] [mseclab/pyjfuzz](https://github.com/mseclab/pyjfuzz) PyJFuzz - Python JSON Fuzzer
- [**292**Star][5m] [Py] [mozillasecurity/dharma](https://github.com/mozillasecurity/dharma) Generation-based, context-free grammar fuzzer.
- [**283**Star][10m] [C++] [gamozolabs/applepie](https://github.com/gamozolabs/applepie) A hypervisor for fuzzing built with WHVP and Bochs
- [**278**Star][11m] [Py] [mrash/afl-cov](https://github.com/mrash/afl-cov) Produce code coverage results with gcov from afl-fuzz test cases
- [**278**Star][10m] [C] [samhocevar/zzuf](https://github.com/samhocevar/zzuf) Application fuzzer
- [**277**Star][1m] [Py] [tomato42/tlsfuzzer](https://github.com/tomato42/tlsfuzzer) SSL and TLS protocol test suite and fuzzer
- [**273**Star][17d] [HTML] [mozillasecurity/fuzzdata](https://github.com/mozillasecurity/fuzzdata) Fuzzing resources for feeding various fuzzers with input.
- [**272**Star][1y] [C++] [dekimir/ramfuzz](https://github.com/dekimir/ramfuzz) Combining Unit Tests, Fuzzing, and AI
- [**268**Star][17d] [C] [aflsmart/aflsmart](https://github.com/aflsmart/aflsmart) Smart Greybox Fuzzing (
- [**263**Star][8m] [Py] [mozillasecurity/peach](https://github.com/mozillasecurity/peach) Peach is a fuzzing framework which uses a DSL for building fuzzers and an observer based architecture to execute and monitor them.
- [**245**Star][7m] [C++] [ucsb-seclab/difuze](https://github.com/ucsb-seclab/difuze) Fuzzer for Linux Kernel Drivers
- [**239**Star][5m] [C] [compsec-snu/razzer](https://github.com/compsec-snu/razzer) A Kernel fuzzer focusing on race bugs
- [**239**Star][1y] [Py] [hgascon/pulsar](https://github.com/hgascon/pulsar) Protocol Learning and Stateful Fuzzing
- [**230**Star][4m] [HTML] [rootup/bfuzz](https://github.com/rootup/bfuzz) Fuzzing Browsers
- [**222**Star][3m] [C] [pagalaxylab/unifuzzer](https://github.com/PAGalaxyLab/uniFuzzer) A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer
- [**221**Star][3m] [C] [dongdongshe/neuzz](https://github.com/dongdongshe/neuzz) neural network assisted fuzzer
- [**214**Star][27d] [cpuu/awesome-fuzzing](https://github.com/cpuu/awesome-fuzzing) A curated list of awesome Fuzzing(or Fuzz Testing) for software security
- [**212**Star][3m] [C++] [lifting-bits/grr](https://github.com/lifting-bits/grr) High-throughput fuzzer and emulator of DECREE binaries
- [**210**Star][4m] [C] [hunter-ht-2018/ptfuzzer](https://github.com/hunter-ht-2018/ptfuzzer) Improving AFL by using Intel PT to collect branch information
- [**207**Star][4m] [HTML] [ajinabraham/droid-application-fuzz-framework](https://github.com/ajinabraham/droid-application-fuzz-framework) Android application fuzzing framework with fuzzers and crash monitor.
- [**203**Star][2m] [Py] [jwilk/python-afl](https://github.com/jwilk/python-afl) American Fuzzy Lop fork server and instrumentation for pure-Python code


##### <a id="a9a8b68c32ede78eee0939cf16128300"></a>Collection


- [**3792**Star][1m] [PHP] [fuzzdb-project/fuzzdb](https://github.com/fuzzdb-project/fuzzdb) Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
- [**2864**Star][5m] [secfigo/awesome-fuzzing](https://github.com/secfigo/awesome-fuzzing) A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.


##### <a id="ff703caa7c3f7b197608abaa76b1a263"></a>Fuzzer


- [**2629**Star][17d] [Go] [google/syzkaller](https://github.com/google/syzkaller) syzkaller is an unsupervised coverage-guided kernel fuzzer
- [**2346**Star][1m] [Py] [xmendez/wfuzz](https://github.com/xmendez/wfuzz) Web application fuzzer
- [**1699**Star][21d] [C] [google/honggfuzz](https://github.com/google/honggfuzz) Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)
- [**1051**Star][2m] [Py] [googleprojectzero/domato](https://github.com/googleprojectzero/domato) DOM fuzzer






### <a id="41ae40ed61ab2b61f2971fea3ec26e7c"></a>Exploit


#### <a id="c83f77f27ccf5f26c8b596979d7151c3"></a>漏洞利用


- [**3933**Star][3m] [Py] [nullarray/autosploit](https://github.com/nullarray/autosploit) Automated Mass Exploiter
- [**3364**Star][1m] [C] [shellphish/how2heap](https://github.com/shellphish/how2heap) A repository for learning various heap exploitation techniques.
- [**2175**Star][10m] [JS] [secgroundzero/warberry](https://github.com/secgroundzero/warberry) WarBerryPi - Tactical Exploitation
- [**1448**Star][3m] [Py] [epinna/tplmap](https://github.com/epinna/tplmap) Server-Side Template Injection and Code Injection Detection and Exploitation Tool
- [**1180**Star][15d] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/NoCategory](#05ab1b75266fddafc7195f5b395e4d99) |[Tools/Database&&SQLAttack&&SQLInjection/NoSQL/NoCategory](#af0aaaf233cdff3a88d04556dc5871e0) |
- [**1080**Star][6m] [Go] [sensepost/ruler](https://github.com/sensepost/ruler) A tool to abuse Exchange services
- [**822**Star][1m] [Py] [nil0x42/phpsploit](https://github.com/nil0x42/phpsploit) Stealth post-exploitation framework
- [**818**Star][7m] [Shell] [niklasb/libc-database](https://github.com/niklasb/libc-database) Build a database of libc offsets to simplify exploitation
- [**797**Star][28d] [Ruby] [rastating/wordpress-exploit-framework](https://github.com/rastating/wordpress-exploit-framework) A Ruby framework designed to aid in the penetration testing of WordPress systems.
- [**792**Star][12d] [cveproject/cvelist](https://github.com/cveproject/cvelist) Pilot program for CVE submission through GitHub
- [**665**Star][10m] [JS] [theori-io/pwnjs](https://github.com/theori-io/pwnjs) A Javascript library for browser exploitation
- [**600**Star][5m] [Java] [sigploiter/sigploit](https://github.com/sigploiter/sigploit) SigPloit: Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
- [**568**Star][1y] [Py] [spencerdodd/kernelpop](https://github.com/spencerdodd/kernelpop) kernel privilege escalation enumeration and exploitation framework
- [**510**Star][8m] [Py] [dark-lbp/isf](https://github.com/dark-lbp/isf) ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python
- [**474**Star][25d] [C] [r0hi7/binexp](https://github.com/r0hi7/binexp) Linux Binary Exploitation
- [**449**Star][5m] [Py] [shellphish/rex](https://github.com/shellphish/rex) Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.
- [**429**Star][11m] [Py] [neohapsis/bbqsql](https://github.com/neohapsis/bbqsql) SQL Injection Exploitation Tool
- [**394**Star][20d] [Py] [corkami/collisions](https://github.com/corkami/collisions) Hash collisions and their exploitations
- [**378**Star][2m] [Py] [sab0tag3d/siet](https://github.com/sab0tag3d/siet) Smart Install Exploitation Tool
- [**346**Star][9m] [C] [wapiflapi/exrs](https://github.com/wapiflapi/exrs) Exercises for learning Reverse Engineering and Exploitation.
- [**345**Star][29d] [JS] [fsecurelabs/dref](https://github.com/FSecureLABS/dref) DNS Rebinding Exploitation Framework
- [**315**Star][1y] [C] [tharina/blackhoodie-2018-workshop](https://github.com/tharina/blackhoodie-2018-workshop) Slides and challenges for my binary exploitation workshop at BlackHoodie 2018.
- [**314**Star][13d] [Shell] [zmarch/orc](https://github.com/zmarch/orc) Orc is a post-exploitation framework for Linux written in Bash
- [**300**Star][4m] [JS] [vngkv123/asiagaming](https://github.com/vngkv123/asiagaming) Chrome, Safari Exploitation
- [**288**Star][9m] [Py] [immunit/drupwn](https://github.com/immunit/drupwn) Drupal enumeration & exploitation tool
- [**284**Star][1m] [xairy/vmware-exploitation](https://github.com/xairy/vmware-exploitation) A bunch of links related to VMware escape exploits
- [**282**Star][12m] [C] [str8outtaheap/heapwn](https://github.com/str8outtaheap/heapwn) Linux Heap Exploitation Practice
- [**280**Star][1y] [Py] [novicelive/bintut](https://github.com/novicelive/bintut) Teach you a binary exploitation for great good.
- [**273**Star][12m] [Py] [fox-it/aclpwn.py](https://github.com/fox-it/aclpwn.py) Active Directory ACL exploitation with BloodHound
- [**266**Star][22d] [Py] [0xinfection/xsrfprobe](https://github.com/0xinfection/xsrfprobe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- [**257**Star][3m] [HTML] [sp1d3r/swf_json_csrf](https://github.com/sp1d3r/swf_json_csrf) swf_json_csrf：简化基于 SWF的 JSON CSRF exploitation
- [**250**Star][7m] [Py] [xairy/easy-linux-pwn](https://github.com/xairy/easy-linux-pwn) A set of Linux binary exploitation tasks for beginners on various architectures
- [**243**Star][26d] [Py] [0xinfection/xsrfprobe](https://github.com/0xInfection/XSRFProbe) The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- [**231**Star][10m] [C] [r3x/how2kernel](https://github.com/r3x/how2kernel) This Repository aims at giving a basic idea about Kernel Exploitation.


#### <a id="5c1af335b32e43dba993fceb66c470bc"></a>Exp&&PoC


- [**1363**Star][1m] [Py] [bitsadmin/wesng](https://github.com/bitsadmin/wesng) Windows Exploit Suggester - Next Generation
- [**1353**Star][6m] [Py] [vulnerscom/getsploit](https://github.com/vulnerscom/getsploit) Command line utility for searching and downloading exploits
- [**1322**Star][4m] [Py] [lijiejie/githack](https://github.com/lijiejie/githack) A `.git` folder disclosure exploit
- [**1120**Star][4m] [Py] [qyriad/fusee-launcher](https://github.com/Qyriad/fusee-launcher) work-in-progress launcher for one of the Tegra X1 bootROM exploits
- [**930**Star][10m] [Shell] [1n3/findsploit](https://github.com/1n3/findsploit) Find exploits in local and online databases instantly
- [**918**Star][5m] [JS] [reswitched/pegaswitch](https://github.com/reswitched/pegaswitch) PegaSwitch is an exploit toolkit for the Nintendo Switch
- [**881**Star][3m] [C] [theofficialflow/h-encore](https://github.com/theofficialflow/h-encore) Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68
- [**711**Star][1y] [Py] [rfunix/pompem](https://github.com/rfunix/pompem) Find exploit tool
- [**707**Star][11m] [HTML] [juansacco/exploitpack](https://github.com/juansacco/exploitpack) Exploit Pack -The next generation exploit framework
- [**703**Star][4m] [Py] [rhinosecuritylabs/security-research](https://github.com/rhinosecuritylabs/security-research) Exploits written by the Rhino Security Labs team
- [**695**Star][6m] [C] [unamer/vmware_escape](https://github.com/unamer/vmware_escape) VMware Escape Exploit before VMware WorkStation 12.5.5
- [**681**Star][1y] [C] [saelo/pwn2own2018](https://github.com/saelo/pwn2own2018) A Pwn2Own exploit chain
- [**636**Star][4m] [smgorelik/windows-rce-exploits](https://github.com/smgorelik/windows-rce-exploits) The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.
- [**621**Star][4m] [C++] [eliboa/tegrarcmgui](https://github.com/eliboa/tegrarcmgui) C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)
- [**617**Star][4m] [Perl] [jondonas/linux-exploit-suggester-2](https://github.com/jondonas/linux-exploit-suggester-2) Next-Generation Linux Kernel Exploit Suggester
- [**608**Star][3m] [C] [matheus-garbelini/esp32_esp8266_attacks](https://github.com/matheus-garbelini/esp32_esp8266_attacks) Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Wireless&&WiFi&&AP&&802.11/NoCategory](#d4efda1853b2cb0909727188116a2a8c) |
- [**607**Star][8m] [Py] [al-azif/ps4-exploit-host](https://github.com/al-azif/ps4-exploit-host) Easy PS4 Exploit Hosting
- [**580**Star][1y] [JS] [cryptogenic/ps4-5.05-kernel-exploit](https://github.com/cryptogenic/ps4-5.05-kernel-exploit) A fully implemented kernel exploit for the PS4 on 5.05FW
- [**580**Star][10m] [mtivadar/windows10_ntfs_crash_dos](https://github.com/mtivadar/windows10_ntfs_crash_dos) PoC for a NTFS crash that I discovered, in various Windows versions
- [**552**Star][9m] [C] [t00sh/rop-tool](https://github.com/t00sh/rop-tool) A tool to help you write binary exploits
- [**544**Star][2m] [Py] [tarunkant/gopherus](https://github.com/tarunkant/gopherus) This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
- [**523**Star][5m] [Py] [bignerd95/chimay-red](https://github.com/bignerd95/chimay-red) Working POC of Mikrotik exploit from Vault 7 CIA Leaks
- [**489**Star][6m] [Py] [danigargu/heap-viewer](https://github.com/danigargu/heap-viewer) An IDA Pro plugin to examine the glibc heap, focused on exploit development
- [**489**Star][5m] [Py] [metachar/phonesploit](https://github.com/metachar/phonesploit) Using open Adb ports we can exploit a Andriod Device
- [**488**Star][7m] [Py] [lijiejie/ds_store_exp](https://github.com/lijiejie/ds_store_exp) A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.
- [**481**Star][5m] [PHP] [cfreal/exploits](https://github.com/cfreal/exploits) Some of my exploits.
- [**473**Star][2m] [JS] [acmesec/pocbox](https://github.com/Acmesec/PoCBox) PoCBox - 赏金猎人的脆弱性测试辅助平台（破300star写重构版本，400star免费线上版本开放【在线食用地址：由于经常被DDOS导致服务器资源恶意被占用 费用过大决定关闭服务 】，1000star开源重构全新版本！）
- [**472**Star][9m] [Py] [insecurityofthings/jackit](https://github.com/insecurityofthings/jackit) JackIt - Exploit Code for Mousejack
- [**435**Star][1y] [Py] [jfoote/exploitable](https://github.com/jfoote/exploitable) The 'exploitable' GDB plugin. I don't work at CERT anymore, but here is the original homepage:
- [**431**Star][9m] [Shell] [r00t-3xp10it/fakeimageexploiter](https://github.com/r00t-3xp10it/fakeimageexploiter) Use a Fake image.jpg to exploit targets (hide known file extensions)
- [**418**Star][11m] [Shell] [nilotpalbiswas/auto-root-exploit](https://github.com/nilotpalbiswas/auto-root-exploit) Auto Root Exploit Tool
- [**412**Star][3m] [Py] [misterch0c/malsploitbase](https://github.com/misterch0c/malsploitbase) Malware exploits
- [**402**Star][1y] [C] [ww9210/linux_kernel_exploits](https://github.com/ww9210/linux_kernel_exploits) Repo for FUZE project. I will also publish some Linux kernel LPE exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.
- [**390**Star][7m] [Py] [jm33-m0/massexpconsole](https://github.com/jm33-m0/mec) for concurrent exploiting
- [**383**Star][12m] [JS] [linushenze/webkit-regex-exploit](https://github.com/linushenze/webkit-regex-exploit) 
- [**378**Star][12m] [PHP] [bo0om/php_imap_open_exploit](https://github.com/bo0om/php_imap_open_exploit) Bypassing disabled exec functions in PHP (c) CRLF
- [**372**Star][2m] [PHP] [mm0r1/exploits](https://github.com/mm0r1/exploits) Pwn stuff.
- [**349**Star][1m] [Shell] [th3xace/sudo_killer](https://github.com/th3xace/sudo_killer) A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo
- [**348**Star][8m] [C] [p0cl4bs/kadimus](https://github.com/p0cl4bs/kadimus) Kadimus is a tool to check sites to lfi vulnerability , and also exploit it...
- [**339**Star][4m] [C] [theofficialflow/trinity](https://github.com/theofficialflow/trinity) Trinity Exploit - Emulator Escape
- [**331**Star][6m] [C++] [thezdi/poc](https://github.com/thezdi/poc) Proofs-of-concept
- [**305**Star][1y] [Shell] [jas502n/st2-057](https://github.com/jas502n/st2-057) St2-057 Poc Example
- [**302**Star][3m] [PowerShell] [kevin-robertson/powermad](https://github.com/kevin-robertson/powermad) PowerShell MachineAccountQuota and DNS exploit tools
- [**300**Star][1m] [Py] [admintony/svnexploit](https://github.com/admintony/svnexploit) SvnExploit支持SVN源代码泄露全版本Dump源码
- [**276**Star][1m] [C] [0xdea/exploits](https://github.com/0xdea/exploits) A handy collection of my public exploits, all in one place.
- [**275**Star][3m] [Shell] [cryptolok/aslray](https://github.com/cryptolok/aslray) Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying
- [**269**Star][1y] [Py] [mwrlabs/wepwnise](https://github.com/FSecureLABS/wePWNise) WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
- [**266**Star][4m] [Java] [c0ny1/fastjsonexploit](https://github.com/c0ny1/fastjsonexploit) Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
- [**263**Star][12m] [Py] [c0rel0ader/east](https://github.com/c0rel0ader/east) Exploits and Security Tools Framework 2.0.1
- [**251**Star][4m] [C] [bcoles/kernel-exploits](https://github.com/bcoles/kernel-exploits) Various kernel exploits
- [**245**Star][9m] [Visual Basic] [houjingyi233/office-exploit-case-study](https://github.com/houjingyi233/office-exploit-case-study) 
- [**234**Star][19d] [C#] [tyranid/exploitremotingservice](https://github.com/tyranid/exploitremotingservice) A tool to exploit .NET Remoting Services
- [**219**Star][8m] [Py] [coalfire-research/deathmetal](https://github.com/coalfire-research/deathmetal) Red team & penetration testing tools to exploit the capabilities of Intel AMT
- [**218**Star][3m] [PowerShell] [byt3bl33d3r/offensivedlr](https://github.com/byt3bl33d3r/offensivedlr) Toolbox containing research notes & PoC code for weaponizing .NET's DLR
- [**218**Star][1m] [C++] [soarqin/finalhe](https://github.com/soarqin/finalhe) Final h-encore, a tool to push h-encore exploit for PS VITA/PS TV automatically
- [**215**Star][3m] [C] [semmle/securityexploits](https://github.com/semmle/securityexploits) PoC exploits from the Semmle Security Research team
- [**210**Star][1y] [Py] [kurobeats/fimap](https://github.com/kurobeats/fimap) fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.
- [**207**Star][1y] [C] [crozone/spectrepoc](https://github.com/crozone/spectrepoc) Proof of concept code for the Spectre CPU exploit.
- [**201**Star][6m] [Py] [invictus1306/beebug](https://github.com/invictus1306/beebug) A tool for checking exploitability




### <a id="5d7191f01544a12bdaf1315c3e986dff"></a>XSS&&XXE


#### <a id="493e36d0ceda2fb286210a27d617c44d"></a>Collection


- [**2671**Star][5m] [JS] [s0md3v/awesomexss](https://github.com/s0md3v/AwesomeXSS) Awesome XSS stuff
- [**454**Star][1y] [HTML] [metnew/uxss-db](https://github.com/metnew/uxss-db) 


#### <a id="648e49b631ea4ba7c128b53764328c39"></a>NoCategory


- [**7288**Star][25d] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
    - Also In Section: [Tools/Scanner&&SecurityScan&&AppScan/NoCategory](#de63a029bda6a7e429af272f291bb769) |
- [**1641**Star][10m] [JS] [evilcos/xssor2](https://github.com/evilcos/xssor2) XSS'OR - Hack with JavaScript.
- [**1318**Star][3m] [Go] [microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
- [**705**Star][2m] [JS] [mandatoryprogrammer/xsshunter](https://github.com/mandatoryprogrammer/xsshunter) The XSS Hunter service - a portable version of XSSHunter.com
- [**683**Star][18d] [C#] [mganss/htmlsanitizer](https://github.com/mganss/htmlsanitizer) Cleans HTML to avoid XSS attacks
- [**674**Star][21d] [PHP] [ssl/ezxss](https://github.com/ssl/ezxss) ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- [**638**Star][10m] [HTML] [bl4de/security_whitepapers](https://github.com/bl4de/security_whitepapers) Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi
- [**504**Star][4m] [Py] [opensec-cn/vtest](https://github.com/opensec-cn/vtest) 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。
- [**495**Star][4m] [PHP] [nettitude/xss_payloads](https://github.com/nettitude/xss_payloads) Exploitation for XSS
- [**477**Star][1y] [JS] [koto/xsschef](https://github.com/koto/xsschef) Chrome extension Exploitation Framework
- [**460**Star][12m] [C] [laruence/taint](https://github.com/laruence/taint) Taint is a PHP extension, used for detecting XSS codes
- [**334**Star][12m] [Py] [varbaek/xsser](https://github.com/varbaek/xsser) From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
- [**325**Star][7m] [Py] [s0md3v/jshell](https://github.com/s0md3v/JShell) JShell - Get a JavaScript shell with XSS.
- [**289**Star][1m] [JS] [wicg/trusted-types](https://github.com/w3c/webappsec-trusted-types) A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
- [**287**Star][13d] [Py] [stamparm/dsxs](https://github.com/stamparm/dsxs) Damn Small XSS Scanner
- [**286**Star][13d] [PHP] [voku/anti-xss](https://github.com/voku/anti-xss) 
- [**251**Star][3m] [PHP] [dotboris/vuejs-serverside-template-xss](https://github.com/dotboris/vuejs-serverside-template-xss) Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability
- [**243**Star][4m] [JS] [lewisardern/bxss](https://github.com/lewisardern/bxss) bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- [**241**Star][2m] [JS] [antswordproject/ant](https://github.com/antswordproject/ant) 实时上线的 XSS 盲打平台




### <a id="f799ff186643edfcf7ac1e94f08ba018"></a>WellKnownVulnerability&&CVE&&SpecificProduct


#### <a id="309751ccaee413cbf35491452d80480f"></a>NoCategory


- [**1066**Star][28d] [Go] [neex/phuip-fpizdam](https://github.com/neex/phuip-fpizdam) Exploit for CVE-2019-11043
- [**886**Star][1y] [Py] [nixawk/labs](https://github.com/nixawk/labs) Vulnerability Labs for security analysis
- [**601**Star][1y] [C] [scottybauer/android_kernel_cve_pocs](https://github.com/scottybauer/android_kernel_cve_pocs) A list of my CVE's with POCs
- [**562**Star][10m] [Py] [fs0c131y/esfileexploreropenportvuln](https://github.com/fs0c131y/esfileexploreropenportvuln) ES File Explorer Open Port Vulnerability - CVE-2019-6447
- [**456**Star][3m] [Py] [blacknbunny/libssh-authentication-bypass](https://github.com/blacknbunny/CVE-2018-10933) Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)
- [**449**Star][6m] [Py] [n1xbyte/cve-2019-0708](https://github.com/n1xbyte/cve-2019-0708) dump
- [**394**Star][9m] [Ruby] [dreadlocked/drupalgeddon2](https://github.com/dreadlocked/drupalgeddon2) Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
- [**371**Star][1y] [Py] [rhynorater/cve-2018-15473-exploit](https://github.com/rhynorater/cve-2018-15473-exploit) Exploit written in Python for CVE-2018-15473 with threading and export formats
- [**370**Star][9m] [Py] [wyatu/cve-2018-20250](https://github.com/wyatu/cve-2018-20250) exp for
- [**357**Star][9m] [Go] [frichetten/cve-2019-5736-poc](https://github.com/frichetten/cve-2019-5736-poc) PoC for CVE-2019-5736
- [**339**Star][1m] [PHP] [opsxcq/exploit-cve-2016-10033](https://github.com/opsxcq/exploit-cve-2016-10033) PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container
- [**318**Star][8m] [Py] [a2u/cve-2018-7600](https://github.com/a2u/cve-2018-7600) 
- [**300**Star][10m] [Py] [basucert/winboxpoc](https://github.com/basucert/winboxpoc) Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
- [**299**Star][1y] [Py] [bhdresh/cve-2017-8759](https://github.com/bhdresh/cve-2017-8759) Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
- [**299**Star][27d] [Py] [rhinosecuritylabs/cves](https://github.com/rhinosecuritylabs/cves) A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
- [**282**Star][4m] [Py] [lufeirider/cve-2019-2725](https://github.com/lufeirider/cve-2019-2725) CVE-2019-2725 命令回显
- [**281**Star][1y] [Py] [mazen160/struts-pwn_cve-2018-11776](https://github.com/mazen160/struts-pwn_cve-2018-11776) An exploit for Apache Struts CVE-2018-11776
- [**280**Star][4m] [marcinguy/cve-2019-2107](https://github.com/marcinguy/cve-2019-2107) CVE-2019-2107
- [**276**Star][11m] [Py] [wyatu/cve-2018-8581](https://github.com/wyatu/cve-2018-8581) CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability
- [**269**Star][5m] [Py] [ridter/exchange2domain](https://github.com/ridter/exchange2domain) CVE-2018-8581
- [**259**Star][1y] [C++] [alpha1ab/cve-2018-8120](https://github.com/alpha1ab/cve-2018-8120) CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7
- [**253**Star][1m] [C] [a2nkf/macos-kernel-exploit](https://github.com/a2nkf/macos-kernel-exploit) macOS Kernel Exploit for CVE-2019-8781. Credit for the bug goes to
- [**252**Star][29d] [Vue] [nluedtke/linux_kernel_cves](https://github.com/nluedtke/linux_kernel_cves) Tracking CVEs for the linux Kernel
- [**243**Star][3m] [Shell] [projectzeroindia/cve-2019-11510](https://github.com/projectzeroindia/cve-2019-11510) Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
- [**238**Star][8m] [JS] [exodusintel/cve-2019-5786](https://github.com/exodusintel/cve-2019-5786) FileReader Exploit
- [**237**Star][10m] [C] [geosn0w/osirisjailbreak12](https://github.com/geosn0w/osirisjailbreak12) iOS 12.0 -> 12.1.2 Incomplete Osiris Jailbreak with CVE-2019-6225 by GeoSn0w (FCE365)
- [**234**Star][9m] [JS] [adamyordan/cve-2019-1003000-jenkins-rce-poc](https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc) Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)
- [**211**Star][12m] [Py] [evict/poc_cve-2018-1002105](https://github.com/evict/poc_cve-2018-1002105) PoC for CVE-2018-1002105.
- [**203**Star][8m] [C++] [rogue-kdc/cve-2019-0841](https://github.com/rogue-kdc/cve-2019-0841) PoC code for CVE-2019-0841 Privilege Escalation vulnerability
- [**200**Star][1y] [C] [bazad/blanket](https://github.com/bazad/blanket) CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.
- [**200**Star][2m] [Go] [kotakanbe/go-cve-dictionary](https://github.com/kotakanbe/go-cve-dictionary) Build a local copy of CVE (NVD and Japanese JVN). Server mode for easy querying.


#### <a id="33386e1e125e0653f7a3c8b8aa75c921"></a>CVE


- [**1058**Star][3m] [C] [zerosum0x0/cve-2019-0708](https://github.com/zerosum0x0/cve-2019-0708) Scanner PoC for CVE-2019-0708 RDP RCE vuln


#### <a id="67f7ce74d12e16cdee4e52c459afcba2"></a>Spectre&&Meltdown


- [**3728**Star][29d] [C] [iaik/meltdown](https://github.com/iaik/meltdown) This repository contains several applications, demonstrating the Meltdown bug.
- [**2999**Star][2m] [Shell] [speed47/spectre-meltdown-checker](https://github.com/speed47/spectre-meltdown-checker) Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD
- [**531**Star][1y] [C] [ionescu007/specucheck](https://github.com/ionescu007/specucheck) SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)
- [**249**Star][5m] [nsacyber/hardware-and-firmware-security-guidance](https://github.com/nsacyber/Hardware-and-Firmware-Security-Guidance) Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber


#### <a id="10baba9b8e7a2041ad6c55939cf9691f"></a>BlueKeep


- [**973**Star][3m] [Py] [ekultek/bluekeep](https://github.com/ekultek/bluekeep) Proof of concept for CVE-2019-0708
- [**633**Star][6m] [C] [robertdavidgraham/rdpscan](https://github.com/robertdavidgraham/rdpscan) A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.
- [**303**Star][4m] [Py] [algo7/bluekeep_cve-2019-0708_poc_to_exploit](https://github.com/algo7/bluekeep_cve-2019-0708_poc_to_exploit) Porting BlueKeep PoC from
- [**267**Star][6m] [Py] [k8gege/cve-2019-0708](https://github.com/k8gege/cve-2019-0708) 3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)


#### <a id="a6ebcba5cc1b4d2e3a72509b47b84ade"></a>Heartbleed




#### <a id="d84e7914572f626b338beeb03ea613de"></a>DirtyCow




#### <a id="dacdbd68d9ca31cee9688d6972698f63"></a>Blueborne






### <a id="79ed781159b7865dc49ffb5fe2211d87"></a>CSRF


- [**1668**Star][4m] [JS] [expressjs/csurf](https://github.com/expressjs/csurf) CSRF token middleware
- [**220**Star][11m] [PHP] [paragonie/anti-csrf](https://github.com/paragonie/anti-csrf) Full-Featured Anti-CSRF Library


### <a id="edbf1e5f4d570ed44080b30bc782c350"></a>容器&&Docker


- [**5906**Star][13d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
- [**5905**Star][13d] [Go] [quay/clair](https://github.com/quay/clair) Vulnerability Static Analysis for Containers
- [**661**Star][1y] [Shell] [c0ny1/vulstudy](https://github.com/c0ny1/vulstudy) 使用docker快速搭建各大漏洞学习平台，目前可以一键搭建12个平台。
- [**636**Star][13d] [Go] [ullaakut/gorsair](https://github.com/ullaakut/gorsair) Gorsair hacks its way into remote docker containers that expose their APIs
- [**602**Star][6m] [Py] [eliasgranderubio/dagda](https://github.com/eliasgranderubio/dagda) a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities
- [**475**Star][5m] [Go] [arminc/clair-scanner](https://github.com/arminc/clair-scanner) Docker containers vulnerability scan
- [**332**Star][6m] [Dockerfile] [mykings/docker-vulnerability-environment](https://github.com/mykings/docker-vulnerability-environment) Use the docker to build a vulnerability environment
- [**299**Star][1y] [Dockerfile] [ston3o/docker-hacklab](https://github.com/ston3o/docker-hacklab) My personal hacklab, create your own.


### <a id="9f068ea97c2e8865fac21d6fc50f86b3"></a>漏洞管理


- [**2381**Star][2m] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) Collaborative Penetration Test and Vulnerability Management Platform
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/AllInOne&&Framework](#2051fd9e171f2698d8e7486e3dd35d87) |
- [**1177**Star][17d] [Py] [cve-search/cve-search](https://github.com/cve-search/cve-search) cve-search - a tool to perform local searches for known vulnerabilities


### <a id="4c80728d087c2f08c6012afd2377d544"></a>漏洞数据库


- [**4770**Star][13d] [C] [offensive-security/exploitdb](https://github.com/offensive-security/exploitdb) The official Exploit Database repository
- [**1265**Star][2m] [PHP] [friendsofphp/security-advisories](https://github.com/friendsofphp/security-advisories) A database of PHP security advisories


### <a id="13fb2b7d1617dd6e0f503f52b95ba86b"></a>CORS


- [**2716**Star][8m] [JS] [cyu/rack-cors](https://github.com/cyu/rack-cors) Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.


### <a id="0af37d7feada6cb8ccd0c81097d0f115"></a>漏洞分析






***


## <a id="7e840ca27f1ff222fd25bc61a79b07ba"></a>SpecificTarget


### <a id="eb2d1ffb231cee014ed24d59ca987da2"></a>NoCategory




### <a id="c71ad1932bbf9c908af83917fe1fd5da"></a>AWS


- [**4138**Star][3m] [Py] [dxa4481/trufflehog](https://github.com/dxa4481/trufflehog) Searches through git repositories for high entropy strings and secrets, digging deep into commit history
- [**3130**Star][17d] [Shell] [toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
- [**2758**Star][12d] [Go] [99designs/aws-vault](https://github.com/99designs/aws-vault) A vault for securely storing and accessing AWS credentials in development environments
- [**2633**Star][3m] [Java] [teevity/ice](https://github.com/teevity/ice) AWS Usage Tool
- [**2347**Star][4m] [Go] [mlabouardy/komiser](https://github.com/mlabouardy/komiser) 
- [**1892**Star][19d] [Py] [mozilla/mozdef](https://github.com/mozilla/mozdef) MozDef: Mozilla Enterprise Defense Platform
- [**1805**Star][20d] [Shell] [toniblyx/prowler](https://github.com/toniblyx/prowler) AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide:
- [**1597**Star][1y] [Py] [nccgroup/scout2](https://github.com/nccgroup/Scout2) Security auditing tool for AWS environments
- [**1374**Star][11m] [Py] [eth0izzle/bucket-stream](https://github.com/eth0izzle/bucket-stream) Find interesting Amazon S3 Buckets by watching certificate transparency logs.
- [**1161**Star][17d] [Py] [lyft/cartography](https://github.com/lyft/cartography) Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
- [**1105**Star][3m] [Py] [rhinosecuritylabs/pacu](https://github.com/rhinosecuritylabs/pacu) The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
- [**887**Star][2m] [Py] [sa7mon/s3scanner](https://github.com/sa7mon/s3scanner) Scan for open AWS S3 buckets and dump the contents
- [**824**Star][5m] [Py] [jordanpotti/awsbucketdump](https://github.com/jordanpotti/awsbucketdump) Security Tool to Look For Interesting Files in S3 Buckets
- [**756**Star][28d] [Go] [rebuy-de/aws-nuke](https://github.com/rebuy-de/aws-nuke) Nuke a whole AWS account and delete all its resources.
- [**749**Star][1m] [Java] [tmobile/pacbot](https://github.com/tmobile/pacbot) PacBot (Policy as Code Bot)
- [**592**Star][17d] [Shell] [securityftw/cs-suite](https://github.com/securityftw/cs-suite) Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
- [**525**Star][25d] [Ruby] [stelligent/cfn_nag](https://github.com/stelligent/cfn_nag) Linting tool for CloudFormation templates
- [**490**Star][16d] [Py] [salesforce/policy_sentry](https://github.com/salesforce/policy_sentry) IAM Least Privilege Policy Generator
- [**480**Star][6m] [Py] [netflix-skunkworks/diffy](https://github.com/netflix-skunkworks/diffy) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
- [**433**Star][7m] [Py] [ustayready/fireprox](https://github.com/ustayready/fireprox) AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
- [**391**Star][3m] [Py] [duo-labs/cloudtracker](https://github.com/duo-labs/cloudtracker) CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
- [**382**Star][20d] [Py] [riotgames/cloud-inquisitor](https://github.com/riotgames/cloud-inquisitor) Enforce ownership and data security within AWS
- [**365**Star][6m] [Py] [carnal0wnage/weirdaal](https://github.com/carnal0wnage/weirdaal) WeirdAAL (AWS Attack Library)
- [**363**Star][10m] [Py] [awslabs/aws-security-automation](https://github.com/awslabs/aws-security-automation) Collection of scripts and resources for DevSecOps and Automated Incident Response Security
- [**311**Star][1y] [Py] [securing/dumpsterdiver](https://github.com/securing/dumpsterdiver) Tool to search secrets in various filetypes.
- [**273**Star][7m] [Py] [cesar-rodriguez/terrascan](https://github.com/cesar-rodriguez/terrascan) Collection of security and best practice test for static code analysis of terraform templates
- [**264**Star][23d] [Py] [nccgroup/pmapper](https://github.com/nccgroup/pmapper) A tool for quickly evaluating IAM permissions in AWS.
- [**224**Star][29d] [HCL] [nozaq/terraform-aws-secure-baseline](https://github.com/nozaq/terraform-aws-secure-baseline) Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.
- [**216**Star][26d] [Dockerfile] [thinkst/canarytokens-docker](https://github.com/thinkst/canarytokens-docker) Docker configuration to quickly setup your own Canarytokens.
- [**202**Star][2m] [Py] [voulnet/barq](https://github.com/voulnet/barq) barq: The AWS Cloud Post Exploitation framework!


### <a id="88716f4591b1df2149c2b7778d15d04e"></a>Phoenix


- [**810**Star][16d] [Elixir] [nccgroup/sobelow](https://github.com/nccgroup/sobelow) Security-focused static analysis for the Phoenix Framework


### <a id="4fd96686a470ff4e9e974f1503d735a2"></a>Kubernetes


- [**1761**Star][27d] [Py] [aquasecurity/kube-hunter](https://github.com/aquasecurity/kube-hunter) Hunt for security weaknesses in Kubernetes clusters
- [**379**Star][2m] [Shell] [kabachook/k8s-security](https://github.com/kabachook/k8s-security) Kubernetes security notes and best practices


### <a id="786201db0bcc40fdf486cee406fdad31"></a>Azure




### <a id="40dbffa18ec695a618eef96d6fd09176"></a>Nginx


- [**6164**Star][1m] [Py] [yandex/gixy](https://github.com/yandex/gixy) Nginx configuration static analyzer


### <a id="6b90a3993f9846922396ec85713dc760"></a>ELK


- [**1875**Star][18d] [CSS] [cyb3rward0g/helk](https://github.com/cyb3rward0g/helk) The Hunting ELK




***


## <a id="d55d9dfd081aa2a02e636b97ca1bad0b"></a>IoT&&EmbedDevice&&Router&&Switch&&SmartDevice&&Printer


### <a id="cda63179d132f43441f8844c5df10024"></a>NoCategory


- [**1119**Star][6m] [nebgnahz/awesome-iot-hacks](https://github.com/nebgnahz/awesome-iot-hacks) A Collection of Hacks in IoT Space so that we can address them (hopefully).
- [**817**Star][14d] [v33ru/iotsecurity101](https://github.com/v33ru/iotsecurity101) From IoT Pentesting to IoT Security
- [**791**Star][30d] [Py] [ct-open-source/tuya-convert](https://github.com/ct-open-source/tuya-convert) A collection of scripts to flash Tuya IoT devices to alternative firmwares
- [**582**Star][8m] [Py] [woj-ciech/danger-zone](https://github.com/woj-ciech/danger-zone) Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.
- [**465**Star][2m] [Py] [iti/ics-security-tools](https://github.com/iti/ics-security-tools) Tools, tips, tricks, and more for exploring ICS Security.
- [**437**Star][18d] [Py] [rabobank-cdc/dettect](https://github.com/rabobank-cdc/dettect) Detect Tactics, Techniques & Combat Threats
- [**330**Star][1y] [Py] [vmware/liota](https://github.com/vmware/liota) 
- [**307**Star][1m] [Java] [erudika/para](https://github.com/erudika/para) Open source back-end server for web, mobile and IoT. The backend for busy developers. (self-hosted or hosted)


### <a id="72bffacc109d51ea286797a7d5079392"></a>Printer




### <a id="c9fd442ecac4e22d142731165b06b3fe"></a>Router&&Switch




### <a id="3d345feb9fee1c101aea3838da8cbaca"></a>EmbedDevice


- [**7428**Star][3m] [Py] [threat9/routersploit](https://github.com/threat9/routersploit) Exploitation Framework for Embedded Devices




***


## <a id="1a9934198e37d6d06b881705b863afc8"></a>Communication&&Proxy&&RverseProxy&&Tunnel


### <a id="56acb7c49c828d4715dce57410d490d1"></a>NoCategory


- [**19800**Star][2m] [Shell] [streisandeffect/streisand](https://github.com/StreisandEffect/streisand) Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
- [**16743**Star][18d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
    - Also In Section: [Tools/Network&&Sniff&&Mitm/MITM](#11c73d3e2f71f3914a3bca35ba90de36) |
- [**10723**Star][13d] [getlantern/download](https://github.com/getlantern/download) 蓝灯Windows下载
- [**5481**Star][3m] [C] [rofl0r/proxychains-ng](https://github.com/rofl0r/proxychains-ng) proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
- [**4915**Star][13d] [Go] [dnscrypt/dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy) dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
- [**4662**Star][28d] [Go] [alexellis/inlets](https://github.com/inlets/inlets) Expose your local endpoints to the Internet
- [**4468**Star][22d] [C] [jedisct1/dsvpn](https://github.com/jedisct1/dsvpn) A Dead Simple VPN.
- [**4223**Star][5m] [Go] [ginuerzh/gost](https://github.com/ginuerzh/gost) GO Simple Tunnel - a simple tunnel written in golang
- [**4039**Star][4m] [Py] [spiderclub/haipproxy](https://github.com/spiderclub/haipproxy) 
- [**3592**Star][2m] [hq450/fancyss_history_package](https://github.com/hq450/fancyss_history_package) 科学上网插件的离线安装包储存在这里
- [**3348**Star][4m] [Go] [jpillora/chisel](https://github.com/jpillora/chisel) A fast TCP tunnel over HTTP
- [**2804**Star][8m] [C++] [wangyu-/udpspeeder](https://github.com/wangyu-/udpspeeder) A Tunnel which Improves your Network Quality on a High-latency Lossy Link by using Forward Error Correction,for All Traffics(TCP/UDP/ICMP)
- [**2468**Star][3m] [C] [yrutschle/sslh](https://github.com/yrutschle/sslh) Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)
- [**2450**Star][17d] [Shell] [teddysun/across](https://github.com/teddysun/across) Across the Great Wall we can reach every corner in the world
- [**2352**Star][6m] [Lua] [snabbco/snabb](https://github.com/snabbco/snabb) Snabb: Simple and fast packet networking
- [**2133**Star][1m] [Go] [mmatczuk/go-http-tunnel](https://github.com/mmatczuk/go-http-tunnel) Fast and secure tunnels over HTTP/2
- [**1874**Star][4m] [C] [darkk/redsocks](https://github.com/darkk/redsocks) transparent TCP-to-proxy redirector
- [**1844**Star][1y] [Py] [aploium/zmirror](https://github.com/aploium/zmirror) The next-gen reverse proxy for full site mirroring
- [**1813**Star][3m] [C] [tinyproxy/tinyproxy](https://github.com/tinyproxy/tinyproxy) tinyproxy - a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems
- [**1678**Star][9m] [Py] [constverum/proxybroker](https://github.com/constverum/proxybroker) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS
- [**1665**Star][4m] [C] [networkprotocol/netcode.io](https://github.com/networkprotocol/netcode.io) A protocol for secure client/server connections over UDP
- [**1611**Star][6m] [Go] [sipt/shuttle](https://github.com/sipt/shuttle) A web proxy in Golang with amazing features.
- [**1495**Star][1m] [C] [ntop/n2n](https://github.com/ntop/n2n) Peer-to-peer VPN
- [**1448**Star][7m] [C++] [wangyu-/tinyfecvpn](https://github.com/wangyu-/tinyfecvpn) A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.
- [**1334**Star][1m] [Go] [davrodpin/mole](https://github.com/davrodpin/mole) cli app to create ssh tunnels
- [**1308**Star][12m] [C] [madeye/proxydroid](https://github.com/madeye/proxydroid) Global Proxy for Android
- [**1222**Star][4m] [JS] [bubenshchykov/ngrok](https://github.com/bubenshchykov/ngrok) Expose your localhost to the web. Node wrapper for ngrok.
- [**1199**Star][21d] [Objective-C] [onionbrowser/onionbrowser](https://github.com/onionbrowser/onionbrowser) An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
- [**1048**Star][5m] [C] [tcurdt/iproxy](https://github.com/tcurdt/iproxy) Let's you connect your laptop to the iPhone to surf the web.
- [**1042**Star][28d] [Go] [pusher/oauth2_proxy](https://github.com/pusher/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other providers. #Hacktoberfest
- [**999**Star][7m] [Go] [adtac/autovpn](https://github.com/adtac/autovpn) THIS PROJECT IS UNMAINTAINED.
- [**946**Star][9m] [JS] [lukechilds/reverse-shell](https://github.com/lukechilds/reverse-shell) Reverse Shell as a Service
- [**927**Star][3m] [Py] [christophetd/cloudflair](https://github.com/christophetd/cloudflair) a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should
- [**836**Star][2m] [Py] [anorov/pysocks](https://github.com/anorov/pysocks) A SOCKS proxy client and wrapper for Python.
- [**810**Star][1m] [Go] [henson/proxypool](https://github.com/henson/proxypool) Golang实现的IP代理池
- [**790**Star][3m] [Py] [secforce/tunna](https://github.com/secforce/tunna) Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.
- [**753**Star][1m] [C#] [justcoding121/titanium-web-proxy](https://github.com/justcoding121/titanium-web-proxy) A cross-platform asynchronous HTTP(S) proxy server in C#.
- [**738**Star][30d] [Shell] [zfl9/ss-tproxy](https://github.com/zfl9/ss-tproxy) SS/SSR/V2Ray/Socks5 透明代理 for Linux
- [**737**Star][1m] [C#] [damianh/proxykit](https://github.com/damianh/proxykit) A toolkit to create code-first HTTP reverse proxies on ASP.NET Core
- [**674**Star][1m] [Go] [dliv3/venom](https://github.com/dliv3/venom) Venom - A Multi-hop Proxy for Penetration Testers
- [**674**Star][24d] [JS] [mellow-io/mellow](https://github.com/mellow-io/mellow) Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux.
- [**664**Star][19d] [Kotlin] [mygod/vpnhotspot](https://github.com/mygod/vpnhotspot) Share your VPN connection over hotspot or repeater! (root required)
- [**651**Star][27d] [Py] [abhinavsingh/proxy.py](https://github.com/abhinavsingh/proxy.py) ⚡⚡⚡Fast, Lightweight, Programmable, TLS interception capable proxy server for your Home and Application debugging, testing and development
- [**616**Star][4m] [JS] [derhuerst/tcp-over-websockets](https://github.com/derhuerst/tcp-over-websockets) Tunnel TCP through WebSockets.
- [**574**Star][4m] [Py] [trustedsec/trevorc2](https://github.com/trustedsec/trevorc2) TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.
- [**568**Star][12d] [Go] [cloudflare/cloudflared](https://github.com/cloudflare/cloudflared) Argo Tunnel client
- [**558**Star][8m] [JS] [blinksocks/blinksocks](https://github.com/blinksocks/blinksocks) A framework for building composable proxy protocol stack.
- [**556**Star][27d] [clarketm/proxy-list](https://github.com/clarketm/proxy-list) A list of free, public, forward proxy servers. UPDATED DAILY!
- [**545**Star][1y] [Py] [fate0/getproxy](https://github.com/fate0/getproxy) getproxy 是一个抓取发放代理网站，获取 http/https 代理的程序
- [**513**Star][10m] [Erlang] [heroku/vegur](https://github.com/heroku/vegur) Vegur: HTTP Proxy Library
- [**473**Star][1y] [Go] [yinqiwen/gsnova](https://github.com/yinqiwen/gsnova) Private proxy solution & network troubleshooting tool.
- [**449**Star][28d] [Py] [aidaho12/haproxy-wi](https://github.com/aidaho12/haproxy-wi) Web interface for managing Haproxy servers
- [**397**Star][9m] [Go] [evilsocket/shellz](https://github.com/evilsocket/shellz) shellz is a small utility to track and control your ssh, telnet, web and custom shells and tunnels.
- [**382**Star][1y] [Ruby] [aphyr/tund](https://github.com/aphyr/tund) SSH reverse tunnel daemon
- [**361**Star][1m] [Py] [lyft/metadataproxy](https://github.com/lyft/metadataproxy) A proxy for AWS's metadata service that gives out scoped IAM credentials from STS
- [**355**Star][1y] [C] [emptymonkey/revsh](https://github.com/emptymonkey/revsh) A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.
- [**345**Star][6m] [Go] [coreos/jwtproxy](https://github.com/coreos/jwtproxy) An HTTP-Proxy that adds AuthN through JWTs
- [**336**Star][8m] [Py] [iphelix/dnschef](https://github.com/iphelix/dnschef) DNSChef - DNS proxy for Penetration Testers and Malware Analysts
- [**331**Star][6m] [Py] [fbkcs/thunderdns](https://github.com/fbkcs/thunderdns) This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.
- [**325**Star][4m] [Go] [sysdream/hershell](https://github.com/sysdream/hershell) Hershell is a simple TCP reverse shell written in Go.
- [**320**Star][9m] [JS] [mhzed/wstunnel](https://github.com/mhzed/wstunnel) tunnel over websocket
- [**301**Star][4m] [Py] [rootviii/proxy_requests](https://github.com/rootviii/proxy_requests) a class that uses scraped proxies to make an http GET/POST request (Python requests)
- [**293**Star][2m] [JS] [bettercap/caplets](https://github.com/bettercap/caplets) bettercap scripts (caplets) and proxy modules.
- [**290**Star][8m] [C] [basil00/reqrypt](https://github.com/basil00/reqrypt) A censorship circumvention tool
- [**289**Star][2m] [Py] [covertcodes/multitun](https://github.com/covertcodes/multitun) Tunnel arbitrary traffic through an innocuous WebSocket. Clients can 'see' each other, resulting in a stealth WebSocket VPN.
- [**278**Star][11m] [C] [dgoulet/torsocks](https://github.com/dgoulet/torsocks) Library to torify application - NOTE: upstream has been moved to
- [**276**Star][5m] [Py] [mthbernardes/rsg](https://github.com/mthbernardes/rsg) ReverShellGenerator - A tool to generate various ways to do a reverse shell
- [**273**Star][12d] [a2u/free-proxy-list](https://github.com/a2u/free-proxy-list) 
- [**273**Star][9m] [Py] [chenjiandongx/async-proxy-pool](https://github.com/chenjiandongx/async-proxy-pool) 
- [**272**Star][4m] [Go] [suyashkumar/ssl-proxy](https://github.com/suyashkumar/ssl-proxy) 
- [**257**Star][8m] [C] [rofl0r/microsocks](https://github.com/rofl0r/microsocks) tiny, portable SOCKS5 server with very moderate resource usage
- [**254**Star][3m] [Py] [fwkz/riposte](https://github.com/fwkz/riposte) Python package for wrapping applications inside a tailored interactive shell
- [**245**Star][4m] [Shell] [thesecondsun/revssl](https://github.com/thesecondsun/revssl) A simple script that automates generation of OpenSSL reverse shells
- [**242**Star][17d] [Go] [adguardteam/dnsproxy](https://github.com/adguardteam/dnsproxy) Simple DNS proxy with DoH, DoT, and DNSCrypt support
- [**242**Star][4m] [Go] [lesnuages/hershell](https://github.com/lesnuages/hershell) Multiplatform reverse shell generator
- [**241**Star][9m] [C] [pegasuslab/ghosttunnel](https://github.com/PegasusLab/GhostTunnel) GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.
- [**236**Star][11m] [Go] [fardog/secureoperator](https://github.com/fardog/secureoperator) A DNS-protocol proxy for DNS-over-HTTPS providers, such as Google and Cloudflare
- [**224**Star][1m] [Ruby] [zt2/sqli-hunter](https://github.com/zt2/sqli-hunter) SQLi-Hunter is a simple HTTP proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
- [**216**Star][1y] [PHP] [softius/php-cross-domain-proxy](https://github.com/softius/php-cross-domain-proxy) PHP Proxy for Cross Domain Requests
- [**213**Star][8m] [Go] [joncooperworks/judas](https://github.com/joncooperworks/judas) a phishing proxy
- [**207**Star][9m] [Go] [justmao945/mallory](https://github.com/justmao945/mallory) HTTP/HTTPS proxy over SSH
- [**202**Star][1y] [C#] [damonmohammadbagher/nativepayload_dns](https://github.com/damonmohammadbagher/nativepayload_dns) C# code for Transferring Backdoor Payloads by DNS Traffic and Bypassing Anti-viruses


### <a id="837c9f22a3e1bb2ce29a0fb2bcd90b8f"></a>GFW


#### <a id="fe72fb9498defbdbb98448511cd1eaca"></a>NoCategory


- [**2918**Star][11m] [Shell] [91yun/serverspeeder](https://github.com/91yun/serverspeeder) 锐速破解版


#### <a id="6e28befd418dc5b22fb3fd234db322d3"></a>GFWBypass


- [**12874**Star][8m] [JS] [bannedbook/fanqiang](https://github.com/bannedbook/fanqiang) 翻墙-科学上网
- [**6211**Star][20d] [Py] [h2y/shadowrocket-adblock-rules](https://github.com/h2y/shadowrocket-adblock-rules) 提供多款 Shadowrocket 规则，带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
- [**3046**Star][4m] [Shell] [softwaredownload/openwrt-fanqiang](https://github.com/softwaredownload/openwrt-fanqiang) 最好的路由器翻墙、科学上网教程—OpenWrt—shadowsocks


#### <a id="e9cc4e00d5851a7430a9b28d74f297db"></a>GFW


- [**14484**Star][21d] [gfwlist/gfwlist](https://github.com/gfwlist/gfwlist) The one and only one gfwlist here
- [**3531**Star][14d] [acl4ssr/acl4ssr](https://github.com/acl4ssr/acl4ssr) SSR 去广告ACL规则/SS完整GFWList规则，Telegram频道订阅地址
- [**2482**Star][2m] [C++] [trojan-gfw/trojan](https://github.com/trojan-gfw/trojan) An unidentifiable mechanism that helps you bypass GFW.
- [**202**Star][16d] [Shell] [zfl9/gfwlist2privoxy](https://github.com/zfl9/gfwlist2privoxy) 将 gfwlist.txt（Adblock Plus 规则）转换为 privoxy.action




### <a id="21cbd08576a3ead42f60963cdbfb8599"></a>Proxy


- [**7149**Star][14d] [Go] [snail007/goproxy](https://github.com/snail007/goproxy) Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理，代理API认证，全能跨平台代理服务器。
- [**5971**Star][14d] [JS] [avwo/whistle](https://github.com/avwo/whistle) HTTP, HTTP2, HTTPS, Websocket debugging proxy
- [**1380**Star][1m] [C] [z3apa3a/3proxy](https://github.com/z3apa3a/3proxy) 3proxy - tiny free proxy server
- [**304**Star][17d] [Shell] [brainfucksec/kalitorify](https://github.com/brainfucksec/kalitorify) Transparent proxy through Tor for Kali Linux OS


### <a id="a136c15727e341b9427b6570910a3a1f"></a>ReverseProxy


- [**29549**Star][23d] [Go] [fatedier/frp](https://github.com/fatedier/frp) A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
- [**9114**Star][2m] [JS] [localtunnel/localtunnel](https://github.com/localtunnel/localtunnel) expose yourself
- [**8706**Star][2m] [Go] [cnlh/nps](https://github.com/cnlh/nps) 一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。
- [**4887**Star][10m] [Go] [bitly/oauth2_proxy](https://github.com/bitly/oauth2_proxy) A reverse proxy that provides authentication with Google, Github or other provider
- [**3521**Star][1m] [Java] [ffay/lanproxy](https://github.com/ffay/lanproxy) lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具，支持tcp流量转发，可支持任何tcp上层协议（访问内网网站、本地支付接口调试、ssh访问、远程桌面...）。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等，但要使用第三方的公网服务器就必须为第三方付费，并且这些服务都有各种各样的限制，此外，由于数据包会流经第三方，因此对数据安全也是一大隐患。技术交流QQ群 946273429
- [**2586**Star][1m] [C++] [fanout/pushpin](https://github.com/fanout/pushpin) Reverse proxy for realtime web services
- [**2476**Star][5m] [Go] [drk1wi/modlishka](https://github.com/drk1wi/modlishka) Modlishka. Reverse Proxy.
- [**656**Star][4m] [Py] [aploium/shootback](https://github.com/aploium/shootback) a reverse TCP tunnel let you access target behind NAT or firewall


### <a id="e996f5ff54050629de0d9d5e68fcb630"></a>Tunnel


- [**3271**Star][4m] [C++] [wangyu-/udp2raw-tunnel](https://github.com/wangyu-/udp2raw-tunnel) A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)
- [**3131**Star][3m] [C] [yarrick/iodine](https://github.com/yarrick/iodine) Official git repo for iodine dns tunnel
- [**1779**Star][5m] [C++] [iagox86/dnscat2](https://github.com/iagox86/dnscat2) dnscat2：在 DNS 协议上创建加密的 C&C channel


### <a id="b2241c68725526c88e69f1d71405c6b2"></a>ProxyCrawl&&ProxyPool


- [**4882**Star][1y] [Go] [yinghuocho/firefly-proxy](https://github.com/yinghuocho/firefly-proxy) A proxy software to help circumventing the Great Firewall.


### <a id="b03a7c05fd5b154ad593b6327578718b"></a>AnonymousNetwork


#### <a id="f0979cd783d1d455cb5e3207d574aa1e"></a>NoCategory




#### <a id="e99ba5f3de02f68412b13ca718a0afb6"></a>Tor&&&Onion


- [**1302**Star][1m] [C++] [purplei2p/i2pd](https://github.com/purplei2p/i2pd) a full-featured C++ implementation of I2P client
- [**423**Star][2m] [Py] [nullhypothesis/exitmap](https://github.com/nullhypothesis/exitmap) A fast and modular scanner for Tor exit relays.
- [**406**Star][13d] [Awk] [alecmuffett/eotk](https://github.com/alecmuffett/eotk) Enterprise Onion Toolkit
- [**387**Star][1m] [JS] [ayms/node-tor](https://github.com/ayms/node-tor) Javascript implementation of the Tor (or Tor like) anonymizer project (The Onion Router)
- [**377**Star][1m] [Py] [maqp/tfc](https://github.com/maqp/tfc) Tinfoil Chat - Onion-routed, endpoint secure messaging system
- [**353**Star][2m] [Py] [micahflee/torbrowser-launcher](https://github.com/micahflee/torbrowser-launcher) Securely and easily download, verify, install, and launch Tor Browser in Linux
- [**286**Star][28d] [Perl] [alecmuffett/real-world-onion-sites](https://github.com/alecmuffett/real-world-onion-sites) An index of the non-dark web...
- [**261**Star][9m] [C++] [wbenny/mini-tor](https://github.com/wbenny/mini-tor) proof-of-concept implementation of tor protocol using Microsoft CNG/CryptoAPI
- [**250**Star][30d] [C] [basil00/torwall](https://github.com/basil00/torwall) Tallow - Transparent Tor for Windows
- [**219**Star][5m] [Py] [ruped24/toriptables2](https://github.com/ruped24/toriptables2) Tor Iptables script is an anonymizer that sets up iptables and tor to route all services and traffic including DNS through the Tor network.




### <a id="f932418b594acb6facfc35c1ec414188"></a>Socks&&ShadowSocksXx


- [**25047**Star][14d] [Swift] [shadowsocks/shadowsocksx-ng](https://github.com/shadowsocks/shadowsocksx-ng) Next Generation of ShadowsocksX
- [**12355**Star][1m] [C] [shadowsocks/shadowsocks-libev](https://github.com/shadowsocks/shadowsocks-libev) libev port of shadowsocks
- [**7061**Star][7m] [Shell] [teddysun/shadowsocks_install](https://github.com/teddysun/shadowsocks_install) Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu
- [**4154**Star][15d] [Swift] [yanue/v2rayu](https://github.com/yanue/v2rayu) V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等
- [**3797**Star][29d] [JS] [shadowsocks/shadowsocks-manager](https://github.com/shadowsocks/shadowsocks-manager) A shadowsocks manager tool for multi user and traffic control.
- [**3174**Star][15d] [Smarty] [anankke/sspanel-uim](https://github.com/anankke/sspanel-uim) SSPanel V3 魔改再次修改版
- [**2946**Star][1m] [Go] [gwuhaolin/lightsocks](https://github.com/gwuhaolin/lightsocks) 轻量级网络混淆代理，基于 SOCKS5 协议，可用来代替 Shadowsocks
- [**2751**Star][24d] [Makefile] [shadowsocks/openwrt-shadowsocks](https://github.com/shadowsocks/openwrt-shadowsocks) Shadowsocks-libev for OpenWrt/LEDE
- [**2300**Star][10m] [C] [haad/proxychains](https://github.com/haad/proxychains) proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
- [**2029**Star][15d] [C#] [netchx/netch](https://github.com/netchx/netch) Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray protocol. UDP NAT FullCone
- [**1821**Star][3m] [C] [shadowsocks/simple-obfs](https://github.com/shadowsocks/simple-obfs) A simple obfuscating tool (Deprecated)
- [**1683**Star][1y] [Swift] [haxpor/potatso](https://github.com/haxpor/potatso) Potatso is an iOS client that implements Shadowsocks proxy with the leverage of NetworkExtension framework. ***This project is unmaintained, try taking a look at this fork
- [**1621**Star][17d] [Py] [ehco1996/django-sspanel](https://github.com/ehco1996/django-sspanel) 用diango开发的全新的shadowsocks网络面板
- [**1567**Star][16d] [C#] [hmbsbige/shadowsocksr-windows](https://github.com/hmbsbige/shadowsocksr-windows) 【自用】Bug-Oriented Programming
- [**1306**Star][4m] [Rust] [shadowsocks/shadowsocks-rust](https://github.com/shadowsocks/shadowsocks-rust) A Rust port of shadowsocks
- [**1177**Star][6m] [ssrbackup/shadowsocks-rss](https://github.com/ssrarchive/shadowsocks-rss) Shadowsocksr project backup
- [**1068**Star][1m] [jadagates/shadowsocksbio](https://github.com/jadagates/shadowsocksbio) 记录一下SS的前世今生，以及一个简单的教程总结
- [**922**Star][1y] [Shell] [ywb94/openwrt-ssr](https://github.com/ywb94/openwrt-ssr) ShadowsocksR-libev for OpenWrt
- [**900**Star][1y] [Go] [huacnlee/flora-kit](https://github.com/huacnlee/flora-kit) 基于 shadowsocks-go 做的完善实现，完全兼容 Surge 的配置文件
- [**899**Star][2m] [zhaoweih/shadowsocks-tutorial](https://github.com/zhaoweih/shadowsocks-tutorial) 
- [**840**Star][11m] [PHP] [walkor/shadowsocks-php](https://github.com/walkor/shadowsocks-php) A php port of shadowsocks based on workerman. A socks5 proxy written in PHP.
- [**830**Star][1m] [C] [shadowsocksr-live/shadowsocksr-native](https://github.com/shadowsocksr-live/shadowsocksr-native) 从容翻越党国敏感日 ShadowsocksR (SSR) native implementation for all platforms, GFW terminator
- [**730**Star][6m] [Go] [cbeuw/goquiet](https://github.com/cbeuw/goquiet) A Shadowsocks obfuscation plugin utilising domain fronting to evade deep packet inspection
- [**517**Star][9m] [JS] [mrluanma/shadowsocks-heroku](https://github.com/mrluanma/shadowsocks-heroku) shadowsocks over WebSocket, support Heroku.
- [**421**Star][2m] [PowerShell] [p3nt4/invoke-socksproxy](https://github.com/p3nt4/invoke-socksproxy) Socks proxy server using powershell. Supports local and reverse connections for pivoting.
- [**402**Star][3m] [JS] [lolimay/shadowsocks-deepin](https://github.com/lolimay/shadowsocks-deepin) 
- [**374**Star][1y] [Go] [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2) Experimental Shadowsocks in Go. Stable fork at
- [**337**Star][16d] [Py] [leitbogioro/ssr.go](https://github.com/leitbogioro/ssr.go) A new shadowsocksR config manager
- [**318**Star][3m] [Py] [qwj/python-proxy](https://github.com/qwj/python-proxy) HTTP/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.
- [**301**Star][13d] [Shell] [loyess/shell](https://github.com/loyess/shell) Shadowsocks-libev with plugins one-click installation. For example: v2ray-plugin, kcptun, simple-obfs, goquiet, cloak...
- [**250**Star][4m] [Py] [fsgmhoward/shadowsocks-py-mu](https://github.com/fsgmhoward/shadowsocks-py-mu) A fast tunnel proxy server for multiple users


### <a id="dbc310300d300ae45b04779281fe6ec8"></a>V2Ray


- [**23571**Star][28d] [Go] [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core) A platform for building proxies to bypass network restrictions.
- [**2804**Star][2m] [Dockerfile] [thinkdevelop/free-ss-ssr](https://github.com/thinkdevelop/free-ss-ssr) SS账号、SSR账号、V2Ray账号
- [**2484**Star][2m] [Py] [jrohy/multi-v2ray](https://github.com/jrohy/multi-v2ray) v2ray easy delpoy & manage tool， support multiple user & protocol manage
- [**1656**Star][1m] [Shell] [wulabing/v2ray_ws-tls_bash_onekey](https://github.com/wulabing/v2ray_ws-tls_bash_onekey) V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本
- [**1556**Star][4m] [CSS] [functionclub/v2ray.fun](https://github.com/functionclub/v2ray.fun) 正在开发的全新 V2ray.Fun
- [**1432**Star][12d] [selierlin/share-ssr-v2ray](https://github.com/selierlin/share-ssr-v2ray) 
- [**1070**Star][1m] [Go] [xiaoming2028/freenet](https://github.com/xiaoming2028/freenet) 科学上网/梯子/自由上网/翻墙 SSR/V2Ray/Brook 最全搭建教程
- [**783**Star][16d] [HTML] [sprov065/v2-ui](https://github.com/sprov065/v2-ui) 支持多协议多用户的 v2ray 面板，Support multi-protocol multi-user v2ray panel
- [**589**Star][21d] [Shell] [toutyrater/v2ray-guide](https://github.com/toutyrater/v2ray-guide) 
- [**553**Star][29d] [ntkernel/lantern](https://github.com/ntkernel/lantern) V2Ray配置文件，蓝灯(Lantern)破解，手机版+win版
- [**360**Star][2m] [Dockerfile] [onplus/v2hero](https://github.com/onplus/v2hero) All Free . Deploy V2Ray to Heroku . v2ray学习参考
- [**307**Star][2m] [Shell] [zw963/asuswrt-merlin-transparent-proxy](https://github.com/zw963/asuswrt-merlin-transparent-proxy) transparent proxy base on ss, v2ray, ipset, iptables, chinadns on asuswrt merlin.
- [**256**Star][24d] [Py] [jiangxufeng/v2rayl](https://github.com/jiangxufeng/v2rayl) v2ray linux GUI客户端，支持订阅、vemss、ss等协议，自动更新订阅、检查版本更新


### <a id="891b953fda837ead9eff17ff2626b20a"></a>VPN


- [**419**Star][19d] [hugetiny/awesome-vpn](https://github.com/hugetiny/awesome-vpn) A curated list of awesome free VPNs and proxies.免费的代理,科学上网,翻墙，梯子大集合




***


## <a id="1233584261c0cd5224b6e90a98cc9a94"></a>Pentest&&Offensive&&PentestFramework&&PostExp


### <a id="2e40f2f1df5d7f93a7de47bf49c24a0e"></a>NoCategory


- [**3005**Star][3m] [Py] [spiderlabs/responder](https://github.com/spiderlabs/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
- [**2013**Star][1m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
    - Also In Section: [Tools/Malware&&APT](#8cb1c42a29fa3e8825a0f8fca780c481) |
- [**1721**Star][1m] [Go] [chaitin/xray](https://github.com/chaitin/xray) xray 安全评估工具
- [**1444**Star][1m] [C] [ufrisk/pcileech](https://github.com/ufrisk/pcileech) Direct Memory Access (DMA) Attack Software
- [**1393**Star][4m] [yadox666/the-hackers-hardware-toolkit](https://github.com/yadox666/the-hackers-hardware-toolkit) The best hacker's gadgets for Red Team pentesters and security researchers.
- [**1361**Star][2m] [Py] [ekultek/whatwaf](https://github.com/ekultek/whatwaf) Detect and bypass web application firewalls and protection systems
- [**1212**Star][3m] [Py] [owtf/owtf](https://github.com/owtf/owtf) Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient
- [**945**Star][19d] [C] [bt3gl/pentesting-toolkit](https://github.com/bt3gl/Pentesting-Toolkit) Tools for pentesting, CTFs & wargames.
    - Also In Section: [Tools/CTF&&HTB/Collection](#30c4df38bcd1abaaaac13ffda7d206c6) |
- [**943**Star][4m] [Py] [hatriot/zarp](https://github.com/hatriot/zarp) Network Attack Tool
- [**918**Star][1m] [Py] [d4vinci/one-lin3r](https://github.com/d4vinci/one-lin3r) Gives you one-liners that aids in penetration testing operations, privilege escalation and more
- [**808**Star][1m] [Py] [jeffzh3ng/fuxi](https://github.com/jeffzh3ng/fuxi) Penetration Testing Platform
- [**784**Star][6m] [Py] [jivoi/pentest](https://github.com/jivoi/pentest) 
- [**728**Star][7m] [Py] [gkbrk/slowloris](https://github.com/gkbrk/slowloris) Low bandwidth DoS tool. Slowloris rewrite in Python.
- [**687**Star][16d] [voorivex/pentest-guide](https://github.com/voorivex/pentest-guide) Penetration tests guide based on OWASP including test cases, resources and examples.
- [**666**Star][5m] [leezj9671/pentest_interview](https://github.com/leezj9671/pentest_interview) 个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~
- [**610**Star][9m] [Py] [epsylon/ufonet](https://github.com/epsylon/ufonet) UFONet - Denial of Service Toolkit
- [**489**Star][13d] [netbiosx/checklists](https://github.com/netbiosx/checklists) Pentesting checklists for various engagements
- [**487**Star][16d] [Ruby] [hackplayers/evil-winrm](https://github.com/hackplayers/evil-winrm) The ultimate WinRM shell for hacking/pentesting
- [**487**Star][1y] [Shell] [leonteale/pentestpackage](https://github.com/leonteale/pentestpackage) a package of Pentest scripts I have made or commonly use
- [**479**Star][10m] [Ruby] [sidaf/homebrew-pentest](https://github.com/sidaf/homebrew-pentest) Homebrew Tap - Pen Test Tools
- [**464**Star][7m] [Java] [alpha1e0/pentestdb](https://github.com/alpha1e0/pentestdb) WEB渗透测试数据库
- [**459**Star][2m] [C++] [fsecurelabs/c3](https://github.com/FSecureLABS/C3) Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
- [**457**Star][10m] [PHP] [l3m0n/pentest_tools](https://github.com/l3m0n/pentest_tools) 收集一些小型实用的工具
- [**444**Star][15d] [C++] [danielkrupinski/osiris](https://github.com/danielkrupinski/osiris) Free open-source training software / cheat for Counter-Strike: Global Offensive, written in modern C++. GUI powered by imgui.
- [**439**Star][7m] [C++] [rek7/mxtract](https://github.com/rek7/mxtract) mXtract - Offensive Memory Extractor & Analyzer
- [**432**Star][3m] [mel0day/redteam-bcs](https://github.com/mel0day/redteam-bcs) BCS（北京网络安全大会）2019 红队行动会议重点内容
- [**414**Star][18d] [PHP] [gwen001/pentest-tools](https://github.com/gwen001/pentest-tools) Custom pentesting tools
- [**404**Star][1m] [Py] [admintony/prepare-for-awd](https://github.com/admintony/prepare-for-awd) AWD攻防赛脚本集合
- [**401**Star][9m] [Py] [christruncer/pentestscripts](https://github.com/christruncer/pentestscripts) Scripts that are useful for me on pen tests
- [**398**Star][27d] [PowerShell] [s3cur3th1ssh1t/winpwn](https://github.com/S3cur3Th1sSh1t/WinPwn) Automation for internal Windows Penetrationtest / AD-Security
- [**388**Star][12m] [Py] [cr4shcod3/pureblood](https://github.com/cr4shcod3/pureblood) A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter
- [**386**Star][9m] [Go] [amyangxyz/assassingo](https://github.com/amyangxyz/assassingo) An extensible and concurrency pentest framework in Go, also with WebGUI. Feel free to CONTRIBUTE!
- [**385**Star][3m] [ansjdnakjdnajkd/ios](https://github.com/ansjdnakjdnajkd/ios) Most usable tools for iOS penetration testing
    - Also In Section: [Tools/Mobile/iOS&&MacOS&&iPhone&&iPad&&iWatch](#dbde77352aac39ee710d3150a921bcad) |
- [**385**Star][23d] [Py] [clr2of8/dpat](https://github.com/clr2of8/dpat) Domain Password Audit Tool for Pentesters
- [**378**Star][6m] [unprovable/pentesthardware](https://github.com/unprovable/pentesthardware) Kinda useful notes collated together publicly
- [**371**Star][8m] [C] [ridter/pentest](https://github.com/ridter/pentest) tools
- [**368**Star][4m] [C#] [bitsadmin/nopowershell](https://github.com/bitsadmin/nopowershell) PowerShell rebuilt in C# for Red Teaming purposes
- [**350**Star][2m] [Shell] [maldevel/pentestkit](https://github.com/maldevel/pentestkit) Useful tools and scripts used during Penetration Tests.
- [**346**Star][10m] [Py] [darkspiritz/darkspiritz](https://github.com/darkspiritz/darkspiritz) A penetration testing framework for Linux, MacOS, and Windows systems.
- [**341**Star][15d] [Py] [ym2011/pest](https://github.com/ym2011/PEST) this is some pentest script based on python, just simple but useful, maybe it can help you do something else. just have a try
- [**338**Star][3m] [Py] [xuanhun/pythonhackingbook1](https://github.com/xuanhun/pythonhackingbook1) Python黑客编程之极速入门
- [**337**Star][1y] [Java] [rub-nds/ws-attacker](https://github.com/rub-nds/ws-attacker) WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum (
- [**327**Star][1y] [PowerShell] [rootclay/powershell-attack-guide](https://github.com/rootclay/powershell-attack-guide) Powershell攻击指南----黑客后渗透之道
- [**320**Star][2m] [PowerShell] [kmkz/pentesting](https://github.com/kmkz/pentesting) Tricks for penetration testing
- [**316**Star][28d] [Py] [m8r0wn/nullinux](https://github.com/m8r0wn/nullinux) Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.
- [**307**Star][2m] [PowerShell] [d0nkeys/redteam](https://github.com/d0nkeys/redteam) Red Team Scripts by d0nkeys (ex SnadoTeam)
- [**300**Star][3m] [HTML] [koutto/jok3r](https://github.com/koutto/jok3r) Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
- [**298**Star][2m] [Ruby] [fozavci/viproy-voipkit](https://github.com/fozavci/viproy-voipkit) VIPROY - VoIP Pen-Test Kit for Metasploit Framework
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Metasploit/NoCategory](#01be61d5bb9f6f7199208ff0fba86b5d) |
- [**295**Star][11m] [stardustsky/saidict](https://github.com/stardustsky/saidict) 弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
- [**292**Star][27d] [Lua] [pentesteracademy/patoolkit](https://github.com/pentesteracademy/patoolkit) PA Toolkit is a collection of traffic analysis plugins focused on security
- [**286**Star][1y] [C++] [paranoidninja/pandoras-box](https://github.com/paranoidninja/pandoras-box) This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I get time.
- [**283**Star][1m] [Py] [bishopfox/eyeballer](https://github.com/bishopfox/eyeballer) Convolutional neural network for analyzing pentest screenshots
    - Also In Section: [Tools/AI&&MachineLearning&&DeepLearning&&NeturalNetwork/NoCategory](#19dd474da6b715024ff44d27484d528a) |
- [**267**Star][18d] [Go] [rmikehodges/hidensneak](https://github.com/rmikehodges/hidensneak) a CLI for ephemeral penetration testing
- [**252**Star][13d] [anyeduke/enterprise-security-skill](https://github.com/anyeduke/enterprise-security-skill) 用于记录企业安全规划，建设，运营，攻防的相关资源
- [**251**Star][3m] [Py] [giantbranch/python-hacker-code](https://github.com/giantbranch/python-hacker-code) 《python黑帽子：黑客与渗透测试编程之道》代码及实验文件，字典等
- [**240**Star][2m] [Shell] [leviathan36/kaboom](https://github.com/leviathan36/kaboom) An automated pentest tool
- [**238**Star][25d] [PowerShell] [sdcampbell/internal-pentest-playbook](https://github.com/sdcampbell/internal-pentest-playbook) Internal Network Penetration Test Playbook
- [**225**Star][8m] [Go] [stevenaldinger/decker](https://github.com/stevenaldinger/decker) Declarative penetration testing orchestration framework
- [**216**Star][5m] [Py] [mgeeky/tomcatwardeployer](https://github.com/mgeeky/tomcatwardeployer) Apache Tomcat auto WAR deployment & pwning penetration testing tool.
- [**211**Star][19d] [JS] [giper45/dockersecurityplayground](https://github.com/giper45/dockersecurityplayground) A Microservices-based framework for the study of Network Security and Penetration Test techniques


### <a id="9081db81f6f4b78d5c263723a3f7bd6d"></a>Collection


- [**903**Star][8m] [C] [0x90/wifi-arsenal](https://github.com/0x90/wifi-arsenal) WiFi arsenal
- [**803**Star][2m] [Shell] [shr3ddersec/shr3dkit](https://github.com/shr3ddersec/shr3dkit) Red Team Tool Kit
- [**537**Star][6m] [Py] [0xdea/tactical-exploitation](https://github.com/0xdea/tactical-exploitation) Modern tactical exploitation toolkit.


### <a id="39931e776c23e80229368dfc6fd54770"></a>Wireless&&WiFi&&AP&&802.11


#### <a id="d4efda1853b2cb0909727188116a2a8c"></a>NoCategory


- [**8337**Star][17d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) The Rogue Access Point Framework
    - Also In Section: [Tools/SET&&Phishing&&SpearPhishing/Phish](#290e9ae48108d21d6d8b9ea9e74d077d) |
- [**6109**Star][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) Count the number of people around you
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/NoCategory](#05ab1b75266fddafc7195f5b395e4d99) |
- [**5597**Star][1m] [C] [spacehuhn/esp8266_deauther](https://github.com/spacehuhn/esp8266_deauther) Scan for WiFi devices, block selected connections, create dozens of networks and confuse WiFi scanners!
- [**4313**Star][27d] [Py] [jopohl/urh](https://github.com/jopohl/urh) Universal Radio Hacker: investigate wireless protocols like a boss
- [**2723**Star][1y] [C] [vanhoefm/krackattacks-scripts](https://github.com/vanhoefm/krackattacks-scripts) 检测客户端和AP是否受KRACK漏洞影响
- [**2706**Star][8m] [Py] [p0cl4bs/wifi-pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin) Framework for Rogue Wi-Fi Access Point Attack
- [**2480**Star][15d] [Py] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) (⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
    - Also In Section: [Tools/AI&&MachineLearning&&DeepLearning&&NeturalNetwork/NoCategory](#19dd474da6b715024ff44d27484d528a) |[Tools/Network&&Sniff&&Mitm/MITM](#11c73d3e2f71f3914a3bca35ba90de36) |
- [**2433**Star][2m] [C] [martin-ger/esp_wifi_repeater](https://github.com/martin-ger/esp_wifi_repeater) A full functional WiFi Repeater (correctly: a WiFi NAT Router)
- [**2374**Star][1y] [Py] [danmcinerney/lans.py](https://github.com/danmcinerney/lans.py) Inject code and spy on wifi users
- [**2194**Star][22d] [Shell] [v1s1t0r1sh3r3/airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) This is a multi-use bash script for Linux systems to audit wireless networks.
- [**1816**Star][1y] [Py] [derv82/wifite2](https://github.com/derv82/wifite2) Rewrite of the popular wireless network auditor, "wifite"
- [**1799**Star][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) The LAZY script will make your life easier, and of course faster.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/AutoXxx](#fc8737aef0f59c3952d11749fe582dac) |
- [**1527**Star][1m] [Py] [k4m4/kickthemout](https://github.com/k4m4/kickthemout) 使用ARP欺骗，将设备从网络中踢出去
- [**1525**Star][1y] [HTML] [qiwihui/hiwifi-ss](https://github.com/qiwihui/hiwifi-ss) 极路由+ss配置
- [**1244**Star][1m] [C] [seemoo-lab/nexmon](https://github.com/seemoo-lab/nexmon) The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
- [**1219**Star][12d] [C] [aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng) WiFi security auditing tools suite
- [**1022**Star][1m] [C] [t6x/reaver-wps-fork-t6x](https://github.com/t6x/reaver-wps-fork-t6x) 攻击 Wi-Fi Protected Setup (WPS)， 恢复 WPA/WPA2 密码
- [**998**Star][12m] [Py] [entropy1337/infernal-twin](https://github.com/entropy1337/infernal-twin) wireless hacking - This is automated wireless hacking tool
- [**987**Star][1y] [Py] [tylous/sniffair](https://github.com/tylous/sniffair) A framework for wireless pentesting.
- [**983**Star][1y] [HTML] [sensepost/mana](https://github.com/sensepost/mana) *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
    - Also In Section: [Tools/Network&&Sniff&&Mitm/MITM](#11c73d3e2f71f3914a3bca35ba90de36) |
- [**977**Star][14d] [C] [s0lst1c3/eaphammer](https://github.com/s0lst1c3/eaphammer) Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.
- [**903**Star][1m] [TeX] [ethereum/yellowpaper](https://github.com/ethereum/yellowpaper) The "Yellow Paper": Ethereum's formal specification
- [**818**Star][2m] [C] [spacehuhn/wifi_ducky](https://github.com/spacehuhn/wifi_ducky) Upload, save and run keystroke injection payloads with an ESP8266 + ATMEGA32U4
- [**796**Star][1y] [Objective-C] [igrsoft/kismac2](https://github.com/igrsoft/kismac2) KisMAC is a free, open source wireless stumbling and security tool for Mac OS X.
- [**766**Star][22d] [Py] [konradit/gopro-py-api](https://github.com/konradit/gopro-py-api) Unofficial GoPro API Library for Python - connect to GoPro via WiFi.
- [**755**Star][7m] [Py] [misterbianco/boopsuite](https://github.com/MisterBianco/BoopSuite) A Suite of Tools written in Python for wireless auditing and security testing.
- [**676**Star][10m] [Objective-C] [unixpickle/jamwifi](https://github.com/unixpickle/jamwifi) A GUI, easy to use WiFi network jammer for Mac OS X
- [**649**Star][7m] [C] [wifidog/wifidog-gateway](https://github.com/wifidog/wifidog-gateway) Repository for the wifidog-gateway captive portal designed for embedded systems
- [**608**Star][3m] [C] [matheus-garbelini/esp32_esp8266_attacks](https://github.com/matheus-garbelini/esp32_esp8266_attacks) Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/Exploit/Exp&&PoC](#5c1af335b32e43dba993fceb66c470bc) |
- [**502**Star][14d] [C++] [cyberman54/esp32-paxcounter](https://github.com/cyberman54/esp32-paxcounter) Wifi & BLE driven passenger flow metering with cheap ESP32 boards
- [**463**Star][2m] [Shell] [staz0t/hashcatch](https://github.com/staz0t/hashcatch) Capture handshakes of nearby WiFi networks automatically
- [**455**Star][3m] [Java] [lennartkoopmann/nzyme](https://github.com/lennartkoopmann/nzyme) Nzyme collects 802.11 management frames directly from the air and sends them to a Graylog (Open Source log management) setup for WiFi IDS, monitoring, and incident response. It only needs a JVM and a WiFi adapter that supports monitor mode.
- [**450**Star][1m] [Py] [savio-code/fern-wifi-cracker](https://github.com/savio-code/fern-wifi-cracker) Automatically exported from code.google.com/p/fern-wifi-cracker
- [**396**Star][18d] [C] [freifunk-gluon/gluon](https://github.com/freifunk-gluon/gluon) a modular framework for creating OpenWrt-based firmwares for wireless mesh nodes
- [**387**Star][1y] [Py] [jpaulmora/pyrit](https://github.com/jpaulmora/pyrit) The famous WPA precomputed cracker, Migrated from Google.
- [**373**Star][3m] [C++] [bastibl/gr-ieee802-11](https://github.com/bastibl/gr-ieee802-11) IEEE 802.11 a/g/p Transceiver
- [**320**Star][2m] [Shell] [vanhoefm/modwifi](https://github.com/vanhoefm/modwifi) 
- [**316**Star][2m] [Java] [wiglenet/wigle-wifi-wardriving](https://github.com/wiglenet/wigle-wifi-wardriving) Nethugging client for Android, from wigle.net
- [**310**Star][3m] [TeX] [chronaeon/beigepaper](https://github.com/chronaeon/beigepaper) Rewrite of the Yellowpaper in non-Yellowpaper syntax.
- [**266**Star][6m] [C] [br101/horst](https://github.com/br101/horst) “horst” - lightweight IEEE802.11 wireless LAN analyzer with a text interface
- [**265**Star][2m] [C] [sensepost/hostapd-mana](https://github.com/sensepost/hostapd-mana) SensePost's modified hostapd for wifi attacks.
- [**253**Star][1y] [Py] [wipi-hunter/pidense](https://github.com/wipi-hunter/pidense) Monitor illegal wireless network activities.
- [**237**Star][7m] [Py] [lionsec/wifresti](https://github.com/lionsec/wifresti) Find your wireless network password in Windows , Linux and Mac OS
- [**234**Star][2m] [C] [mame82/logitacker](https://github.com/mame82/logitacker) Enumerate and test Logitech wireless input devices for vulnerabilities with a nRF52840 radio dongle.
- [**218**Star][18d] [Py] [ghostop14/sparrow-wifi](https://github.com/ghostop14/sparrow-wifi) Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
    - Also In Section: [Tools/Bluetooth](#ceb90405292daed9bb32ac20836c219a) |[Tools/Network&&Sniff&&Mitm/NoCategory](#99398a5a8aaf99228829dadff48fb6a7) |


#### <a id="8d233e2d068cce2b36fd0cf44d10f5d8"></a>WPS&&WPA&&WPA2


- [**302**Star][4m] [Py] [hash3lizer/wifibroot](https://github.com/hash3lizer/wifibroot) A WiFi Pentest Cracking tool for WPA/WPA2 (Handshake, PMKID, Cracking, EAPOL, Deauthentication)


#### <a id="8863b7ba27658d687a85585e43b23245"></a>802.11






### <a id="80301821d0f5d8ec2dd3754ebb1b4b10"></a>Payload&&RAT


#### <a id="6602e118e0245c83b13ff0db872c3723"></a>NoCategory


- [**1231**Star][19d] [PowerShell] [hak5/bashbunny-payloads](https://github.com/hak5/bashbunny-payloads) The Official Bash Bunny Payload Repository
- [**962**Star][27d] [C] [zardus/preeny](https://github.com/zardus/preeny) Some helpful preload libraries for pwning stuff.
- [**560**Star][10m] [Py] [genetic-malware/ebowla](https://github.com/genetic-malware/ebowla) Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
- [**529**Star][2m] [C++] [screetsec/brutal](https://github.com/screetsec/brutal) Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy . Brutal is a toolkit to quickly create various payload,powershell attack , virus attack and launch listener for a Human Interface Device ( Payload Teensy )
- [**438**Star][12d] [Py] [ctxis/cape](https://github.com/ctxis/cape) Malware Configuration And Payload Extraction
- [**339**Star][11m] [JS] [gabemarshall/brosec](https://github.com/gabemarshall/brosec) Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.
- [**259**Star][3m] [Py] [felixweyne/imaginaryc2](https://github.com/felixweyne/imaginaryc2) Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.
- [**234**Star][3m] [cujanovic/markdown-xss-payloads](https://github.com/cujanovic/markdown-xss-payloads) XSS payloads for exploiting Markdown syntax
- [**229**Star][17d] [cujanovic/open-redirect-payloads](https://github.com/cujanovic/open-redirect-payloads) Open Redirect Payloads
- [**226**Star][5m] [cr0hn/nosqlinjection_wordlists](https://github.com/cr0hn/nosqlinjection_wordlists) This repository contains payload to test NoSQL Injections
- [**216**Star][2m] [Py] [whitel1st/docem](https://github.com/whitel1st/docem) Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)
- [**210**Star][1m] [Py] [brent-stone/can_reverse_engineering](https://github.com/brent-stone/can_reverse_engineering) Automated Payload Reverse Engineering Pipeline for the Controller Area Network (CAN) protocol
- [**210**Star][24d] [C] [shchmue/lockpick_rcm](https://github.com/shchmue/lockpick_rcm) Nintendo Switch encryption key derivation bare metal RCM payload
- [**210**Star][20d] [PHP] [zigoo0/jsonbee](https://github.com/zigoo0/jsonbee) A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.


#### <a id="b5d99a78ddb383c208aae474fc2cb002"></a>PayloadCollection


- [**21409**Star][14d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
    - Also In Section: [Tools/webshell/Collection](#e08366dcf7aa021c6973d9e2a8944dff) |[Tools/wordlist/Collection](#3202d8212db5699ea5e6021833bf3fa2) |
- [**10579**Star][14d] [Py] [swisskyrepo/payloadsallthethings](https://github.com/swisskyrepo/payloadsallthethings) A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- [**1994**Star][8m] [Shell] [foospidy/payloads](https://github.com/foospidy/payloads) Git All the Payloads! A collection of web attack payloads.
- [**1989**Star][26d] [edoverflow/bugbounty-cheatsheet](https://github.com/edoverflow/bugbounty-cheatsheet) A list of interesting payloads, tips and tricks for bug bounty hunters.
- [**1856**Star][10m] [PHP] [bartblaze/php-backdoors](https://github.com/bartblaze/php-backdoors) A collection of PHP backdoors. For educational or testing purposes only.
- [**717**Star][2m] [HTML] [ismailtasdelen/xss-payload-list](https://github.com/payloadbox/xss-payload-list) XSS 漏洞Payload列表
- [**367**Star][2m] [renwax23/xss-payloads](https://github.com/renwax23/xss-payloads) List of XSS Vectors/Payloads
- [**272**Star][3m] [Py] [thekingofduck/easyxsspayload](https://github.com/thekingofduck/easyxsspayload) XssPayload List . Usage:
- [**238**Star][3m] [payloadbox/command-injection-payload-list](https://github.com/payloadbox/command-injection-payload-list) 


#### <a id="b318465d0d415e35fc0883e9894261d1"></a>RAT


- [**5045**Star][3m] [Py] [n1nj4sec/pupy](https://github.com/n1nj4sec/pupy) Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
- [**1696**Star][6m] [Smali] [ahmyth/ahmyth-android-rat](https://github.com/ahmyth/ahmyth-android-rat) Android Remote Administration Tool
- [**1306**Star][1y] [Py] [marten4n6/evilosx](https://github.com/marten4n6/evilosx) An evil RAT (Remote Administration Tool) for macOS / OS X.
- [**763**Star][22d] [Py] [kevthehermit/ratdecoders](https://github.com/kevthehermit/ratdecoders) Python Decoders for Common Remote Access Trojans
- [**597**Star][1y] [PowerShell] [fortynorthsecurity/wmimplant](https://github.com/FortyNorthSecurity/WMImplant) This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
- [**477**Star][5m] [Visual Basic] [nyan-x-cat/lime-rat](https://github.com/nyan-x-cat/lime-rat) LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)
- [**352**Star][2m] [C++] [werkamsus/lilith](https://github.com/werkamsus/lilith) Lilith, The Open Source C++ Remote Administration Tool (RAT)
- [**307**Star][5m] [Py] [mvrozanti/rat-via-telegram](https://github.com/mvrozanti/rat-via-telegram) Windows Remote Administration Tool via Telegram
- [**271**Star][1m] [C#] [nyan-x-cat/asyncrat-c-sharp](https://github.com/nyan-x-cat/asyncrat-c-sharp) Open-Source Remote Administration Tool For Windows C# (RAT)
- [**269**Star][3m] [C++] [yuanyuanxiang/simpleremoter](https://github.com/yuanyuanxiang/simpleremoter) 基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。此项目初版见：


#### <a id="ad92f6b801a18934f1971e2512f5ae4f"></a>PayloadGenerate


- [**3268**Star][2m] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/PostExp/NoCategory](#12abc279c69d1fcf10692b9cb89bcdf7) |
- [**2591**Star][3m] [Java] [frohoff/ysoserial](https://github.com/frohoff/ysoserial) A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- [**1741**Star][21d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/AutoXxx](#fc8737aef0f59c3952d11749fe582dac) |[Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/NoCategory](#05ab1b75266fddafc7195f5b395e4d99) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Metasploit/NoCategory](#01be61d5bb9f6f7199208ff0fba86b5d) |
- [**1061**Star][5m] [Py] [nccgroup/winpayloads](https://github.com/nccgroup/winpayloads) Undetectable Windows Payload Generation
- [**1003**Star][1y] [Py] [d4vinci/dr0p1t-framework](https://github.com/d4vinci/dr0p1t-framework) A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
- [**857**Star][10m] [Visual Basic] [mdsecactivebreach/sharpshooter](https://github.com/mdsecactivebreach/sharpshooter) Payload Generation Framework
- [**816**Star][6m] [Go] [tiagorlampert/chaos](https://github.com/tiagorlampert/chaos) a PoC that allow generate payloads and control remote operating system
- [**810**Star][2m] [PHP] [ambionics/phpggc](https://github.com/ambionics/phpggc) PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
- [**794**Star][1m] [C#] [pwntester/ysoserial.net](https://github.com/pwntester/ysoserial.net) Deserialization payload generator for a variety of .NET formatters
- [**733**Star][12m] [Py] [oddcod3/phantom-evasion](https://github.com/oddcod3/phantom-evasion) Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)
- [**684**Star][3m] [Py] [sevagas/macro_pack](https://github.com/sevagas/macro_pack) macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to fin…
- [**618**Star][8m] [Shell] [g0tmi1k/mpc](https://github.com/g0tmi1k/msfpc) MSFvenom Payload Creator (MSFPC)
- [**560**Star][14d] [C] [thewover/donut](https://github.com/thewover/donut) Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
- [**397**Star][28d] [Perl] [chinarulezzz/pixload](https://github.com/chinarulezzz/pixload) Image Payload Creating/Injecting tools
- [**287**Star][7m] [Py] [0xacb/viewgen](https://github.com/0xacb/viewgen) viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
- [**268**Star][1y] [Shell] [abedalqaderswedan1/aswcrypter](https://github.com/abedalqaderswedan1/aswcrypter) An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far [FUD]
- [**262**Star][1y] [Java] [ewilded/shelling](https://github.com/ewilded/shelling) SHELLING - a comprehensive OS command injection payload generator
- [**222**Star][1y] [Java] [ewilded/psychopath](https://github.com/ewilded/psychopath) psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.


#### <a id="c45a90ab810d536a889e4e2dd45132f8"></a>Botnet


- [**3690**Star][3m] [Py] [malwaredllc/byob](https://github.com/malwaredllc/byob) BYOB (Build Your Own Botnet)
- [**2135**Star][1y] [C++] [maestron/botnets](https://github.com/maestron/botnets) This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
- [**390**Star][19d] [C++] [souhardya/uboat](https://github.com/souhardya/uboat) HTTP Botnet Project
- [**319**Star][5m] [Go] [saturnsvoid/gobot2](https://github.com/saturnsvoid/gobot2) Second Version of The GoBot Botnet, But more advanced.


#### <a id="b6efee85bca01cde45faa45a92ece37f"></a>Backdooring&&Backdoor


- [**378**Star][7m] [C] [zerosum0x0/smbdoor](https://github.com/zerosum0x0/smbdoor) Windows kernel backdoor via registering a malicious SMB handler
- [**364**Star][2m] [Shell] [screetsec/vegile](https://github.com/screetsec/vegile) This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will re-run again. There always be a procces which while run another process,So we can assume that this procces is unstopable like a Ghost in The Shell
- [**362**Star][7m] [Py] [s0md3v/cloak](https://github.com/s0md3v/Cloak) Cloak can backdoor any python script with some tricks.
- [**341**Star][11m] [Shell] [r00t-3xp10it/backdoorppt](https://github.com/r00t-3xp10it/backdoorppt) transform your payload.exe into one fake word doc (.ppt)
- [**317**Star][1y] [Ruby] [carletonstuberg/browser-backdoor](https://github.com/CarletonStuberg/browser-backdoor) BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener
- [**287**Star][3m] [C#] [mvelazc0/defcon27_csharp_workshop](https://github.com/mvelazc0/defcon27_csharp_workshop) Writing custom backdoor payloads with C# - Defcon 27
- [**201**Star][8m] [C] [paradoxis/php-backdoor](https://github.com/Paradoxis/PHP-Backdoor) Your interpreter isn’t safe anymore  —  The PHP module backdoor


#### <a id="85bb0c28850ffa2b4fd44f70816db306"></a>混淆器&&Obfuscate


- [**1351**Star][9m] [PowerShell] [danielbohannon/invoke-obfuscation](https://github.com/danielbohannon/invoke-obfuscation) PowerShell Obfuscator


#### <a id="78d0ac450a56c542e109c07a3b0225ae"></a>Payload管理


- [**930**Star][1y] [JS] [netflix/sleepy-puppy](https://github.com/Netflix-Skunkworks/sleepy-puppy) Sleepy Puppy XSS Payload Management Framework


#### <a id="d08b7bd562a4bf18275c63ffe7d8fc91"></a>勒索软件


- [**379**Star][1y] [Go] [mauri870/ransomware](https://github.com/mauri870/ransomware) A POC Windows crypto-ransomware (Academic)
- [**313**Star][13d] [Batchfile] [mitchellkrogza/ultimate.hosts.blacklist](https://github.com/mitchellkrogza/ultimate.hosts.blacklist) The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.


#### <a id="82f546c7277db7919986ecf47f3c9495"></a>键盘记录器


- [**359**Star][11m] [Py] [ajinabraham/xenotix-python-keylogger](https://github.com/ajinabraham/xenotix-python-keylogger) Xenotix Python Keylogger for Windows.


#### <a id="8f99087478f596139922cd1ad9ec961b"></a>Meterpreter


- [**233**Star][5m] [Py] [mez0cc/ms17-010-python](https://github.com/mez0cc/ms17-010-python) MS17-010: Python and Meterpreter


#### <a id="63e0393e375e008af46651a3515072d8"></a>Payload投递


- [**255**Star][3m] [Py] [no0be/dnslivery](https://github.com/no0be/dnslivery) Easy files and payloads delivery over DNS




### <a id="2051fd9e171f2698d8e7486e3dd35d87"></a>AllInOne&&Framework


- [**4965**Star][4m] [PowerShell] [empireproject/empire](https://github.com/EmpireProject/Empire) Empire is a PowerShell and Python post-exploitation agent.
- [**4576**Star][22d] [Py] [manisso/fsociety](https://github.com/manisso/fsociety) fsociety Hacking Tools Pack – A Penetration Testing Framework
- [**3313**Star][5m] [PowerShell] [samratashok/nishang](https://github.com/samratashok/nishang) Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
- [**3053**Star][1m] [Shell] [1n3/sn1per](https://github.com/1n3/sn1per) Automated pentest framework for offensive security experts
- [**3041**Star][1m] [Py] [byt3bl33d3r/crackmapexec](https://github.com/byt3bl33d3r/crackmapexec) A swiss army knife for pentesting networks
- [**2961**Star][17d] [Py] [guardicore/monkey](https://github.com/guardicore/monkey) Infection Monkey - An automated pentest tool
- [**2767**Star][7m] [C#] [quasar/quasarrat](https://github.com/quasar/quasarrat) Remote Administration Tool for Windows
- [**2381**Star][2m] [Py] [infobyte/faraday](https://github.com/infobyte/faraday) Collaborative Penetration Test and Vulnerability Management Platform
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/漏洞管理](#9f068ea97c2e8865fac21d6fc50f86b3) |
- [**1482**Star][16d] [Py] [zerosum0x0/koadic](https://github.com/zerosum0x0/koadic) Koadic C3 COM Command & Control - JScript RAT
- [**1081**Star][10m] [Py] [secforce/sparta](https://github.com/secforce/sparta) Network Infrastructure Penetration Testing Tool
- [**934**Star][3m] [Py] [0xinfection/tidos-framework](https://github.com/0xInfection/TIDoS-Framework) The Offensive Manual Web Application Penetration Testing Framework.
- [**918**Star][1y] [Py] [m4n3dw0lf/pythem](https://github.com/m4n3dw0lf/pythem) pentest framework
- [**513**Star][21d] [Py] [gyoisamurai/gyoithon](https://github.com/gyoisamurai/gyoithon) GyoiThon is a growing penetration test tool using Machine Learning.
    - Also In Section: [Tools/AI&&MachineLearning&&DeepLearning&&NeturalNetwork/NoCategory](#19dd474da6b715024ff44d27484d528a) |


### <a id="a9494547a9359c60f09aea89f96a2c83"></a>PostExp


#### <a id="12abc279c69d1fcf10692b9cb89bcdf7"></a>NoCategory


- [**6832**Star][17d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) World's fastest and most advanced password recovery utility
    - Also In Section: [Tools/Password&&Credential/Password](#86dc226ae8a71db10e4136f4b82ccd06) |
- [**3268**Star][2m] [C] [screetsec/thefatrat](https://github.com/screetsec/thefatrat) Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Payload&&RAT/PayloadGenerate](#ad92f6b801a18934f1971e2512f5ae4f) |
- [**2346**Star][1m] [Shell] [rebootuser/linenum](https://github.com/rebootuser/linenum) Scripted Local Linux Enumeration & Privilege Escalation Checks
- [**2136**Star][14d] [Py] [commixproject/commix](https://github.com/commixproject/commix) Automated All-in-One OS command injection and exploitation tool.
- [**1226**Star][9m] [C] [a0rtega/pafish](https://github.com/a0rtega/pafish) Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
- [**1191**Star][1y] [C#] [cn33liz/p0wnedshell](https://github.com/cn33liz/p0wnedshell) PowerShell Runspace Post Exploitation Toolkit
- [**1045**Star][8m] [Py] [0x00-0x00/shellpop](https://github.com/0x00-0x00/shellpop) Pop shells like a master.
- [**1029**Star][28d] [Boo] [byt3bl33d3r/silenttrinity](https://github.com/byt3bl33d3r/silenttrinity) An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
- [**1015**Star][3m] [Py] [byt3bl33d3r/deathstar](https://github.com/byt3bl33d3r/deathstar) Automate getting Domain Admin using Empire
- [**754**Star][4m] [Py] [lgandx/pcredz](https://github.com/lgandx/pcredz) This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.
- [**737**Star][4m] [PowerShell] [hausec/adape-script](https://github.com/hausec/adape-script) Active Directory Assessment and Privilege Escalation Script
- [**668**Star][1m] [C#] [cobbr/sharpsploit](https://github.com/cobbr/sharpsploit) SharpSploit is a .NET post-exploitation library written in C#
- [**405**Star][4m] [Shell] [thesecondsun/bashark](https://github.com/thesecondsun/bashark) Bash post exploitation toolkit
- [**341**Star][4m] [Py] [adrianvollmer/powerhub](https://github.com/adrianvollmer/powerhub) A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting
- [**282**Star][1y] [JS] [chrisallenlane/novahot](https://github.com/chrisallenlane/novahot) A webshell framework for penetration testers.
    - Also In Section: [Tools/webshell/NoCategory](#faa91844951d2c29b7b571c6e8a3eb54) |
- [**212**Star][2m] [Go] [brompwnie/botb](https://github.com/brompwnie/botb) A container analysis and exploitation tool for pentesters and engineers.


#### <a id="4c2095e7e192ac56f6ae17c8fc045c51"></a>PrivilegeEscalation


- [**3509**Star][4m] [C] [secwiki/windows-kernel-exploits](https://github.com/secwiki/windows-kernel-exploits) windows-kernel-exploits Windows平台提权漏洞集合
- [**1245**Star][2m] [Py] [alessandroz/beroot](https://github.com/alessandroz/beroot) Privilege Escalation Project - Windows / Linux / Mac
- [**583**Star][11m] [C++] [ohpe/juicy-potato](https://github.com/ohpe/juicy-potato) A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
- [**529**Star][4m] [rhinosecuritylabs/aws-iam-privilege-escalation](https://github.com/rhinosecuritylabs/aws-iam-privilege-escalation) A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
- [**492**Star][7m] [Py] [initstring/dirty_sock](https://github.com/initstring/dirty_sock) Linux privilege escalation exploit via snapd (CVE-2019-7304)
- [**467**Star][8m] [C] [nongiach/sudo_inject](https://github.com/nongiach/sudo_inject) [Linux] Two Privilege Escalation techniques abusing sudo token
- [**443**Star][1m] [C#] [rasta-mouse/watson](https://github.com/rasta-mouse/watson) Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
- [**383**Star][3m] [PowerShell] [cyberark/aclight](https://github.com/cyberark/ACLight) A script for advanced discovery of Privileged Accounts - includes Shadow Admins
- [**353**Star][2m] [PowerShell] [gdedrouas/exchange-ad-privesc](https://github.com/gdedrouas/exchange-ad-privesc) Exchange privilege escalations to Active Directory
- [**337**Star][20d] [Shell] [nullarray/roothelper](https://github.com/nullarray/roothelper) A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
- [**302**Star][4m] [Batchfile] [frizb/windows-privilege-escalation](https://github.com/frizb/windows-privilege-escalation) Windows Privilege Escalation Techniques and Scripts
- [**258**Star][3m] [PHP] [lawrenceamer/0xsp-mongoose](https://github.com/lawrenceamer/0xsp-mongoose) Privilege Escalation Enumeration Toolkit (64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding


#### <a id="caab36bba7fa8bb931a9133e37d397f6"></a>Windows


##### <a id="7ed8ee71c4a733d5e5e5d239f0e8b9e0"></a>NoCategory


- [**328**Star][2m] [C] [mattiwatti/efiguard](https://github.com/mattiwatti/efiguard) Disable PatchGuard and DSE at boot time
- [**209**Star][1y] [C++] [tandasat/pgresarch](https://github.com/tandasat/pgresarch) PatchGuard Research


##### <a id="58f3044f11a31d0371daa91486d3694e"></a>UAC


- [**2283**Star][15d] [C] [hfiref0x/uacme](https://github.com/hfiref0x/uacme) Defeating Windows User Account Control


##### <a id="b84c84a853416b37582c3b7f13eabb51"></a>AppLocker




##### <a id="e3c4c83dfed529ceee65040e565003c4"></a>ActiveDirectory


- [**1943**Star][2m] [infosecn1nja/ad-attack-defense](https://github.com/infosecn1nja/ad-attack-defense) Attack and defend active directory using modern post exploitation adversary tradecraft activity


##### <a id="25697cca32bd8c9492b8e2c8a3a93bfe"></a>Domain






#### <a id="2dd40db455d3c6f1f53f8a9c25bbe63e"></a>Persistence


- [**271**Star][2m] [C#] [fireeye/sharpersist](https://github.com/fireeye/sharpersist) Windows persistence toolkit 
- [**260**Star][1y] [C++] [ewhitehats/invisiblepersistence](https://github.com/ewhitehats/invisiblepersistence) Persisting in the Windows registry "invisibly"




### <a id="fc8737aef0f59c3952d11749fe582dac"></a>AutoXxx


- [**1799**Star][4m] [Shell] [arismelachroinos/lscript](https://github.com/arismelachroinos/lscript) The LAZY script will make your life easier, and of course faster.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Wireless&&WiFi&&AP&&802.11/NoCategory](#d4efda1853b2cb0909727188116a2a8c) |
- [**1741**Star][21d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/NoCategory](#05ab1b75266fddafc7195f5b395e4d99) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Payload&&RAT/PayloadGenerate](#ad92f6b801a18934f1971e2512f5ae4f) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Metasploit/NoCategory](#01be61d5bb9f6f7199208ff0fba86b5d) |
- [**1656**Star][2m] [Py] [rootm0s/winpwnage](https://github.com/rootm0s/winpwnage) UAC bypass, Elevate, Persistence and Execution methods


### <a id="3ae4408f4ab03f99bab9ef9ee69642a8"></a>DataExfiltration


- [**453**Star][3m] [Py] [viralmaniar/powershell-rat](https://github.com/viralmaniar/powershell-rat) Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.


### <a id="adfa06d452147ebacd35981ce56f916b"></a>LateralMovement




### <a id="39e9a0fe929fffe5721f7d7bb2dae547"></a>Burp


#### <a id="6366edc293f25b57bf688570b11d6584"></a>Collection


- [**1920**Star][1y] [BitBake] [1n3/intruderpayloads](https://github.com/1n3/intruderpayloads) A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
- [**1058**Star][27d] [snoopysecurity/awesome-burp-extensions](https://github.com/snoopysecurity/awesome-burp-extensions) A curated list of amazingly awesome Burp Extensions


#### <a id="5b761419863bc686be12c76451f49532"></a>NoCategory


- [**1091**Star][1y] [Py] [bugcrowd/hunt](https://github.com/bugcrowd/HUNT) Burp和ZAP的扩展收集
- [**742**Star][13d] [Batchfile] [mr-xn/burpsuite-collections](https://github.com/mr-xn/burpsuite-collections) BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦
- [**705**Star][1y] [Java] [d3vilbug/hackbar](https://github.com/d3vilbug/hackbar) HackBar plugin for Burpsuite v1.0
- [**646**Star][8m] [Java] [vulnerscom/burp-vulners-scanner](https://github.com/vulnerscom/burp-vulners-scanner) Vulnerability scanner based on vulners.com search API
- [**563**Star][1y] [Java] [federicodotta/brida](https://github.com/federicodotta/brida) The new bridge between Burp Suite and Frida!
- [**549**Star][8m] [Java] [c0ny1/chunked-coding-converter](https://github.com/c0ny1/chunked-coding-converter) Burp suite 分块传输辅助插件
- [**466**Star][19d] [Java] [wagiro/burpbounty](https://github.com/wagiro/burpbounty) Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
- [**436**Star][5m] [Py] [albinowax/activescanplusplus](https://github.com/albinowax/activescanplusplus) ActiveScan++ Burp Suite Plugin
- [**434**Star][1m] [Py] [romanzaikin/burpextension-whatsapp-decryption-checkpoint](https://github.com/romanzaikin/burpextension-whatsapp-decryption-checkpoint) This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)
- [**402**Star][4m] [Java] [bit4woo/recaptcha](https://github.com/bit4woo/recaptcha) reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
- [**397**Star][7m] [Java] [nccgroup/burpsuitehttpsmuggler](https://github.com/nccgroup/burpsuitehttpsmuggler) A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
- [**373**Star][1y] [Py] [rhinosecuritylabs/sleuthql](https://github.com/rhinosecuritylabs/sleuthql) Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
- [**371**Star][2m] [Java] [nccgroup/autorepeater](https://github.com/nccgroup/autorepeater) Automated HTTP Request Repeating With Burp Suite
- [**352**Star][4m] [Java] [bit4woo/domain_hunter](https://github.com/bit4woo/domain_hunter) A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名（不仅仅是单个主域名）的插件
- [**327**Star][2m] [Kotlin] [portswigger/turbo-intruder](https://github.com/portswigger/turbo-intruder) Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
- [**309**Star][1y] [Java] [ebryx/aes-killer](https://github.com/ebryx/aes-killer) Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly
- [**300**Star][3m] [Java] [bit4woo/knife](https://github.com/bit4woo/knife) A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
- [**300**Star][7m] [Java] [ilmila/j2eescan](https://github.com/ilmila/j2eescan) J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
- [**299**Star][2m] [Java] [portswigger/http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) an extension for Burp Suite designed to help you launch HTTP Request Smuggling attack
- [**297**Star][11m] [Shell] [yw9381/burp_suite_doc_zh_cn](https://github.com/yw9381/burp_suite_doc_zh_cn) 这是基于Burp Suite官方文档翻译而来的中文版文档
- [**296**Star][1y] [Java] [vmware/burp-rest-api](https://github.com/vmware/burp-rest-api) REST/JSON API to the Burp Suite security tool.
- [**272**Star][1y] [Java] [elkokc/reflector](https://github.com/elkokc/reflector) Burp plugin able to find reflected XSS on page in real-time while browsing on site
- [**264**Star][18d] [Py] [quitten/autorize](https://github.com/quitten/autorize) Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
- [**250**Star][2m] [Py] [rhinosecuritylabs/iprotate_burp_extension](https://github.com/rhinosecuritylabs/iprotate_burp_extension) Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
- [**241**Star][4m] [Py] [initroot/burpjslinkfinder](https://github.com/initroot/burpjslinkfinder) Burp Extension for a passive scanning JS files for endpoint links.
- [**235**Star][1m] [Java] [samlraider/samlraider](https://github.com/samlraider/samlraider) SAML2 Burp Extension
- [**231**Star][1y] [Java] [nccgroup/burpsuiteloggerplusplus](https://github.com/nccgroup/burpsuiteloggerplusplus) Burp Suite Logger++: Log activities of all the tools in Burp Suite
- [**230**Star][1y] [Py] [audibleblink/doxycannon](https://github.com/audibleblink/doxycannon) A poorman's proxycannon and botnet, using docker, ovpn files, and a dante socks5 proxy
- [**230**Star][1y] [Java] [difcareer/sqlmap4burp](https://github.com/difcareer/sqlmap4burp) sqlmap embed in burpsuite
- [**222**Star][6m] [Java] [c0ny1/jsencrypter](https://github.com/c0ny1/jsencrypter) 一个用于加密传输爆破的Burp Suite插件
- [**214**Star][2m] [Java] [c0ny1/passive-scan-client](https://github.com/c0ny1/passive-scan-client) Burp被动扫描流量转发插件
- [**205**Star][2m] [Java] [h3xstream/http-script-generator](https://github.com/h3xstream/http-script-generator) ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
- [**202**Star][5m] [Perl] [modzero/mod0burpuploadscanner](https://github.com/modzero/mod0burpuploadscanner) HTTP file upload scanner for Burp Proxy




### <a id="8e7a6a74ff322cbf2bad59092598de77"></a>Metasploit


#### <a id="01be61d5bb9f6f7199208ff0fba86b5d"></a>NoCategory


- [**18724**Star][14d] [Ruby] [rapid7/metasploit-framework](https://github.com/rapid7/metasploit-framework) Metasploit Framework
- [**1741**Star][21d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/AutoXxx](#fc8737aef0f59c3952d11749fe582dac) |[Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/NoCategory](#05ab1b75266fddafc7195f5b395e4d99) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Payload&&RAT/PayloadGenerate](#ad92f6b801a18934f1971e2512f5ae4f) |
- [**1284**Star][1y] [Shell] [dana-at-cp/backdoor-apk](https://github.com/dana-at-cp/backdoor-apk) backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.
- [**709**Star][2m] [C] [rapid7/metasploit-payloads](https://github.com/rapid7/metasploit-payloads) Unified repository for different Metasploit Framework payloads
- [**683**Star][2m] [Java] [isafeblue/trackray](https://github.com/isafeblue/trackray) 溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）
- [**445**Star][4m] [Py] [cchio/deep-pwning](https://github.com/cchio/deep-pwning) Metasploit for machine learning.
    - Also In Section: [Tools/AI&&MachineLearning&&DeepLearning&&NeturalNetwork/NoCategory](#19dd474da6b715024ff44d27484d528a) |
- [**389**Star][5m] [Ruby] [praetorian-code/purple-team-attack-automation](https://github.com/praetorian-code/purple-team-attack-automation) Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
- [**309**Star][10m] [Ruby] [darkoperator/metasploit-plugins](https://github.com/darkoperator/metasploit-plugins) Plugins for Metasploit Framework
- [**298**Star][2m] [Ruby] [fozavci/viproy-voipkit](https://github.com/fozavci/viproy-voipkit) VIPROY - VoIP Pen-Test Kit for Metasploit Framework
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/NoCategory](#2e40f2f1df5d7f93a7de47bf49c24a0e) |
- [**296**Star][1m] [Py] [3ndg4me/autoblue-ms17-010](https://github.com/3ndg4me/autoblue-ms17-010) This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010
- [**265**Star][3m] [Vue] [zerx0r/kage](https://github.com/Zerx0r/Kage) Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler




### <a id="b1161d6c4cb520d0cd574347cd18342e"></a>AntiAV&&BypassAV


- [**1009**Star][4m] [C] [govolution/avet](https://github.com/govolution/avet) AntiVirus Evasion Tool
- [**698**Star][9m] [Py] [mr-un1k0d3r/dkmc](https://github.com/mr-un1k0d3r/dkmc) DKMC - Dont kill my cat - Malicious payload evasion tool
- [**620**Star][6m] [Py] [paranoidninja/carboncopy](https://github.com/paranoidninja/carboncopy) A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
- [**461**Star][1y] [Go] [arvanaghi/checkplease](https://github.com/arvanaghi/checkplease) Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.
- [**299**Star][1y] [Py] [two06/inception](https://github.com/two06/inception) Provides In-memory compilation and reflective loading of C# apps for AV evasion.
- [**280**Star][1m] [C#] [ch0pin/aviator](https://github.com/ch0pin/aviator) Antivirus evasion project
- [**252**Star][1m] [C#] [hackplayers/salsa-tools](https://github.com/hackplayers/salsa-tools) Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched


### <a id="98a851c8e6744850efcb27b8e93dff73"></a>C&C


- [**2387**Star][3m] [Go] [ne0nd0g/merlin](https://github.com/ne0nd0g/merlin) Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
- [**1104**Star][1y] [Py] [byt3bl33d3r/gcat](https://github.com/byt3bl33d3r/gcat) A PoC backdoor that uses Gmail as a C&C server
- [**917**Star][19d] [C#] [cobbr/covenant](https://github.com/cobbr/covenant) Covenant is a collaborative .NET C2 framework for red teamers.
- [**632**Star][10m] [Py] [mehulj94/braindamage](https://github.com/mehulj94/braindamage) Remote administration tool which uses Telegram as a C&C server
- [**314**Star][1y] [C#] [spiderlabs/dohc2](https://github.com/spiderlabs/dohc2) DoHC2 allows the ExternalC2 library from Ryan Hanson (
- [**240**Star][14d] [PowerShell] [nettitude/poshc2](https://github.com/nettitude/poshc2) Python Server for PoshC2
- [**240**Star][14d] [PowerShell] [nettitude/poshc2](https://github.com/nettitude/PoshC2) Python Server for PoshC2


### <a id="a0897294e74a0863ea8b83d11994fad6"></a>DDOS


- [**2443**Star][17d] [C++] [pavel-odintsov/fastnetmon](https://github.com/pavel-odintsov/fastnetmon) FastNetMon community - very fast DDoS analyzer with sflow/netflow/mirror support
- [**1174**Star][29d] [Shell] [mitchellkrogza/nginx-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker) Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
- [**831**Star][2m] [Py] [649/memcrashed-ddos-exploit](https://github.com/649/memcrashed-ddos-exploit) DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/Shodan](#18c7c1df2e6ae5e9135dfa2e4eb1d4db) |
- [**457**Star][6m] [Shell] [jgmdev/ddos-deflate](https://github.com/jgmdev/ddos-deflate) Fork of DDoS Deflate with fixes, improvements and new features.
- [**451**Star][2m] [JS] [codemanki/cloudscraper](https://github.com/codemanki/cloudscraper) Node.js library to bypass cloudflare's anti-ddos page
- [**374**Star][12m] [C] [markus-go/bonesi](https://github.com/markus-go/bonesi) BoNeSi - the DDoS Botnet Simulator
- [**293**Star][3m] [Shell] [anti-ddos/anti-ddos](https://github.com/anti-ddos/Anti-DDOS) 
- [**243**Star][12m] [Py] [wenfengshi/ddos-dos-tools](https://github.com/wenfengshi/ddos-dos-tools) some sort of ddos-tools


### <a id="8e1069b2bce90b87eea762ee3d0935d8"></a>OWASP


- [**10690**Star][13d] [Py] [owasp/cheatsheetseries](https://github.com/owasp/cheatsheetseries) The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
- [**2245**Star][13d] [Go] [owasp/amass](https://github.com/owasp/amass) In-depth Attack Surface Mapping and Asset Discovery
- [**1902**Star][28d] [Perl] [spiderlabs/owasp-modsecurity-crs](https://github.com/spiderlabs/owasp-modsecurity-crs) OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
- [**1680**Star][1y] [owasp/devguide](https://github.com/owasp/devguide) The OWASP Guide
- [**1390**Star][2m] [HTML] [owasp/top10](https://github.com/owasp/top10) Official OWASP Top 10 Document Repository
- [**1000**Star][3m] [HTML] [owasp/nodegoat](https://github.com/owasp/nodegoat) The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
- [**731**Star][2m] [Java] [owasp/securityshepherd](https://github.com/owasp/securityshepherd) Web and mobile application security training platform
- [**665**Star][13d] [HTML] [owasp/asvs](https://github.com/owasp/asvs) Application Security Verification Standard
- [**597**Star][10m] [Py] [zdresearch/owasp-nettacker](https://github.com/zdresearch/OWASP-Nettacker) Automated Penetration Testing Framework
- [**480**Star][17d] [owasp/wstg](https://github.com/OWASP/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
- [**480**Star][17d] [owasp/wstg](https://github.com/owasp/wstg) The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.
- [**461**Star][7m] [Java] [owasp/owasp-webscarab](https://github.com/owasp/owasp-webscarab) OWASP WebScarab
- [**402**Star][5m] [Py] [stanislav-web/opendoor](https://github.com/stanislav-web/opendoor) OWASP WEB Directory Scanner
- [**360**Star][1m] [Java] [zaproxy/zap-extensions](https://github.com/zaproxy/zap-extensions) OWASP ZAP Add-ons
- [**341**Star][1m] [Java] [esapi/esapi-java-legacy](https://github.com/esapi/esapi-java-legacy) ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.
- [**292**Star][5m] [0xradi/owasp-web-checklist](https://github.com/0xradi/owasp-web-checklist) OWASP Web Application Security Testing Checklist
- [**271**Star][5m] [JS] [mike-goodwin/owasp-threat-dragon](https://github.com/mike-goodwin/owasp-threat-dragon) An open source, online threat modelling tool from OWASP
- [**269**Star][4m] [tanprathan/owasp-testing-checklist](https://github.com/tanprathan/owasp-testing-checklist) OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.
- [**248**Star][11m] [Java] [owasp/owasp-java-encoder](https://github.com/owasp/owasp-java-encoder) The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!
- [**225**Star][1m] [owasp/api-security](https://github.com/owasp/api-security) OWASP API Security Project


### <a id="7667f6a0381b6cded2014a0d279b5722"></a>Kali


- [**2522**Star][7m] [offensive-security/kali-nethunter](https://github.com/offensive-security/kali-nethunter) The Kali NetHunter Project
- [**2332**Star][7m] [Py] [lionsec/katoolin](https://github.com/lionsec/katoolin) Automatically install all Kali linux tools
- [**1690**Star][2m] [PHP] [xtr4nge/fruitywifi](https://github.com/xtr4nge/fruitywifi) FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
- [**849**Star][10m] [Shell] [esc0rtd3w/wifi-hacker](https://github.com/esc0rtd3w/wifi-hacker) Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
- [**714**Star][3m] [Py] [rajkumrdusad/tool-x](https://github.com/rajkumrdusad/tool-x) Tool-X is a kali linux hacking Tool installer. Tool-X developed for termux and other android terminals. using Tool-X you can install almost 263 hacking tools in termux app and other linux based distributions.
- [**667**Star][7m] [offensive-security/kali-arm-build-scripts](https://github.com/offensive-security/kali-arm-build-scripts) Kali Linux ARM build scripts
- [**542**Star][1m] [Shell] [offensive-security/kali-linux-docker](https://github.com/offensive-security/kali-linux-docker) PLEASE USE GITLAB
- [**385**Star][3m] [jack-liang/kalitools](https://github.com/jack-liang/kalitools) Kali Linux工具清单
- [**328**Star][7m] [offensive-security/kali-linux-recipes](https://github.com/offensive-security/kali-linux-recipes) Kali Linux Recipes


### <a id="0b8e79b79094082d0906153445d6ef9a"></a>CobaltStrike


- [**389**Star][1y] [Shell] [killswitch-gui/cobaltstrike-toolkit](https://github.com/killswitch-gui/cobaltstrike-toolkit) Some useful scripts for CobaltStrike
- [**203**Star][1y] [C#] [spiderlabs/sharpcompile](https://github.com/spiderlabs/sharpcompile) SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing…




***


## <a id="8f92ead9997a4b68d06a9acf9b01ef63"></a>Scanner&&SecurityScan&&AppScan


### <a id="de63a029bda6a7e429af272f291bb769"></a>NoCategory


- [**11006**Star][2m] [C] [robertdavidgraham/masscan](https://github.com/robertdavidgraham/masscan) TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
- [**7288**Star][25d] [Py] [s0md3v/xsstrike](https://github.com/s0md3v/XSStrike) Most advanced XSS scanner.
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/XSS&&XXE/NoCategory](#648e49b631ea4ba7c128b53764328c39) |
- [**5245**Star][1m] [Go] [zricethezav/gitleaks](https://github.com/zricethezav/gitleaks) Audit git repos for secrets
- [**4474**Star][16d] [Ruby] [wpscanteam/wpscan](https://github.com/wpscanteam/wpscan) WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
- [**4101**Star][24d] [we5ter/scanners-box](https://github.com/we5ter/scanners-box) A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
- [**3375**Star][1m] [Perl] [sullo/nikto](https://github.com/sullo/nikto) Nikto web server scanner
- [**3119**Star][2m] [Go] [mozilla/sops](https://github.com/mozilla/sops) Simple and flexible tool for managing secrets
- [**3049**Star][20d] [Py] [maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) Web path scanner
- [**3022**Star][2m] [C] [zmap/zmap](https://github.com/zmap/zmap) ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
- [**2904**Star][21d] [Py] [andresriancho/w3af](https://github.com/andresriancho/w3af) w3af: web application attack and audit framework, the open source web vulnerability scanner.
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/VulnerabilityScan&&BugHunting/VulnerabilityScan/NoCategory](#0ed7e90d216a8a5be1dafebaf9eaeb5d) |
- [**2261**Star][3m] [JS] [retirejs/retire.js](https://github.com/retirejs/retire.js) scanner detecting the use of JavaScript libraries with known vulnerabilities
- [**2027**Star][2m] [Ruby] [urbanadventurer/whatweb](https://github.com/urbanadventurer/whatweb) Next generation web scanner
- [**2023**Star][2m] [Py] [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) Fast and powerful SSL/TLS server scanning library.
- [**1630**Star][1m] [NSIS] [angryip/ipscan](https://github.com/angryip/ipscan) Angry IP Scanner - fast and friendly network scanner
- [**1530**Star][7m] [Py] [m4ll0k/wascan](https://github.com/m4ll0k/WAScan) WAScan - Web Application Scanner
- [**1494**Star][4m] [Py] [hannob/snallygaster](https://github.com/hannob/snallygaster) Tool to scan for secret files on HTTP servers
- [**1060**Star][2m] [PHP] [tuhinshubhra/red_hawk](https://github.com/tuhinshubhra/red_hawk) All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/NoCategory](#05ab1b75266fddafc7195f5b395e4d99) |
- [**1054**Star][3m] [Py] [gerbenjavado/linkfinder](https://github.com/gerbenjavado/linkfinder) A python script that finds endpoints in JavaScript files
- [**1037**Star][7m] [Py] [lucifer1993/struts-scan](https://github.com/lucifer1993/struts-scan) Python2编写的struts2漏洞全版本检测和利用工具
- [**985**Star][3m] [Py] [h4ckforjob/dirmap](https://github.com/h4ckforjob/dirmap) An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。
- [**905**Star][2m] [Py] [tuhinshubhra/cmseek](https://github.com/tuhinshubhra/cmseek) CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs
- [**880**Star][5m] [PHP] [tidesec/wdscanner](https://github.com/tidesec/wdscanner) WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。
- [**862**Star][1m] [Py] [ajinabraham/nodejsscan](https://github.com/ajinabraham/nodejsscan) NodeJsScan is a static security code scanner for Node.js applications.
- [**759**Star][17d] [Py] [vesche/scanless](https://github.com/vesche/scanless) online port scan scraper
- [**741**Star][19d] [Py] [nekmo/dirhunt](https://github.com/nekmo/dirhunt) Find web directories without bruteforce
    - Also In Section: [Tools/Spdier](#785ad72c95e857273dce41842f5e8873) |
- [**722**Star][6m] [Py] [ztgrace/changeme](https://github.com/ztgrace/changeme) A default credential scanner.
- [**694**Star][4m] [CSS] [ajinabraham/cmsscan](https://github.com/ajinabraham/cmsscan) CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues
- [**690**Star][2m] [CSS] [boy-hack/w12scan](https://github.com/w-digital-scanner/w12scan) a network asset discovery engine that can automatically aggregate related assets for analysis and use
- [**681**Star][28d] [C] [scanmem/scanmem](https://github.com/scanmem/scanmem) memory scanner for Linux
- [**671**Star][1m] [Ruby] [mozilla/ssh_scan](https://github.com/mozilla/ssh_scan) A prototype SSH configuration and policy scanner (Blog:
- [**657**Star][7m] [Py] [m4ll0k/wpseku](https://github.com/m4ll0k/wpseku) WPSeku - Wordpress Security Scanner
- [**656**Star][2m] [Py] [kevthehermit/pastehunter](https://github.com/kevthehermit/pastehunter) Scanning pastebin with yara rules
- [**649**Star][5m] [Py] [droope/droopescan](https://github.com/droope/droopescan) A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
- [**636**Star][1y] [Py] [lmco/laikaboss](https://github.com/lmco/laikaboss) Laika BOSS: Object Scanning System
- [**613**Star][5m] [Py] [rabbitmask/weblogicscan](https://github.com/rabbitmask/weblogicscan) Weblogic一键漏洞检测工具，V1.3
- [**612**Star][12m] [Ruby] [thesp0nge/dawnscanner](https://github.com/thesp0nge/dawnscanner) Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
- [**604**Star][4m] [Py] [faizann24/xsspy](https://github.com/faizann24/xsspy) XssPy - Web Application XSS Scanner
- [**569**Star][2m] [HTML] [gwillem/magento-malware-scanner](https://github.com/gwillem/magento-malware-scanner) Scanner, signatures and the largest collection of Magento malware
- [**564**Star][2m] [Perl] [alisamtechnology/atscan](https://github.com/alisamtechnology/atscan) Advanced dork Search & Mass Exploit Scanner
- [**555**Star][5m] [Py] [codingo/vhostscan](https://github.com/codingo/vhostscan) A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
- [**542**Star][7m] [Go] [marco-lancini/goscan](https://github.com/marco-lancini/goscan) Interactive Network Scanner
- [**536**Star][4m] [Py] [dhs-ncats/pshtt](https://github.com/cisagov/pshtt) Scan domains and return data based on HTTPS best practices
- [**526**Star][6m] [Py] [grayddq/gscan](https://github.com/grayddq/gscan) 本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。
- [**481**Star][1m] [Py] [fcavallarin/htcap](https://github.com/fcavallarin/htcap) htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
- [**475**Star][1y] [C] [nanshihui/scan-t](https://github.com/nanshihui/scan-t) a new crawler based on python with more function including Network fingerprint search
- [**399**Star][2m] [Py] [boy-hack/w13scan](https://github.com/w-digital-scanner/w13scan) Passive Security Scanner (被动安全扫描器)
- [**397**Star][10m] [JS] [eviltik/evilscan](https://github.com/eviltik/evilscan) NodeJS Simple Network Scanner
- [**390**Star][10m] [Py] [mitre/multiscanner](https://github.com/mitre/multiscanner) Modular file scanning/analysis framework
- [**386**Star][1y] [Py] [grayddq/publicmonitors](https://github.com/grayddq/publicmonitors) 对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险
- [**385**Star][1m] [C] [hasherezade/hollows_hunter](https://github.com/hasherezade/hollows_hunter) Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- [**379**Star][13d] [Py] [stamparm/dsss](https://github.com/stamparm/dsss) Damn Small SQLi Scanner
- [**340**Star][4m] [Py] [swisskyrepo/wordpresscan](https://github.com/swisskyrepo/wordpresscan) WPScan rewritten in Python + some WPSeku ideas
- [**339**Star][12m] [Py] [skavngr/rapidscan](https://github.com/skavngr/rapidscan) 
- [**338**Star][1m] [Py] [fgeek/pyfiscan](https://github.com/fgeek/pyfiscan) Free web-application vulnerability and version scanner
- [**335**Star][3m] [Java] [portswigger/backslash-powered-scanner](https://github.com/portswigger/backslash-powered-scanner) Finds unknown classes of injection vulnerabilities
- [**330**Star][1y] [Py] [flipkart-incubator/rta](https://github.com/flipkart-incubator/rta) Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.
- [**316**Star][2m] [HTML] [coinbase/salus](https://github.com/coinbase/salus) Security scanner coordinator
- [**315**Star][15d] [C] [royhills/arp-scan](https://github.com/royhills/arp-scan) The ARP Scanner
- [**301**Star][10m] [PHP] [steverobbins/magescan](https://github.com/steverobbins/magescan) Scan a Magento site for information
- [**299**Star][1m] [PowerShell] [canix1/adaclscanner](https://github.com/canix1/adaclscanner) Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
- [**294**Star][1y] [Shell] [cryptolok/ghostinthenet](https://github.com/cryptolok/ghostinthenet) Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan
    - Also In Section: [Tools/Network&&Sniff&&Mitm/MITM](#11c73d3e2f71f3914a3bca35ba90de36) |
- [**294**Star][2m] [Ruby] [m0nad/hellraiser](https://github.com/m0nad/hellraiser) Vulnerability Scanner
- [**294**Star][1m] [Shell] [mitchellkrogza/apache-ultimate-bad-bot-blocker](https://github.com/mitchellkrogza/apache-ultimate-bad-bot-blocker) Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
- [**286**Star][4m] [enkomio/taipan](https://github.com/enkomio/Taipan) Web application vulnerability scanner
- [**284**Star][1y] [Py] [code-scan/dzscan](https://github.com/code-scan/dzscan) Dzscan
- [**280**Star][8m] [Py] [boy-hack/w8fuckcdn](https://github.com/boy-hack/w8fuckcdn) Get website IP address by scanning the entire net 通过扫描全网绕过CDN获取网站IP地址
- [**278**Star][3m] [Py] [shenril/sitadel](https://github.com/shenril/sitadel) Web Application Security Scanner
- [**276**Star][2m] [Py] [target/strelka](https://github.com/target/strelka) Real-time, container-based file scanning at enterprise scale
- [**268**Star][1y] [PHP] [psecio/parse](https://github.com/psecio/parse) Parse: A Static Security Scanner
- [**262**Star][5m] [Py] [abhisharma404/vault_scanner](https://github.com/abhisharma404/vault) swiss army knife for hackers
- [**254**Star][3m] [Py] [m4ll0k/konan](https://github.com/m4ll0k/Konan) Konan - Advanced Web Application Dir Scanner
- [**253**Star][9m] [jeffzh3ng/insectsawake](https://github.com/jeffzh3ng/insectsawake) Network Vulnerability Scanner
- [**246**Star][1m] [Py] [gildasio/h2t](https://github.com/gildasio/h2t) h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
- [**245**Star][2m] [Go] [zmap/zgrab2](https://github.com/zmap/zgrab2) Go Application Layer Scanner
- [**235**Star][3m] [PHP] [psecio/versionscan](https://github.com/psecio/versionscan) A PHP version scanner for reporting possible vulnerabilities
- [**233**Star][7m] [Go] [gocaio/goca](https://github.com/gocaio/goca) Goca Scanner
- [**217**Star][5m] [JS] [pavanw3b/sh00t](https://github.com/pavanw3b/sh00t) Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.
- [**209**Star][3m] [Py] [iojw/socialscan](https://github.com/iojw/socialscan) Check email address and username availability on online platforms
- [**207**Star][9m] [Py] [nullarray/dorknet](https://github.com/nullarray/dorknet) Selenium powered Python script to automate searching for vulnerable web apps.
- [**202**Star][1y] [Py] [dionach/cmsmap](https://github.com/dionach/cmsmap) CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
- [**201**Star][12m] [PowerShell] [sud0woodo/dcomrade](https://github.com/sud0woodo/dcomrade) Powershell script for enumerating vulnerable DCOM Applications


### <a id="58d8b993ffc34f7ded7f4a0077129eb2"></a>Secret&&Privacy


- [**6673**Star][10m] [Shell] [awslabs/git-secrets](https://github.com/awslabs/git-secrets) Prevents you from committing secrets and credentials into git repositories
- [**4346**Star][7m] [Py] [boxug/trape](https://github.com/jofpin/trape) People tracker on the Internet: OSINT analysis and research tool by Jose Pino
- [**3064**Star][28d] [Py] [tribler/tribler](https://github.com/tribler/tribler) Privacy enhanced BitTorrent client with P2P content discovery
- [**1102**Star][4m] [Vue] [0xbug/hawkeye](https://github.com/0xbug/hawkeye) GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)
- [**935**Star][20d] [Py] [mozilla/openwpm](https://github.com/mozilla/OpenWPM) A web privacy measurement framework
- [**884**Star][2m] [C#] [elevenpaths/foca](https://github.com/elevenpaths/foca) Tool to find metadata and hidden information in the documents.
- [**822**Star][18d] [Py] [al0ne/vxscan](https://github.com/al0ne/vxscan) python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。
- [**390**Star][6m] [Py] [repoog/gitprey](https://github.com/repoog/gitprey) Searching sensitive files and contents in GitHub associated to company name or other key words
- [**356**Star][2m] [Py] [hell0w0rld0/github-hunter](https://github.com/hell0w0rld0/github-hunter) This tool is for sensitive information searching on Github - The Fast Version here:
- [**312**Star][15d] [HTML] [tanjiti/sec_profile](https://github.com/tanjiti/sec_profile) 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/SocialNetwork/Github](#8d1ae776898748b8249132e822f6c919) |


### <a id="1927ed0a77ff4f176b0b7f7abc551e4a"></a>PrivacyStorage


#### <a id="1af1c4f9dba1db2a4137be9c441778b8"></a>NoCategory


- [**5029**Star][2m] [Shell] [stackexchange/blackbox](https://github.com/stackexchange/blackbox) Safely store secrets in Git/Mercurial/Subversion


#### <a id="362dfd9c1f530dd20f922fd4e0faf0e3"></a>Steganography


- [**569**Star][1m] [Go] [dimitarpetrov/stegify](https://github.com/dimitarpetrov/stegify) Go tool for LSB steganography, capable of hiding any file within an image.
- [**344**Star][6m] [Go] [lukechampine/jsteg](https://github.com/lukechampine/jsteg) JPEG steganography
- [**342**Star][5m] [Java] [syvaidya/openstego](https://github.com/syvaidya/openstego) OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within a cover file (e.g. images). b) Watermarking: Watermarking files (e.g. images) with an invisible signature. It can be used to detect unauthorized file copying.
- [**274**Star][1y] [C] [abeluck/stegdetect](https://github.com/abeluck/stegdetect) UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.
- [**256**Star][26d] [Py] [cedricbonhomme/stegano](https://github.com/cedricbonhomme/stegano) Stegano is a pure Python steganography module.






***


## <a id="a76463feb91d09b3d024fae798b92be6"></a>Recon&&InfoGather&&SubDomainDiscovery&&OSINT


### <a id="05ab1b75266fddafc7195f5b395e4d99"></a>NoCategory


- [**7042**Star][28d] [Java] [lionsoul2014/ip2region](https://github.com/lionsoul2014/ip2region) Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is less then 5Mb with all ip address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm
- [**6894**Star][27d] [greatfire/wiki](https://github.com/greatfire/wiki) 自由浏览
- [**6109**Star][9m] [Py] [schollz/howmanypeoplearearound](https://github.com/schollz/howmanypeoplearearound) Count the number of people around you
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Wireless&&WiFi&&AP&&802.11/NoCategory](#d4efda1853b2cb0909727188116a2a8c) |
- [**2154**Star][28d] [C] [texane/stlink](https://github.com/texane/stlink) stm32 discovery line linux programmer
- [**2061**Star][16d] [Py] [fortynorthsecurity/eyewitness](https://github.com/FortyNorthSecurity/EyeWitness) EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
- [**1741**Star][21d] [Shell] [leebaird/discover](https://github.com/leebaird/discover) Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/AutoXxx](#fc8737aef0f59c3952d11749fe582dac) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Payload&&RAT/PayloadGenerate](#ad92f6b801a18934f1971e2512f5ae4f) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Metasploit/NoCategory](#01be61d5bb9f6f7199208ff0fba86b5d) |
- [**1627**Star][28d] [Py] [cea-sec/ivre](https://github.com/cea-sec/ivre) Network recon framework.
- [**1593**Star][28d] [Go] [awnumar/memguard](https://github.com/awnumar/memguard) Secure software enclave for storage of sensitive information in memory.
- [**1591**Star][4m] [Py] [mozilla/cipherscan](https://github.com/mozilla/cipherscan) A very simple way to find out which SSL ciphersuites are supported by a target.
- [**1392**Star][6m] [Py] [enablesecurity/wafw00f](https://github.com/enablesecurity/wafw00f) WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
- [**1309**Star][3m] [JS] [lockfale/osint-framework](https://github.com/lockfale/osint-framework) OSINT Framework
- [**1301**Star][26d] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) Educational Phishing Tool & Information Collector
    - Also In Section: [Tools/SET&&Phishing&&SpearPhishing/NoCategory](#ce734598055ad3885d45d0b35d2bf0d7) |
- [**1261**Star][1m] [Py] [s0md3v/arjun](https://github.com/s0md3v/Arjun) HTTP parameter discovery suite.
- [**1256**Star][2m] [Py] [codingo/reconnoitre](https://github.com/codingo/reconnoitre) A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
- [**1253**Star][1y] [PowerShell] [dafthack/mailsniper](https://github.com/dafthack/mailsniper) MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
- [**1180**Star][15d] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/Exploit/漏洞利用](#c83f77f27ccf5f26c8b596979d7151c3) |[Tools/Database&&SQLAttack&&SQLInjection/NoSQL/NoCategory](#af0aaaf233cdff3a88d04556dc5871e0) |
- [**1135**Star][10m] [C] [blechschmidt/massdns](https://github.com/blechschmidt/massdns) A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
- [**1060**Star][2m] [PHP] [tuhinshubhra/red_hawk](https://github.com/tuhinshubhra/red_hawk) All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
    - Also In Section: [Tools/Scanner&&SecurityScan&&AppScan/NoCategory](#de63a029bda6a7e429af272f291bb769) |
- [**1041**Star][1m] [Rust] [fgribreau/mailchecker](https://github.com/fgribreau/mailchecker) 邮件检测库，跨语言。覆盖33078虚假邮件提供者
- [**944**Star][4m] [C] [rbsec/sslscan](https://github.com/rbsec/sslscan) sslscan tests SSL/TLS enabled services to discover supported cipher suites
- [**930**Star][2m] [Py] [sundowndev/phoneinfoga](https://github.com/sundowndev/phoneinfoga) Advanced information gathering & OSINT tool for phone numbers
- [**924**Star][17d] [OCaml] [airbus-seclab/bincat](https://github.com/airbus-seclab/bincat) Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- [**871**Star][4m] [derpopo/uabe](https://github.com/derpopo/uabe) Unity Assets Bundle Extractor
- [**851**Star][7m] [Py] [s0md3v/recondog](https://github.com/s0md3v/ReconDog) Reconnaissance Swiss Army Knife
- [**760**Star][12m] [HTML] [sense-of-security/adrecon](https://github.com/sense-of-security/adrecon) ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
- [**742**Star][3m] [Py] [threatexpress/domainhunter](https://github.com/threatexpress/domainhunter) Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
    - Also In Section: [Tools/SET&&Phishing&&SpearPhishing/NoCategory](#ce734598055ad3885d45d0b35d2bf0d7) |
- [**698**Star][17d] [Ruby] [intrigueio/intrigue-core](https://github.com/intrigueio/intrigue-core) Discover Your Attack Surface
- [**694**Star][27d] [Py] [khast3x/h8mail](https://github.com/khast3x/h8mail) Password Breach Hunting and Email OSINT tool, locally or using premium services. Supports chasing down related email
- [**680**Star][4m] [Shell] [nahamsec/lazyrecon](https://github.com/nahamsec/lazyrecon) This script is intended to automate your reconnaissance process in an organized fashion
- [**617**Star][5m] [Py] [deibit/cansina](https://github.com/deibit/cansina) Web Content Discovery Tool
- [**579**Star][7m] [Py] [ekultek/zeus-scanner](https://github.com/ekultek/zeus-scanner) Advanced reconnaissance utility
- [**537**Star][8m] [Py] [m4ll0k/infoga](https://github.com/m4ll0k/infoga) Infoga - Email OSINT
- [**483**Star][2m] [no-github/digital-privacy](https://github.com/no-github/digital-privacy) 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗
- [**463**Star][3m] [Py] [xillwillx/skiptracer](https://github.com/xillwillx/skiptracer) OSINT python webscaping framework
- [**462**Star][14d] [Rust] [kpcyrd/sn0int](https://github.com/kpcyrd/sn0int) Semi-automatic OSINT framework and package manager
- [**417**Star][2m] [Py] [superhedgy/attacksurfacemapper](https://github.com/superhedgy/attacksurfacemapper) AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
- [**404**Star][4m] [Shell] [d4rk007/redghost](https://github.com/d4rk007/redghost) Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
- [**388**Star][3m] [Go] [graniet/operative-framework](https://github.com/graniet/operative-framework) operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
- [**387**Star][12m] [Py] [chrismaddalena/odin](https://github.com/chrismaddalena/odin) Automated network asset, email, and social media profile discovery and cataloguing.
- [**378**Star][2m] [ph055a/osint-collection](https://github.com/ph055a/osint-collection) Maintained collection of OSINT related resources. (All Free & Actionable)
- [**362**Star][1m] [Py] [dedsecinside/torbot](https://github.com/dedsecinside/torbot) Dark Web OSINT Tool
- [**350**Star][11m] [Py] [aancw/belati](https://github.com/aancw/belati) The Traditional Swiss Army Knife for OSINT
- [**350**Star][18d] [Py] [depthsecurity/armory](https://github.com/depthsecurity/armory) Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.
- [**335**Star][1m] [Py] [darryllane/bluto](https://github.com/darryllane/bluto) DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking
- [**329**Star][11m] [Py] [mdsecactivebreach/linkedint](https://github.com/mdsecactivebreach/linkedint) LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation
- [**320**Star][5m] [Go] [nhoya/gosint](https://github.com/nhoya/gosint) OSINT Swiss Army Knife
- [**304**Star][4m] [Py] [initstring/linkedin2username](https://github.com/initstring/linkedin2username) OSINT Tool: Generate username lists for companies on LinkedIn
- [**302**Star][1y] [Py] [sharadkumar97/osint-spy](https://github.com/sharadkumar97/osint-spy) Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at sharad@osint-spy.com
- [**299**Star][1y] [Py] [twelvesec/gasmask](https://github.com/twelvesec/gasmask) Information gathering tool - OSINT
- [**296**Star][11m] [Py] [r3vn/badkarma](https://github.com/r3vn/badkarma) network reconnaissance toolkit
- [**289**Star][6m] [Shell] [eschultze/urlextractor](https://github.com/eschultze/urlextractor) Information gathering & website reconnaissance |
- [**284**Star][2m] [JS] [pownjs/pown-recon](https://github.com/pownjs/pown-recon) A powerful target reconnaissance framework powered by graph theory.
- [**279**Star][1y] [Shell] [ha71/namechk](https://github.com/ha71/namechk) Osint tool based on namechk.com for checking usernames on more than 100 websites, forums and social networks.
- [**268**Star][1y] [Go] [tomsteele/blacksheepwall](https://github.com/tomsteele/blacksheepwall) blacksheepwall is a hostname reconnaissance tool
- [**264**Star][2m] [Py] [ekultek/whatbreach](https://github.com/ekultek/whatbreach) OSINT tool to find breached emails, databases, pastes, and relevant information
- [**242**Star][2m] [Shell] [solomonsklash/chomp-scan](https://github.com/solomonsklash/chomp-scan) A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
- [**236**Star][13d] [Py] [zephrfish/googd0rker](https://github.com/zephrfish/googd0rker) GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.
- [**229**Star][7m] [JS] [cliqz-oss/local-sheriff](https://github.com/cliqz-oss/local-sheriff) Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
- [**229**Star][1m] [Propeller Spin] [grandideastudio/jtagulator](https://github.com/grandideastudio/jtagulator) JTAGulator: Assisted discovery of on-chip debug interfaces
- [**227**Star][1m] [Py] [sc1341/instagramosint](https://github.com/sc1341/instagramosint) An Instagram Open Source Intelligence Tool
- [**225**Star][1m] [Py] [anon-exploiter/sitebroker](https://github.com/anon-exploiter/sitebroker) A cross-platform python based utility for information gathering and penetration testing automation!
- [**220**Star][3m] [Py] [thewhiteh4t/finalrecon](https://github.com/thewhiteh4t/finalrecon) OSINT Tool for All-In-One Web Reconnaissance
- [**220**Star][13d] [PowerShell] [tonyphipps/meerkat](https://github.com/tonyphipps/meerkat) A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- [**219**Star][3m] [Py] [eth0izzle/the-endorser](https://github.com/eth0izzle/the-endorser) An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.
- [**218**Star][1y] [Shell] [edoverflow/megplus](https://github.com/edoverflow/megplus) Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
- [**210**Star][4m] [Py] [spiderlabs/hosthunter](https://github.com/spiderlabs/hosthunter) HostHunter a recon tool for discovering hostnames using OSINT techniques.


### <a id="e945721056c78a53003e01c3d2f3b8fe"></a>SubDomainDiscovery


- [**4008**Star][1m] [Py] [aboul3la/sublist3r](https://github.com/aboul3la/sublist3r) Fast subdomains enumeration tool for penetration testers
- [**3147**Star][15d] [Py] [laramies/theharvester](https://github.com/laramies/theharvester) E-mails, subdomains and names Harvester - OSINT
- [**2981**Star][6m] [Go] [michenriksen/aquatone](https://github.com/michenriksen/aquatone) A Tool for Domain Flyovers
- [**1750**Star][6m] [Py] [lijiejie/subdomainsbrute](https://github.com/lijiejie/subdomainsbrute) A fast sub domain brute tool for pentesters
- [**1686**Star][1m] [Go] [subfinder/subfinder](https://github.com/subfinder/subfinder) SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
- [**1668**Star][7m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) Knock Subdomain Scan
    - Also In Section: [Tools/wordlist/NoCategory](#af1d71122d601229dc4aa9d08f4e3e15) |
- [**1555**Star][14d] [Go] [caffix/amass](https://github.com/caffix/amass) In-depth Attack Surface Mapping and Asset Discovery
- [**1087**Star][1m] [Py] [john-kurkowski/tldextract](https://github.com/john-kurkowski/tldextract) Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.
- [**752**Star][12d] [Rust] [edu4rdshl/findomain](https://github.com/edu4rdshl/findomain) The fastest and cross-platform subdomain enumerator, don't waste your time.
- [**687**Star][4m] [Go] [haccer/subjack](https://github.com/haccer/subjack) Subdomain Takeover tool written in Go
- [**639**Star][1y] [Py] [simplysecurity/simplyemail](https://github.com/SimplySecurity/SimplyEmail) Email recon made fast and easy, with a framework to build on
- [**573**Star][2m] [Py] [jonluca/anubis](https://github.com/jonluca/anubis) Subdomain enumeration and information gathering tool
- [**537**Star][8m] [Py] [feeicn/esd](https://github.com/feeicn/esd) Enumeration sub domains(枚举子域名)
- [**468**Star][1m] [Py] [typeerror/domained](https://github.com/TypeError/domained) Multi Tool Subdomain Enumeration
- [**435**Star][1y] [Go] [ice3man543/subover](https://github.com/ice3man543/subover) A Powerful Subdomain Takeover Tool
- [**434**Star][5m] [Py] [threezh1/jsfinder](https://github.com/threezh1/jsfinder) JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
- [**425**Star][1m] [Py] [nsonaniya2010/subdomainizer](https://github.com/nsonaniya2010/subdomainizer) A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
- [**422**Star][10m] [Py] [appsecco/bugcrowd-levelup-subdomain-enumeration](https://github.com/appsecco/bugcrowd-levelup-subdomain-enumeration) This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
- [**407**Star][2m] [Py] [yanxiu0614/subdomain3](https://github.com/yanxiu0614/subdomain3) A new generation of tool for discovering subdomains( ip , cdn and so on)
- [**327**Star][4m] [Py] [chris408/ct-exposer](https://github.com/chris408/ct-exposer) An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
- [**302**Star][1y] [Py] [christophetd/censys-subdomain-finder](https://github.com/christophetd/censys-subdomain-finder) ⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
- [**275**Star][7m] [Py] [franccesco/getaltname](https://github.com/franccesco/getaltname) Extract subdomains from SSL certificates in HTTPS sites.
- [**254**Star][10m] [Py] [appsecco/the-art-of-subdomain-enumeration](https://github.com/appsecco/the-art-of-subdomain-enumeration) This repository contains all the supplement material for the book "The art of sub-domain enumeration"
- [**251**Star][5m] [Go] [anshumanbh/tko-subs](https://github.com/anshumanbh/tko-subs) A tool that can help detect and takeover subdomains with dead DNS records
- [**204**Star][1m] [Shell] [screetsec/sudomy](https://github.com/screetsec/sudomy) Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format


### <a id="375a8baa06f24de1b67398c1ac74ed24"></a>Recon&&InfoGather


- [**3496**Star][15d] [Shell] [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) Testing TLS/SSL encryption anywhere on any port
- [**2378**Star][15d] [Py] [smicallef/spiderfoot](https://github.com/smicallef/spiderfoot) SpiderFoot, the most complete OSINT collection and reconnaissance tool.
- [**2168**Star][1y] [Py] [datasploit/datasploit](https://github.com/DataSploit/datasploit) An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.
- [**1963**Star][8m] [JS] [weichiachang/stacks-cli](https://github.com/weichiachang/stacks-cli) Check website stack from the terminal
- [**1873**Star][1m] [Py] [j3ssie/osmedeus](https://github.com/j3ssie/osmedeus) Fully automated offensive security framework for reconnaissance and vulnerability scanning
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/VulnerabilityScan&&BugHunting/VulnerabilityScan/NoCategory](#0ed7e90d216a8a5be1dafebaf9eaeb5d) |
- [**1629**Star][1y] [Py] [evyatarmeged/raccoon](https://github.com/evyatarmeged/raccoon) A high performance offensive security tool for reconnaissance and vulnerability scanning
    - Also In Section: [Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/VulnerabilityScan&&BugHunting/VulnerabilityScan/NoCategory](#0ed7e90d216a8a5be1dafebaf9eaeb5d) |
- [**1420**Star][6m] [Py] [oros42/imsi-catcher](https://github.com/oros42/imsi-catcher) This program show you IMSI numbers of cellphones around you.
- [**1271**Star][1y] [Go] [evilsocket/xray](https://github.com/evilsocket/xray) XRay is a tool for recon, mapping and OSINT gathering from public networks.
- [**619**Star][29d] [Py] [tib3rius/autorecon](https://github.com/tib3rius/autorecon) AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
- [**510**Star][9m] [Py] [fortynorthsecurity/just-metadata](https://github.com/FortyNorthSecurity/Just-Metadata) Just-Metadata is a tool that gathers and analyzes metadata about IP addresses. It attempts to find relationships between systems within a large dataset.
- [**453**Star][19d] [Py] [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.
- [**388**Star][10m] [Swift] [ibm/mac-ibm-enrollment-app](https://github.com/ibm/mac-ibm-enrollment-app) The Mac@IBM enrollment app makes setting up macOS with Jamf Pro more intuitive for users and easier for IT. The application offers IT admins the ability to gather additional information about their users during setup, allows users to customize their enrollment by selecting apps or bundles of apps to install during setup, and provides users with …
- [**349**Star][4m] [C++] [wbenny/pdbex](https://github.com/wbenny/pdbex) pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers
- [**343**Star][27d] [Py] [lanmaster53/recon-ng](https://github.com/lanmaster53/recon-ng) Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
- [**283**Star][2m] [Py] [govanguard/legion](https://github.com/govanguard/legion) Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
- [**269**Star][10m] [Py] [LaNMaSteR53/recon-ng](https://bitbucket.org/lanmaster53/recon-ng) 


### <a id="016bb6bd00f1e0f8451f779fe09766db"></a>Fingerprinting


- [**8843**Star][13d] [JS] [valve/fingerprintjs2](https://github.com/valve/fingerprintjs2) Modern & flexible browser fingerprinting library
- [**3029**Star][1m] [JS] [valve/fingerprintjs](https://github.com/valve/fingerprintjs) Anonymous browser fingerprint
- [**1595**Star][14d] [JS] [ghacksuserjs/ghacks-user.js](https://github.com/ghacksuserjs/ghacks-user.js) An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting
- [**1595**Star][9m] [C] [nmikhailov/validity90](https://github.com/nmikhailov/validity90) Reverse engineering of Validity/Synaptics 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a fingerprint readers protocol
- [**918**Star][7m] [JS] [song-li/cross_browser](https://github.com/song-li/cross_browser) cross_browser_fingerprinting
- [**783**Star][1m] [Py] [salesforce/ja3](https://github.com/salesforce/ja3) JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.
- [**372**Star][21d] [Py] [0x4d31/fatt](https://github.com/0x4d31/fatt) FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
- [**309**Star][2m] [Py] [dpwe/audfprint](https://github.com/dpwe/audfprint) Landmark-based audio fingerprinting
- [**305**Star][3m] [Py] [salesforce/hassh](https://github.com/salesforce/hassh) HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.
- [**268**Star][1y] [CSS] [w-digital-scanner/w11scan](https://github.com/w-digital-scanner/w11scan) 分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform
- [**240**Star][2m] [C] [leebrotherston/tls-fingerprinting](https://github.com/leebrotherston/tls-fingerprinting) TLS Fingerprinting
- [**224**Star][2m] [GLSL] [westpointltd/tls_prober](https://github.com/westpointltd/tls_prober) A tool to fingerprint SSL/TLS servers
- [**212**Star][1y] [Py] [sensepost/spartan](https://github.com/sensepost/spartan) Frontpage and Sharepoint fingerprinting and attack tool.
- [**200**Star][1y] [Erlang] [kudelskisecurity/scannerl](https://github.com/kudelskisecurity/scannerl) The modular distributed fingerprinting engine


### <a id="6ea9006a5325dd21d246359329a3ede2"></a>Collection


- [**3674**Star][15d] [jivoi/awesome-osint](https://github.com/jivoi/awesome-osint) OSINT资源收集


### <a id="dc74ad2dd53aa8c8bf3a3097ad1f12b7"></a>SocialNetwork


#### <a id="de93515e77c0ca100bbf92c83f82dc2a"></a>Twitter


- [**2797**Star][21d] [Py] [twintproject/twint](https://github.com/twintproject/twint) An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.


#### <a id="8d1ae776898748b8249132e822f6c919"></a>Github


- [**1627**Star][22d] [Go] [eth0izzle/shhgit](https://github.com/eth0izzle/shhgit) Ah shhgit! Find GitHub secrets in real time
- [**1549**Star][1y] [Py] [unkl4b/gitminer](https://github.com/unkl4b/gitminer) Tool for advanced mining for content on Github
- [**1321**Star][7m] [Py] [feeicn/gsil](https://github.com/feeicn/gsil) GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）
- [**840**Star][7m] [Go] [misecurity/x-patrol](https://github.com/misecurity/x-patrol) github泄露扫描系统
- [**834**Star][1m] [JS] [vksrc/github-monitor](https://github.com/vksrc/github-monitor) Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
- [**767**Star][1m] [Py] [bishopfox/gitgot](https://github.com/bishopfox/gitgot) Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
- [**750**Star][3m] [Py] [techgaun/github-dorks](https://github.com/techgaun/github-dorks) Collection of github dorks and helper tool to automate the process of checking dorks
- [**602**Star][2m] [Py] [hisxo/gitgraber](https://github.com/hisxo/gitgraber) gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
- [**312**Star][15d] [HTML] [tanjiti/sec_profile](https://github.com/tanjiti/sec_profile) 爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
    - Also In Section: [Tools/Scanner&&SecurityScan&&AppScan/Secret&&Privacy](#58d8b993ffc34f7ded7f4a0077129eb2) |
- [**290**Star][7m] [Py] [s0md3v/zen](https://github.com/s0md3v/zen) Find emails of Github users


#### <a id="6d36e9623aadaf40085ef5af89c8d698"></a>NoCategory


- [**7541**Star][30d] [Py] [theyahya/sherlock](https://github.com/sherlock-project/sherlock) Find Usernames Across Social Networks
- [**2504**Star][2m] [Py] [greenwolf/social_mapper](https://github.com/Greenwolf/social_mapper) A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
- [**653**Star][1y] [Go] [0x09al/raven](https://github.com/0x09al/raven) raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.




### <a id="a695111d8e30d645354c414cb27b7843"></a>DNS


- [**2421**Star][4m] [Go] [oj/gobuster](https://github.com/oj/gobuster) Directory/File, DNS and VHost busting tool written in Go
- [**2278**Star][30d] [Py] [ab77/netflix-proxy](https://github.com/ab77/netflix-proxy) Smart DNS proxy to watch Netflix
- [**2081**Star][19d] [Py] [elceef/dnstwist](https://github.com/elceef/dnstwist) Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
- [**1885**Star][28d] [C++] [powerdns/pdns](https://github.com/powerdns/pdns) PowerDNS
- [**1669**Star][3m] [Py] [lgandx/responder](https://github.com/lgandx/responder) Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
- [**1117**Star][7m] [Py] [darkoperator/dnsrecon](https://github.com/darkoperator/dnsrecon) DNS Enumeration Script
- [**1044**Star][2m] [Py] [infosec-au/altdns](https://github.com/infosec-au/altdns) Generates permutations, alterations and mutations of subdomains and then resolves them
- [**1039**Star][1m] [Go] [nadoo/glider](https://github.com/nadoo/glider) glider is a forward proxy with multiple protocols support, and also a dns forwarding server with ipset management features(like dnsmasq).
- [**969**Star][6m] [Py] [m57/dnsteal](https://github.com/m57/dnsteal) DNS Exfiltration tool for stealthily sending files over DNS requests.
- [**891**Star][18d] [Py] [mschwager/fierce](https://github.com/mschwager/fierce) A DNS reconnaissance tool for locating non-contiguous IP space.
- [**877**Star][5m] [Py] [m0rtem/cloudfail](https://github.com/m0rtem/cloudfail) Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
- [**681**Star][1y] [Py] [bugscanteam/dnslog](https://github.com/bugscanteam/dnslog) DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。
- [**594**Star][7m] [Shell] [cokebar/gfwlist2dnsmasq](https://github.com/cokebar/gfwlist2dnsmasq) A shell script which convert gfwlist into dnsmasq rules. Python version:
- [**558**Star][6m] [C] [getdnsapi/stubby](https://github.com/getdnsapi/stubby) Stubby is the name given to a mode of using getdns which enables it to act as a local DNS Privacy stub resolver (using DNS-over-TLS).
- [**457**Star][8m] [C] [cofyc/dnscrypt-wrapper](https://github.com/cofyc/dnscrypt-wrapper) This is dnscrypt wrapper (server-side dnscrypt proxy), which helps to add dnscrypt support to any name resolver.
- [**359**Star][3m] [JS] [nccgroup/singularity](https://github.com/nccgroup/singularity) A DNS rebinding attack framework.
- [**259**Star][11m] [Py] [trycatchhcf/packetwhisper](https://github.com/trycatchhcf/packetwhisper) PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.
- [**258**Star][2m] [Go] [zmap/zdns](https://github.com/zmap/zdns) Fast CLI DNS Lookup Tool
- [**249**Star][3m] [C#] [kevin-robertson/inveighzero](https://github.com/kevin-robertson/inveighzero) Windows C# LLMNR/mDNS/NBNS/DNS spoofer/man-in-the-middle tool
- [**243**Star][9m] [Go] [erbbysam/dnsgrep](https://github.com/erbbysam/dnsgrep) Quickly Search Large DNS Datasets
- [**237**Star][25d] [Py] [mandatoryprogrammer/trusttrees](https://github.com/mandatoryprogrammer/trusttrees) A Tool for DNS Delegation Trust Graphing
- [**230**Star][1m] [Go] [sensepost/godoh](https://github.com/sensepost/godoh)  A DNS-over-HTTPS Command & Control Proof of Concept 
- [**213**Star][1y] [PowerShell] [lukebaggett/dnscat2-powershell](https://github.com/lukebaggett/dnscat2-powershell) A Powershell client for dnscat2, an encrypted DNS command and control tool.


### <a id="18c7c1df2e6ae5e9135dfa2e4eb1d4db"></a>Shodan


- [**1082**Star][2m] [Py] [achillean/shodan-python](https://github.com/achillean/shodan-python) The official Python library for Shodan
- [**954**Star][4m] [Py] [woj-ciech/kamerka](https://github.com/woj-ciech/kamerka) Build interactive map of cameras from Shodan
- [**831**Star][2m] [Py] [649/memcrashed-ddos-exploit](https://github.com/649/memcrashed-ddos-exploit) DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/DDOS](#a0897294e74a0863ea8b83d11994fad6) |
- [**669**Star][2m] [jakejarvis/awesome-shodan-queries](https://github.com/jakejarvis/awesome-shodan-queries) 
- [**353**Star][1m] [Py] [pielco11/fav-up](https://github.com/pielco11/fav-up) IP lookup from favicon using Shodan
- [**337**Star][2m] [Py] [random-robbie/my-shodan-scripts](https://github.com/random-robbie/my-shodan-scripts) Collection of Scripts for shodan searching stuff.
- [**233**Star][10m] [Py] [nethunteros/punter](https://github.com/nethunteros/punter) Hunt domain names using DNSDumpster, WHOIS, Reverse WHOIS, Shodan, Crimeflare


### <a id="94c01f488096fafc194b9a07f065594c"></a>nmap


- [**3492**Star][17d] [C] [nmap/nmap](https://github.com/nmap/nmap) Nmap - the Network Mapper. Github mirror of official SVN repository.
- [**2099**Star][6m] [Py] [calebmadrigal/trackerjacker](https://github.com/calebmadrigal/trackerjacker) Like nmap for mapping wifi networks you're not connected to, plus device tracking
- [**1666**Star][3m] [Lua] [vulnerscom/nmap-vulners](https://github.com/vulnerscom/nmap-vulners) NSE script based on Vulners.com API
- [**1497**Star][2m] [C] [nmap/npcap](https://github.com/nmap/npcap) Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF.
- [**1237**Star][2m] [Lua] [scipag/vulscan](https://github.com/scipag/vulscan) Advanced vulnerability scanning with Nmap NSE
- [**936**Star][4m] [Shell] [trimstray/sandmap](https://github.com/trimstray/sandmap) Nmap on steroids! Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
- [**887**Star][11m] [Py] [rev3rsesecurity/webmap](https://github.com/rev3rsesecurity/webmap) Nmap Web Dashboard and Reporting
- [**822**Star][2m] [Py] [x90skysn3k/brutespray](https://github.com/x90skysn3k/brutespray) Brute-Forcing from Nmap output - Automatically attempts default creds on found services.
- [**728**Star][4m] [Lua] [cldrn/nmap-nse-scripts](https://github.com/cldrn/nmap-nse-scripts) My collection of nmap NSE scripts
- [**658**Star][4m] [Py] [iceyhexman/onlinetools](https://github.com/iceyhexman/onlinetools) 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..
- [**481**Star][1y] [XSLT] [honze-net/nmap-bootstrap-xsl](https://github.com/honze-net/nmap-bootstrap-xsl) A Nmap XSL implementation with Bootstrap.
- [**391**Star][7m] [Py] [savon-noir/python-libnmap](https://github.com/savon-noir/python-libnmap) libnmap is a python library to run nmap scans, parse and diff scan results. It supports python 2.6 up to 3.4. It's wonderful.
- [**325**Star][9m] [Py] [samhaxr/hackbox](https://github.com/samhaxr/hackbox) HackBox is the combination of awesome techniques. [1] - Xss [2] - Exploits [3] - Subdomain scanner [4] - Whois Lookup [5] - SSRF Injection [6] - Nmap Auto banner [7] - Js Url parser [8] - Web Headers [9] - Listener [10] - Current Network Stats [11] - CORS Misconfig [12] - AWS S3 Misconfig
- [**307**Star][1y] [Java] [s4n7h0/halcyon](https://github.com/s4n7h0/halcyon) First IDE for Nmap Script (NSE) Development.
- [**282**Star][1y] [Ruby] [danmcinerney/pentest-machine](https://github.com/danmcinerney/pentest-machine) Automates some pentest jobs via nmap xml file
- [**257**Star][1y] [Java] [danicuestasuarez/nmapgui](https://github.com/danicuestasuarez/nmapgui) Advanced Graphical User Interface for NMap
- [**247**Star][1y] [Shell] [m4ll0k/autonse](https://github.com/m4ll0k/autonse) Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner
- [**230**Star][7m] [Lua] [rvn0xsy/nse_vuln](https://github.com/rvn0xsy/nse_vuln) Nmap扫描、漏洞利用脚本
- [**228**Star][5m] [Py] [maaaaz/nmaptocsv](https://github.com/maaaaz/nmaptocsv) A simple python script to convert Nmap output to CSV




***


## <a id="969212c047f97652ceb9c789e4d8dae5"></a>Database&&SQLAttack&&SQLInjection


### <a id="e8d5cfc417b84fa90eff2e02c3231ed1"></a>NoCategory


- [**950**Star][18d] [PowerShell] [netspi/powerupsql](https://github.com/netspi/powerupsql) PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
- [**661**Star][3m] [Py] [v3n0m-scanner/v3n0m-scanner](https://github.com/v3n0m-scanner/v3n0m-scanner) Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
- [**638**Star][2m] [Py] [quentinhardy/odat](https://github.com/quentinhardy/odat) ODAT: Oracle Database Attacking Tool
- [**526**Star][4m] [Py] [quentinhardy/msdat](https://github.com/quentinhardy/msdat) MSDAT: Microsoft SQL Database Attacking Tool


### <a id="3157bf5ee97c32454d99fd4a9fa3f04a"></a>SQL


#### <a id="1cfe1b2a2c88cd92a414f81605c8d8e7"></a>NoCategory


- [**2883**Star][1m] [Go] [cookiey/yearning](https://github.com/cookiey/yearning) A most popular sql audit platform for mysql
- [**712**Star][1y] [Py] [the-robot/sqliv](https://github.com/the-robot/sqliv) massive SQL injection vulnerability scanner
- [**553**Star][1m] [HTML] [netspi/sqlinjectionwiki](https://github.com/netspi/sqlinjectionwiki) A wiki focusing on aggregating and documenting various SQL injection methods
- [**444**Star][9m] [Go] [netxfly/x-crack](https://github.com/netxfly/x-crack) x-crack - Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB
- [**439**Star][3m] [Go] [stripe/safesql](https://github.com/stripe/safesql) Static analysis tool for Golang that protects against SQL injections
- [**395**Star][3m] [C#] [shack2/supersqlinjectionv1](https://github.com/shack2/supersqlinjectionv1) 超级SQL注入工具（SSQLInjection）是一款基于HTTP协议自组包的SQL注入工具,采用C#开发，直接操作TCP会话来进行HTTP交互，支持出现在HTTP协议任意位置的SQL注入，支持各种类型的SQL注入，支持HTTPS模式注入；支持以盲注、错误显示、Union注入等方式来获取数据；支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库；支持手动灵活的进行SQL注入绕过，可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计，需要使用人员对SQL注入有一定了解。
- [**295**Star][8m] [JS] [ning1022/sqlinjectionwiki](https://github.com/ning1022/SQLInjectionWiki) 一个专注于聚合和记录各种SQL注入方法的wiki
- [**255**Star][7m] [Py] [s0md3v/sqlmate](https://github.com/s0md3v/sqlmate) A friend of SQLmap which will do what you always expected from SQLmap.


#### <a id="0519846509746aa50a04abd3ccf2f1d5"></a>SQLInjection


- [**15554**Star][16d] [Py] [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) Automatic SQL injection and database takeover tool
- [**592**Star][6m] [aleenzz/mysql_sql_bypass_wiki](https://github.com/aleenzz/mysql_sql_bypass_wiki) mysql注入,bypass的一些心得


#### <a id="5a7451cdff13bc6709da7c943dda967f"></a>SQLVul






### <a id="ca6f4bd198f3712db7f24383e8544dfd"></a>NoSQL


#### <a id="af0aaaf233cdff3a88d04556dc5871e0"></a>NoCategory


- [**1180**Star][15d] [Py] [codingo/nosqlmap](https://github.com/codingo/NoSQLMap) Automated NoSQL database enumeration and web application exploitation tool.
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/NoCategory](#05ab1b75266fddafc7195f5b395e4d99) |[Tools/Vulnerability&&BugHunting&&Exploit&&Fuzzing/Exploit/漏洞利用](#c83f77f27ccf5f26c8b596979d7151c3) |
- [**275**Star][1y] [Java] [florent37/android-nosql](https://github.com/florent37/android-nosql) Lightweight, simple structured NoSQL database for Android


#### <a id="54d36c89712652a7064db6179faa7e8c"></a>MongoDB


- [**1069**Star][2m] [Py] [stampery/mongoaudit](https://github.com/stampery/mongoaudit) 






***


## <a id="df8a5514775570707cce56bb36ca32c8"></a>Audit&&SecurityAudit&&CodeAudit


### <a id="6a5e7dd060e57d9fdb3fed8635d61bc7"></a>NoCategory


- [**6407**Star][1m] [Shell] [cisofy/lynis](https://github.com/cisofy/lynis) Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
- [**1465**Star][27d] [Shell] [mzet-/linux-exploit-suggester](https://github.com/mzet-/linux-exploit-suggester) Linux privilege escalation auditing tool
- [**967**Star][2m] [Py] [nccgroup/scoutsuite](https://github.com/nccgroup/scoutsuite) Multi-Cloud Security Auditing Tool
- [**604**Star][6m] [JS] [vincentcox/stacoan](https://github.com/vincentcox/stacoan) StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
    - Also In Section: [Tools/Mobile/NoCategory](#4a64f5e8fdbd531a8c95d94b28c6c2c1) |
- [**271**Star][17d] [Py] [lorexxar/cobra-w](https://github.com/lorexxar/cobra-w) Cobra-W -> Cobra-White 白盒源代码审计工具-白帽子版


### <a id="34569a6fdce10845eae5fbb029cd8dfa"></a>CodeAudit


- [**2041**Star][3m] [Py] [whaleshark-team/cobra](https://github.com/WhaleShark-Team/cobra) Source Code Security Audit (源代码安全审计)
- [**807**Star][1y] [Py] [utkusen/leviathan](https://github.com/utkusen/leviathan) wide range mass audit toolkit
- [**646**Star][1y] [chybeta/code-audit-challenges](https://github.com/chybeta/code-audit-challenges) Code-Audit-Challenges
- [**626**Star][8m] [Py] [klen/pylama](https://github.com/klen/pylama) Code audit tool for python.
- [**399**Star][4m] [C] [anssi-fr/ad-control-paths](https://github.com/anssi-fr/ad-control-paths) Active Directory Control Paths auditing and graphing tools
- [**355**Star][11m] [Py] [enablesecurity/sipvicious](https://github.com/enablesecurity/sipvicious) SIPVicious suite is a set of security tools that can be used to audit SIP based VoIP systems.
- [**293**Star][2m] [C#] [ossindex/devaudit](https://github.com/ossindex/devaudit) Open-source, cross-platform, multi-purpose security auditing tool
- [**263**Star][14d] [Py] [exodus-privacy/exodus](https://github.com/exodus-privacy/exodus) Platform to audit trackers used by Android application
- [**254**Star][1m] [Py] [hubblestack/hubble](https://github.com/hubblestack/hubble) Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting. HubbleStack is a free and open source project made possible by Adobe.
- [**240**Star][4m] [PowerShell] [nccgroup/azucar](https://github.com/nccgroup/azucar) Security auditing tool for Azure environments
- [**215**Star][1y] [C] [meliot/filewatcher](https://github.com/meliot/filewatcher) A simple auditing utility for macOS




***


## <a id="546f4fe70faa2236c0fbc2d486a83391"></a>SET&&Phishing&&SpearPhishing


### <a id="ce734598055ad3885d45d0b35d2bf0d7"></a>NoCategory


- [**1301**Star][26d] [CSS] [undeadsec/socialfish](https://github.com/undeadsec/socialfish) Educational Phishing Tool & Information Collector
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/NoCategory](#05ab1b75266fddafc7195f5b395e4d99) |
- [**742**Star][3m] [Py] [threatexpress/domainhunter](https://github.com/threatexpress/domainhunter) Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/NoCategory](#05ab1b75266fddafc7195f5b395e4d99) |
- [**556**Star][2m] [Py] [thewhiteh4t/seeker](https://github.com/thewhiteh4t/seeker) Accurately Locate Smartphones using Social Engineering
- [**305**Star][1m] [Py] [raikia/uhoh365](https://github.com/raikia/uhoh365) A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.


### <a id="f30507893511f89b19934e082a54023e"></a>SET


- [**4854**Star][2m] [Py] [trustedsec/social-engineer-toolkit](https://github.com/trustedsec/social-engineer-toolkit) The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.


### <a id="290e9ae48108d21d6d8b9ea9e74d077d"></a>Phish


- [**8337**Star][17d] [Py] [wifiphisher/wifiphisher](https://github.com/wifiphisher/wifiphisher) The Rogue Access Point Framework
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Wireless&&WiFi&&AP&&802.11/NoCategory](#d4efda1853b2cb0909727188116a2a8c) |
- [**4161**Star][12d] [Go] [gophish/gophish](https://github.com/gophish/gophish) Open-Source Phishing Toolkit
- [**2721**Star][1m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
    - Also In Section: [Tools/Network&&Sniff&&Mitm/MITM](#11c73d3e2f71f3914a3bca35ba90de36) |
- [**1402**Star][8m] [JS] [anttiviljami/browser-autofill-phishing](https://github.com/anttiviljami/browser-autofill-phishing) A simple demo of phishing by abusing the browser autofill feature
- [**1331**Star][10m] [HTML] [thelinuxchoice/blackeye](https://github.com/thelinuxchoice/blackeye) The most complete Phishing Tool, with 32 templates +1 customizable
- [**994**Star][17d] [Py] [securestate/king-phisher](https://github.com/securestate/king-phisher) Phishing Campaign Toolkit
- [**976**Star][1m] [Py] [x0rz/phishing_catcher](https://github.com/x0rz/phishing_catcher) Phishing catcher using Certstream
- [**861**Star][19d] [HTML] [darksecdevelopers/hiddeneye](https://github.com/darksecdevelopers/hiddeneye) Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ]
- [**858**Star][7m] [HTML] [thelinuxchoice/shellphish](https://github.com/thelinuxchoice/shellphish) Phishing Tool for 18 social media: Instagram, Facebook, Snapchat, Github, Twitter, Yahoo, Protonmail, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers, Gitlab, Pinterest
- [**831**Star][4m] [PHP] [raikia/fiercephish](https://github.com/Raikia/FiercePhish) FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
- [**828**Star][1y] [HTML] [ustayready/credsniper](https://github.com/ustayready/credsniper) CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
- [**524**Star][26d] [Py] [shellphish/driller](https://github.com/shellphish/driller) Driller: augmenting AFL with symbolic execution!
- [**348**Star][4m] [Py] [tatanus/spf](https://github.com/tatanus/spf) SpeedPhishing Framework
- [**297**Star][10m] [Py] [mr-un1k0d3r/catmyphish](https://github.com/Mr-Un1k0d3r/CatMyPhish) Search for categorized domain
- [**265**Star][3m] [Go] [muraenateam/muraena](https://github.com/muraenateam/muraena) Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.
- [**240**Star][2m] [Py] [atexio/mercure](https://github.com/atexio/mercure) Mercure is a tool for security managers who want to train their colleague to phishing.
- [**228**Star][1y] [Jupyter Notebook] [wesleyraptor/streamingphish](https://github.com/wesleyraptor/streamingphish) Python-based utility that uses supervised machine learning to detect phishing domains from the Certificate Transparency log network.
- [**220**Star][3m] [Py] [duo-labs/isthislegit](https://github.com/duo-labs/isthislegit) Dashboard to collect, analyze, and respond to reported phishing emails.


### <a id="ab3e6e6526d058e35c7091d8801ebf3a"></a>SpearPhishing






***


## <a id="04102345243a4bcaec83f703afff6cb3"></a>Hardware&&USB&&RaspberryPi


### <a id="ff462a6d508ef20aa41052b1cc8ad044"></a>NoCategory


- [**2190**Star][18d] [Shell] [eliaskotlyar/xiaomi-dafang-hacks](https://github.com/eliaskotlyar/xiaomi-dafang-hacks) 
- [**2009**Star][1y] [C] [xoreaxeaxeax/rosenbridge](https://github.com/xoreaxeaxeax/rosenbridge) Hardware backdoors in some x86 CPUs
- [**1932**Star][13d] [Go] [ullaakut/cameradar](https://github.com/Ullaakut/cameradar) Cameradar hacks its way into RTSP videosurveillance cameras
- [**1327**Star][1y] [Py] [carmaa/inception](https://github.com/carmaa/inception) Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.
- [**1117**Star][10m] [JS] [mame82/p4wnp1_aloa](https://github.com/mame82/p4wnp1_aloa) P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
    - Also In Section: [Tools/EvnSetup&&Env/NoCategory](#f5a7a43f964b2c50825f3e2fee5078c8) |
- [**962**Star][2m] [C] [olimex/olinuxino](https://github.com/olimex/olinuxino) OLINUXINO is Open Source / Open Hardware, low cost from EUR 24 Linux Industrial grade Single Board Computer capable to operate -25+85C
- [**516**Star][3m] [Java] [1998lixin/hardwarecode](https://github.com/1998lixin/hardwarecode) 基于xposed 修改硬件信息


### <a id="48c53d1304b1335d9addf45b959b7d8a"></a>USB


- [**3811**Star][17d] [drduh/yubikey-guide](https://github.com/drduh/yubikey-guide) Guide to using YubiKey for GPG and SSH
- [**2643**Star][12m] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
    - Also In Section: [Tools/Hardware&&USB&&RaspberryPi/RaspberryPi](#77c39a0ad266ad42ab8157ba4b3d874a) |
- [**2149**Star][9m] [C] [conorpp/u2f-zero](https://github.com/conorpp/u2f-zero) U2F USB token optimized for physical security, affordability, and style
- [**1018**Star][28d] [C] [solokeys/solo](https://github.com/solokeys/solo) Solo: open security key supporting FIDO2 & U2F over USB + NFC
- [**982**Star][11m] [C#] [kenvix/usbcopyer](https://github.com/kenvix/usbcopyer) 插上U盘自动按需复制文件 
- [**865**Star][2m] [C++] [whid-injector/whid](https://github.com/whid-injector/whid) WiFi HID Injector - An USB Rubberducky / BadUSB On Steroids.
- [**832**Star][6m] [Objective-C] [sevenbits/mac-linux-usb-loader](https://github.com/sevenbits/mac-linux-usb-loader) Boot Linux on your Mac, easily
- [**825**Star][1m] [C++] [openzwave/open-zwave](https://github.com/openzwave/open-zwave) a C++ library to control Z-Wave Networks via a USB Z-Wave Controller.
- [**744**Star][19d] [Py] [snovvcrash/usbrip](https://github.com/snovvcrash/usbrip) Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
    - Also In Section: [Tools/IncidentResponse&&Forensics/Forensics](#1fc5d3621bb13d878f337c8031396484) |
- [**695**Star][2m] [C] [nuand/bladerf](https://github.com/nuand/bladerf) bladeRF USB 3.0 Superspeed Software Defined Radio Source Code
- [**596**Star][5m] [C] [pelya/android-keyboard-gadget](https://github.com/pelya/android-keyboard-gadget) Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.
- [**410**Star][8m] [Shell] [jsamr/bootiso](https://github.com/jsamr/bootiso) A bash script to securely create a bootable USB device from one ISO file. Just curl it, chmod it and go!
- [**307**Star][3m] [Py] [circl/circlean](https://github.com/circl/circlean) USB key cleaner
- [**305**Star][3m] [C++] [cedarctic/digispark-scripts](https://github.com/cedarctic/digispark-scripts) USB Rubber Ducky type scripts written for the DigiSpark.
- [**221**Star][5m] [ANTLR] [myriadrf/limesdr-usb](https://github.com/myriadrf/limesdr-usb) USB 3.0 version of the LimeSDR board


### <a id="77c39a0ad266ad42ab8157ba4b3d874a"></a>RaspberryPi


- [**2643**Star][12m] [Py] [mame82/p4wnp1](https://github.com/mame82/p4wnp1) P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
    - Also In Section: [Tools/Hardware&&USB&&RaspberryPi/USB](#48c53d1304b1335d9addf45b959b7d8a) |
- [**1658**Star][7m] [Makefile] [raspberrypi/noobs](https://github.com/raspberrypi/noobs) NOOBS (New Out Of Box Software) - An easy Operating System install manager for the Raspberry Pi
- [**1510**Star][1m] [C] [raspberrypi/userland](https://github.com/raspberrypi/userland) Source code for ARM side libraries for interfacing to Raspberry Pi GPU.
- [**296**Star][6m] [C++] [cyphunk/jtagenum](https://github.com/cyphunk/jtagenum) Given an Arduino compatible microcontroller or Raspberry PI (experimental), JTAGenum scans pins[] for basic JTAG functionality and can be used to enumerate the Instruction Register for undocumented instructions. Props to JTAG scanner and Arduinull which came before JTAGenum and forwhich much of the code and logic is based on. Feel free to branch…
- [**258**Star][5m] [Py] [mbro95/portablecellnetwork](https://github.com/mbro95/portablecellnetwork) Utilize a Raspberry Pi and a Nuand BladeRF to generate your own portable local cell network
- [**246**Star][4m] [Py] [tipam/pi3d](https://github.com/tipam/pi3d) Simple, yet powerful, 3D Python graphics library for beginners and school children running on the Raspberry Pi.


### <a id="da75af123f2f0f85a4c8ecc08a8aa848"></a>Car&&Vehicle


- [**1305**Star][1m] [jaredthecoder/awesome-vehicle-security](https://github.com/jaredthecoder/awesome-vehicle-security) 
- [**768**Star][1y] [C++] [polysync/oscc](https://github.com/polysync/oscc) Open Source Car Control
- [**513**Star][7m] [Py] [schutzwerk/canalyzat0r](https://github.com/schutzwerk/canalyzat0r) Security analysis toolkit for proprietary car protocols
- [**261**Star][1y] [Shell] [jgamblin/carhackingtools](https://github.com/jgamblin/carhackingtools) Install and Configure Common Car Hacking Tools.
- [**216**Star][2m] [Py] [caringcaribou/caringcaribou](https://github.com/caringcaribou/caringcaribou) A friendly car security exploration tool for the CAN bus




***


## <a id="dc89c90b80529c1f62f413288bca89c4"></a>EvnSetup&&Env


### <a id="f5a7a43f964b2c50825f3e2fee5078c8"></a>NoCategory


- [**1571**Star][13d] [HTML] [clong/detectionlab](https://github.com/clong/detectionlab) Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
- [**1371**Star][16d] [Go] [crazy-max/windowsspyblocker](https://github.com/crazy-max/windowsspyblocker) 
- [**1294**Star][2m] [C] [cisco-talos/pyrebox](https://github.com/cisco-talos/pyrebox) Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
- [**1117**Star][10m] [JS] [mame82/p4wnp1_aloa](https://github.com/mame82/p4wnp1_aloa) P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
    - Also In Section: [Tools/Hardware&&USB&&RaspberryPi/NoCategory](#ff462a6d508ef20aa41052b1cc8ad044) |
- [**799**Star][3m] [redhuntlabs/redhunt-os](https://github.com/redhuntlabs/redhunt-os) Virtual Machine for Adversary Emulation and Threat Hunting
- [**781**Star][2m] [sh4hin/androl4b](https://github.com/sh4hin/androl4b) A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
    - Also In Section: [Tools/Mobile/Android](#fe88ee8c0df10870b44c2dedcd86d3d3) |
- [**560**Star][5m] [Ruby] [sliim/pentest-env](https://github.com/sliim/pentest-env) Pentest environment deployer (kali linux + targets) using vagrant and chef.
- [**210**Star][11m] [Shell] [proxycannon/proxycannon-ng](https://github.com/proxycannon/proxycannon-ng) A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference


### <a id="cf07b04dd2db1deedcf9ea18c05c83e0"></a>Linux-Distro


- [**2830**Star][1m] [Py] [trustedsec/ptf](https://github.com/trustedsec/ptf) The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
- [**2310**Star][1m] [security-onion-solutions/security-onion](https://github.com/security-onion-solutions/security-onion) Linux distro for intrusion detection, enterprise security monitoring, and log management
- [**1459**Star][13d] [Shell] [blackarch/blackarch](https://github.com/blackarch/blackarch) BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.
- [**342**Star][13d] [Shell] [archstrike/archstrike](https://github.com/archstrike/archstrike) An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.


### <a id="4709b10a8bb691204c0564a3067a0004"></a>EnvAutoSetup


- [**3058**Star][2m] [PowerShell] [fireeye/commando-vm](https://github.com/fireeye/commando-vm) Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
- [**1686**Star][18d] [PowerShell] [fireeye/flare-vm](https://github.com/fireeye/flare-vm) 火眼发布用于 Windows 恶意代码分析的虚拟机：FLARE VM




***


## <a id="761a373e2ec1c58c9cd205cd7a03e8a8"></a>VulnerableMachine


### <a id="3e751670de79d2649ba62b177bd3e4ef"></a>NoCategory


- [**4986**Star][1m] [Shell] [vulhub/vulhub](https://github.com/vulhub/vulhub) Pre-Built Vulnerable Environments Based on Docker-Compose
- [**3680**Star][2m] [PHP] [ethicalhack3r/dvwa](https://github.com/ethicalhack3r/DVWA) Damn Vulnerable Web Application (DVWA)
- [**2536**Star][25d] [Shell] [medicean/vulapps](https://github.com/medicean/vulapps) 快速搭建各种漏洞环境(Various vulnerability environment)
- [**2382**Star][27d] [TSQL] [rapid7/metasploitable3](https://github.com/rapid7/metasploitable3) Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
- [**1522**Star][1m] [PHP] [c0ny1/upload-labs](https://github.com/c0ny1/upload-labs) 一个想帮你总结所有类型的上传漏洞的靶场
- [**981**Star][1m] [C] [hacksysteam/hacksysextremevulnerabledriver](https://github.com/hacksysteam/hacksysextremevulnerabledriver) HackSys Extreme Vulnerable Windows Driver
- [**831**Star][27d] [JS] [lirantal/is-website-vulnerable](https://github.com/lirantal/is-website-vulnerable) finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- [**741**Star][1m] [Ruby] [rubysec/ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db) A database of vulnerable Ruby Gems
- [**633**Star][2m] [HCL] [rhinosecuritylabs/cloudgoat](https://github.com/rhinosecuritylabs/cloudgoat) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
- [**577**Star][2m] [HTML] [owasp/railsgoat](https://github.com/owasp/railsgoat) A vulnerable version of Rails that follows the OWASP Top 10
- [**563**Star][1m] [C++] [bkerler/exploit_me](https://github.com/bkerler/exploit_me) Very vulnerable ARM/ARM64 application (CTF style exploitation tutorial)
- [**517**Star][5m] [PHP] [acmesec/dorabox](https://github.com/Acmesec/DoraBox) DoraBox - 基础Web漏洞训练靶场
- [**311**Star][28d] [Py] [owasp/owasp-vwad](https://github.com/owasp/owasp-vwad) The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
- [**252**Star][2m] [PHP] [incredibleindishell/ssrf_vulnerable_lab](https://github.com/incredibleindishell/ssrf_vulnerable_lab) This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
- [**237**Star][2m] [JS] [owasp/dvsa](https://github.com/owasp/dvsa) a Damn Vulnerable Serverless Application
- [**218**Star][11m] [C] [stephenbradshaw/vulnserver](https://github.com/stephenbradshaw/vulnserver) Vulnerable server used for learning software exploitation


### <a id="a6a2bb02c730fc1e1f88129d4c2b3d2e"></a>WebApp


- [**2902**Star][13d] [JS] [webgoat/webgoat](https://github.com/webgoat/webgoat) WebGoat 8.0
- [**2556**Star][15d] [JS] [bkimminich/juice-shop](https://github.com/bkimminich/juice-shop) OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- [**459**Star][14d] [Py] [stamparm/dsvw](https://github.com/stamparm/dsvw) Damn Small Vulnerable Web
- [**427**Star][3m] [Py] [payatu/tiredful-api](https://github.com/payatu/tiredful-api) An intentionally designed broken web application based on REST API.
- [**289**Star][1y] [CSS] [appsecco/dvna](https://github.com/appsecco/dvna) Damn Vulnerable NodeJS Application
- [**218**Star][5m] [JS] [cr0hn/vulnerable-node](https://github.com/cr0hn/vulnerable-node) A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools


### <a id="60b4d03a0cff6efc4b9b998a4a1a79d6"></a>Generate


- [**1699**Star][13d] [Ruby] [cliffe/secgen](https://github.com/cliffe/secgen) Create randomly insecure VMs
- [**1408**Star][5m] [PHP] [s4n7h0/xvwa](https://github.com/s4n7h0/xvwa) XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
- [**305**Star][7m] [Ruby] [secgen/secgen](https://github.com/secgen/secgen) Generate vulnerable virtual machines on the fly (current team development is taking place in the cliffe/SecGen fork)


### <a id="383ad9174d3f7399660d36cd6e0b2c00"></a>Collection


- [**358**Star][4m] [xtiankisutsa/awesome-mobile-ctf](https://github.com/xtiankisutsa/awesome-mobile-ctf) This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.
    - Also In Section: [Tools/CTF&&HTB/Collection](#30c4df38bcd1abaaaac13ffda7d206c6) |


### <a id="aa60e957e4da03301643a7abe4c1938a"></a>MobileApp


- [**645**Star][4m] [Java] [dineshshetty/android-insecurebankv2](https://github.com/dineshshetty/android-insecurebankv2) Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
- [**203**Star][2m] [Java] [owasp/mstg-hacking-playground](https://github.com/OWASP/MSTG-Hacking-Playground) 不安全的iOS/Android App集合




***


## <a id="79499aeece9a2a9f64af6f61ee18cbea"></a>Network&&Sniff&&Mitm


### <a id="99398a5a8aaf99228829dadff48fb6a7"></a>NoCategory


- [**11823**Star][24d] [Go] [buger/goreplay](https://github.com/buger/goreplay) GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
- [**6391**Star][1m] [Py] [networkx/networkx](https://github.com/networkx/networkx) Official NetworkX source code repository.
- [**5204**Star][6m] [Py] [usarmyresearchlab/dshell](https://github.com/usarmyresearchlab/dshell) Dshell is a network forensic analysis framework.
- [**4526**Star][15d] [Py] [secdev/scapy](https://github.com/secdev/scapy) Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
- [**4144**Star][11m] [JS] [kdzwinel/betwixt](https://github.com/kdzwinel/betwixt) Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface.
- [**3729**Star][20d] [Py] [secureauthcorp/impacket](https://github.com/SecureAuthCorp/impacket) Impacket is a collection of Python classes for working with network protocols.
- [**3482**Star][15d] [JS] [aol/moloch](https://github.com/aol/moloch) Moloch is an open source, large scale, full packet capturing, indexing, and database system.
- [**3480**Star][7m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
- [**3191**Star][14d] [Py] [stamparm/maltrail](https://github.com/stamparm/maltrail) Malicious traffic detection system
- [**3096**Star][25d] [C] [valdikss/goodbyedpi](https://github.com/valdikss/goodbyedpi) GoodbyeDPI—Passive Deep Packet Inspection blocker and Active DPI circumvention utility (for Windows)
- [**2503**Star][7m] [C++] [chengr28/pcap_dnsproxy](https://github.com/chengr28/pcap_dnsproxy) Pcap_DNSProxy, a local DNS server based on packet capturing
- [**1877**Star][28d] [C] [ntop/ndpi](https://github.com/ntop/ndpi) Open Source Deep Packet Inspection Software Toolkit
- [**1799**Star][1m] [C] [merbanan/rtl_433](https://github.com/merbanan/rtl_433) Program to decode traffic from Devices that are broadcasting on 433.9 MHz like temperature sensors
- [**1419**Star][2m] [Go] [google/stenographer](https://github.com/google/stenographer) Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
- [**1328**Star][2m] [C++] [mfontanini/libtins](https://github.com/mfontanini/libtins) High-level, multiplatform C++ network packet sniffing and crafting library.
- [**1271**Star][2m] [C] [traviscross/mtr](https://github.com/traviscross/mtr) Official repository for mtr, a network diagnostic tool
- [**1258**Star][1m] [Go] [dreadl0ck/netcap](https://github.com/dreadl0ck/netcap) A framework for secure and scalable network traffic analysis -
- [**1207**Star][1y] [Py] [danmcinerney/net-creds](https://github.com/danmcinerney/net-creds) Sniffs sensitive data from interface or pcap
- [**1056**Star][6m] [PowerShell] [nytrorst/netripper](https://github.com/nytrorst/netripper) NetRipper - Smart traffic sniffing for penetration testers
- [**1046**Star][10m] [C++] [simsong/tcpflow](https://github.com/simsong/tcpflow) TCP/IP packet demultiplexer. Download from:
- [**952**Star][2m] [Py] [kiminewt/pyshark](https://github.com/kiminewt/pyshark) Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
- [**945**Star][7m] [Py] [fireeye/flare-fakenet-ng](https://github.com/fireeye/flare-fakenet-ng) FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- [**853**Star][3m] [C] [cisco/joy](https://github.com/cisco/joy) A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
- [**820**Star][6m] [Go] [40t/go-sniffer](https://github.com/40t/go-sniffer) 
- [**817**Star][29d] [C] [zerbea/hcxtools](https://github.com/zerbea/hcxtools) Portable solution for capturing wlan traffic and conversion to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = capture, convert and calculate candidates, x = different hashtypes
- [**800**Star][2m] [C] [emmericp/ixy](https://github.com/emmericp/ixy) Simple userspace packet processing for educational purposes
- [**790**Star][7m] [Py] [phaethon/kamene](https://github.com/phaethon/kamene) Network packet and pcap file crafting/sniffing/manipulation/visualization security tool. Originally forked from scapy in 2015 and providing python3 compatibility since then.
- [**779**Star][2m] [C] [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) A Swiss army knife for your daily Linux network plumbing.
- [**713**Star][2m] [Py] [cloudflare/bpftools](https://github.com/cloudflare/bpftools) BPF Tools - packet analyst toolkit
- [**652**Star][1m] [Py] [kbandla/dpkt](https://github.com/kbandla/dpkt) fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
- [**645**Star][1m] [C] [zerbea/hcxdumptool](https://github.com/zerbea/hcxdumptool) Small tool to capture packets from wlan devices.
- [**636**Star][1y] [Go] [ga0/netgraph](https://github.com/ga0/netgraph) A cross platform http sniffer with a web UI
- [**509**Star][9m] [Perl] [mrash/fwknop](https://github.com/mrash/fwknop) Single Packet Authorization > Port Knocking
- [**505**Star][7m] [C++] [kohler/click](https://github.com/kohler/click) The Click modular router: fast modular packet processing and analysis
- [**499**Star][1m] [C] [sam-github/libnet](https://github.com/libnet/libnet) A portable framework for low-level network packet construction
- [**458**Star][1m] [Py] [netzob/netzob](https://github.com/netzob/netzob) Netzob: Protocol Reverse Engineering, Modeling and Fuzzing
- [**451**Star][4m] [C] [jarun/keysniffer](https://github.com/jarun/keysniffer) 
- [**440**Star][20d] [C#] [malwareinfosec/ekfiddle](https://github.com/malwareinfosec/ekfiddle) A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general.
- [**435**Star][2m] [C++] [pstavirs/ostinato](https://github.com/pstavirs/ostinato) Ostinato - Packet/Traffic Generator and Analyzer
- [**431**Star][2m] [Ruby] [aderyabin/sniffer](https://github.com/aderyabin/sniffer) Log and Analyze Outgoing HTTP Requests
- [**412**Star][10m] [C] [jpr5/ngrep](https://github.com/jpr5/ngrep) ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF f…
- [**411**Star][2m] [C] [desowin/usbpcap](https://github.com/desowin/usbpcap) USB packet capture for Windows
- [**407**Star][8m] [Py] [mitrecnd/chopshop](https://github.com/mitrecnd/chopshop) Protocol Analysis/Decoder Framework
- [**387**Star][1m] [Rust] [kpcyrd/sniffglue](https://github.com/kpcyrd/sniffglue) Secure multithreaded packet sniffer
- [**382**Star][2m] [Go] [alphasoc/flightsim](https://github.com/alphasoc/flightsim) A utility to generate malicious network traffic and evaluate controls
- [**379**Star][4m] [PHP] [floedesigntechnologies/phpcs-security-audit](https://github.com/floedesigntechnologies/phpcs-security-audit) phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- [**375**Star][28d] [Py] [idaholab/malcolm](https://github.com/idaholab/malcolm) Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.
- [**330**Star][12m] [Ruby] [packetfu/packetfu](https://github.com/packetfu/packetfu) PacketFu, a mid-level packet manipulation library for Ruby
- [**326**Star][14d] [TypeScript] [shroudedcode/apk-mitm](https://github.com/shroudedcode/apk-mitm) 
    - Also In Section: [Tools/Mobile/Android](#fe88ee8c0df10870b44c2dedcd86d3d3) |[Tools/Network&&Sniff&&Mitm/MITM](#11c73d3e2f71f3914a3bca35ba90de36) |
- [**303**Star][1y] [Py] [tintinweb/scapy-ssl_tls](https://github.com/tintinweb/scapy-ssl_tls) SSL/TLS layers for scapy the interactive packet manipulation tool
- [**292**Star][4m] [C] [pulkin/esp8266-injection-example](https://github.com/pulkin/esp8266-injection-example) Example project to demonstrate packet injection / sniffer capabilities of ESP8266 IC.
- [**278**Star][23d] [C] [troglobit/nemesis](https://github.com/troglobit/nemesis) A command-line network packet crafting and injection utility
- [**273**Star][9m] [C] [jiaoxianjun/btle](https://github.com/jiaoxianjun/btle) Bluetooth Low Energy (BLE) packet sniffer and generator for both standard and non standard (raw bit).
- [**254**Star][2m] [Go] [sachaos/tcpterm](https://github.com/sachaos/tcpterm) tcpterm is a packet visualizer in TUI.
- [**243**Star][7m] [Py] [needmorecowbell/sniff-paste](https://github.com/needmorecowbell/sniff-paste) Pastebin OSINT Harvester
- [**241**Star][2m] [C] [nccgroup/sniffle](https://github.com/nccgroup/sniffle) A sniffer for Bluetooth 5 and 4.x LE
- [**218**Star][18d] [Py] [ghostop14/sparrow-wifi](https://github.com/ghostop14/sparrow-wifi) Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
    - Also In Section: [Tools/Bluetooth](#ceb90405292daed9bb32ac20836c219a) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Wireless&&WiFi&&AP&&802.11/NoCategory](#d4efda1853b2cb0909727188116a2a8c) |
- [**213**Star][2m] [C] [dns-oarc/dnscap](https://github.com/dns-oarc/dnscap) Network capture utility designed specifically for DNS traffic


### <a id="11c73d3e2f71f3914a3bca35ba90de36"></a>MITM


- [**16743**Star][18d] [Py] [mitmproxy/mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
    - Also In Section: [Tools/Communication&&Proxy&&RverseProxy&&Tunnel/NoCategory](#56acb7c49c828d4715dce57410d490d1) |
- [**6294**Star][12d] [Go] [bettercap/bettercap](https://github.com/bettercap/bettercap) The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
- [**2886**Star][1y] [Py] [byt3bl33d3r/mitmf](https://github.com/byt3bl33d3r/mitmf) Framework for Man-In-The-Middle attacks
- [**2721**Star][1m] [Go] [kgretzky/evilginx2](https://github.com/kgretzky/evilginx2) Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
    - Also In Section: [Tools/SET&&Phishing&&SpearPhishing/Phish](#290e9ae48108d21d6d8b9ea9e74d077d) |
- [**2480**Star][15d] [Py] [evilsocket/pwnagotchi](https://github.com/evilsocket/pwnagotchi) (⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
    - Also In Section: [Tools/AI&&MachineLearning&&DeepLearning&&NeturalNetwork/NoCategory](#19dd474da6b715024ff44d27484d528a) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Wireless&&WiFi&&AP&&802.11/NoCategory](#d4efda1853b2cb0909727188116a2a8c) |
- [**1258**Star][2m] [Go] [unrolled/secure](https://github.com/unrolled/secure) HTTP middleware for Go that facilitates some quick security wins.
- [**1199**Star][3m] [C] [droe/sslsplit](https://github.com/droe/sslsplit) Transparent SSL/TLS interception
- [**1184**Star][2m] [Py] [jtesta/ssh-mitm](https://github.com/jtesta/ssh-mitm) SSH man-in-the-middle tool
- [**1085**Star][7m] [Ruby] [lionsec/xerosploit](https://github.com/lionsec/xerosploit) Efficient and advanced man in the middle framework
- [**1017**Star][3m] [PowerShell] [kevin-robertson/inveigh](https://github.com/kevin-robertson/inveigh) Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool
- [**999**Star][7m] [Go] [justinas/nosurf](https://github.com/justinas/nosurf) CSRF protection middleware for Go.
- [**983**Star][1y] [HTML] [sensepost/mana](https://github.com/sensepost/mana) *DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Wireless&&WiFi&&AP&&802.11/NoCategory](#d4efda1853b2cb0909727188116a2a8c) |
- [**977**Star][30d] [Py] [syss-research/seth](https://github.com/syss-research/seth) Perform a MitM attack and extract clear text credentials from RDP connections
- [**568**Star][11m] [HTML] [r00t-3xp10it/morpheus](https://github.com/r00t-3xp10it/morpheus) Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)
- [**551**Star][8m] [Py] [fox-it/mitm6](https://github.com/fox-it/mitm6) pwning IPv4 via IPv6
- [**509**Star][5m] [JS] [moll/node-mitm](https://github.com/moll/node-mitm) Intercept and mock outgoing Node.js network TCP connections and HTTP requests for testing. Intercepts and gives you a Net.Socket, Http.IncomingMessage and Http.ServerResponse to test and respond with. Super useful when testing code that hits remote servers.
- [**432**Star][1y] [JS] [digitalsecurity/btlejuice](https://github.com/digitalsecurity/btlejuice) BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework
- [**393**Star][3m] [Go] [cloudflare/mitmengine](https://github.com/cloudflare/mitmengine) A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
- [**382**Star][3m] [JS] [joeferner/node-http-mitm-proxy](https://github.com/joeferner/node-http-mitm-proxy) HTTP Man In The Middle (MITM) Proxy
- [**379**Star][1y] [JS] [securing/gattacker](https://github.com/securing/gattacker) A Node.js package for BLE (Bluetooth Low Energy) security assessment using Man-in-the-Middle and other attacks
- [**365**Star][10m] [Py] [crypt0s/fakedns](https://github.com/crypt0s/fakedns) A regular-expression based python MITM DNS server with support for DNS Rebinding attacks
- [**347**Star][17d] [Py] [gosecure/pyrdp](https://github.com/gosecure/pyrdp) RDP man-in-the-middle (mitm) and library for Python 3 with the ability to watch connections live or after the fact
- [**347**Star][1y] [Py] [quickbreach/smbetray](https://github.com/quickbreach/smbetray) SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in cleartext.
- [**326**Star][14d] [TypeScript] [shroudedcode/apk-mitm](https://github.com/shroudedcode/apk-mitm) 
    - Also In Section: [Tools/Mobile/Android](#fe88ee8c0df10870b44c2dedcd86d3d3) |[Tools/Network&&Sniff&&Mitm/NoCategory](#99398a5a8aaf99228829dadff48fb6a7) |
- [**294**Star][1y] [Shell] [cryptolok/ghostinthenet](https://github.com/cryptolok/ghostinthenet) Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan
    - Also In Section: [Tools/Scanner&&SecurityScan&&AppScan/NoCategory](#de63a029bda6a7e429af272f291bb769) |
- [**225**Star][8m] [Py] [ivanvza/arpy](https://github.com/ivanvza/arpy) Mac OSX ARP spoof (MiTM) tool that can also plug into Gource
- [**205**Star][3m] [sab0tag3d/mitm-cheatsheet](https://github.com/sab0tag3d/mitm-cheatsheet) All MITM attacks in one place.


### <a id="c09843b4d4190dea0bf9773f8114300a"></a>PacketSniff&&Monitor


- [**3480**Star][7m] [Go] [fanpei91/torsniff](https://github.com/fanpei91/torsniff) torsniff - a sniffer that sniffs torrents from BitTorrent network
- [**2950**Star][14d] [Lua] [ntop/ntopng](https://github.com/ntop/ntopng) Web-based Traffic and Security Network Traffic Monitoring
- [**1328**Star][1y] [C] [gamelinux/passivedns](https://github.com/gamelinux/passivedns) A network sniffer that logs all DNS server replies for use in a passive DNS setup
- [**286**Star][1m] [Shell] [tehw0lf/airbash](https://github.com/tehw0lf/airbash) A POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing


### <a id="dde87061175108fc66b00ef665b1e7d0"></a>pcap


- [**820**Star][13d] [C++] [seladb/pcapplusplus](https://github.com/seladb/pcapplusplus) PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, DPDK and PF_RING.
- [**780**Star][3m] [Py] [srinivas11789/pcapxray](https://github.com/srinivas11789/pcapxray) A Network Forensics Tool
- [**459**Star][30d] [C#] [chmorgan/sharppcap](https://github.com/chmorgan/sharppcap) Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
- [**210**Star][12m] [Py] [mateuszk87/pcapviz](https://github.com/mateuszk87/pcapviz) Visualize network topologies and collect graph statistics based on pcap files
- [**209**Star][7m] [JS] [dirtbags/pcapdb](https://github.com/dirtbags/pcapdb) A Distributed, Search-Optimized Full Packet Capture System
- [**206**Star][4m] [Py] [pynetwork/pypcap](https://github.com/pynetwork/pypcap) pypcap - python libpcap module, forked from code.google.com/p/pypcap, now actively maintained


### <a id="1692d675f0fc7d190e0a33315f4abae8"></a>Hijack&&TCP/HTTP




### <a id="3c28b67524f117ed555daed9cc99e35e"></a>ProtocolAnalyze&&PacketAnalyze


- [**1401**Star][1m] [Go] [skydive-project/skydive](https://github.com/skydive-project/skydive) An open source real-time network topology and protocols analyzer




***


## <a id="c49aef477cf3397f97f8b72185c3d100"></a>Password&&Credential


### <a id="20bf2e2fefd6de7aadbf0774f4921824"></a>NoCategory


- [**4772**Star][1m] [Py] [alessandroz/lazagne](https://github.com/alessandroz/lazagne) Credentials recovery project
- [**1441**Star][1y] [Py] [d4vinci/cr3dov3r](https://github.com/d4vinci/cr3dov3r) Know the dangers of credential reuse attacks.
- [**1025**Star][1y] [PowerShell] [danmcinerney/icebreaker](https://github.com/danmcinerney/icebreaker) Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
- [**891**Star][16d] [C] [cossacklabs/themis](https://github.com/cossacklabs/themis) Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 12 platforms.
- [**514**Star][2m] [Py] [unode/firefox_decrypt](https://github.com/unode/firefox_decrypt) Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox/Thunderbird/Seabird) profiles
- [**492**Star][2m] [Py] [byt3bl33d3r/sprayingtoolkit](https://github.com/byt3bl33d3r/sprayingtoolkit) Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
- [**483**Star][1y] [JS] [emilbayes/secure-password](https://github.com/emilbayes/secure-password) Making Password storage safer for all
- [**442**Star][1y] [Go] [ncsa/ssh-auditor](https://github.com/ncsa/ssh-auditor) The best way to scan for weak ssh passwords on your network
- [**385**Star][11m] [Shell] [mthbernardes/sshlooter](https://github.com/mthbernardes/sshlooter) Script to steal passwords from ssh.
- [**347**Star][3m] [Py] [davidtavarez/pwndb](https://github.com/davidtavarez/pwndb) Search for leaked credentials
- [**295**Star][5m] [C#] [raikia/credninja](https://github.com/raikia/credninja) A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter
- [**284**Star][6m] [Shell] [greenwolf/spray](https://github.com/Greenwolf/Spray) A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
- [**272**Star][2m] [JS] [kspearrin/ff-password-exporter](https://github.com/kspearrin/ff-password-exporter) Easily export your passwords from Firefox.
- [**267**Star][1m] [Py] [xfreed0m/rdpassspray](https://github.com/xfreed0m/rdpassspray) Python3 tool to perform password spraying using RDP
- [**255**Star][5m] [C] [rub-syssec/omen](https://github.com/rub-syssec/omen) OMEN: Ordered Markov ENumerator - Password Guesser
- [**210**Star][3m] [Ruby] [bdmac/strong_password](https://github.com/bdmac/strong_password) Entropy-based password strength checking for Ruby and Rails.


### <a id="86dc226ae8a71db10e4136f4b82ccd06"></a>Password


- [**6832**Star][17d] [C] [hashcat/hashcat](https://github.com/hashcat/hashcat) World's fastest and most advanced password recovery utility
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/PostExp/NoCategory](#12abc279c69d1fcf10692b9cb89bcdf7) |
- [**5149**Star][12m] [JS] [samyk/poisontap](https://github.com/samyk/poisontap) Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
- [**3083**Star][13d] [C] [magnumripper/johntheripper](https://github.com/magnumripper/johntheripper) This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS:
- [**2536**Star][1m] [C] [huntergregal/mimipenguin](https://github.com/huntergregal/mimipenguin) A tool to dump the login password from the current linux user
- [**1124**Star][7m] [Py] [mebus/cupp](https://github.com/mebus/cupp) Common User Passwords Profiler (CUPP)
- [**859**Star][4m] [Go] [fireeye/gocrack](https://github.com/fireeye/gocrack) GoCrack is a management frontend for password cracking tools written in Go
- [**843**Star][2m] [Go] [ukhomeoffice/repo-security-scanner](https://github.com/ukhomeoffice/repo-security-scanner) CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
- [**628**Star][1y] [Java] [faizann24/wifi-bruteforcer-fsecurify](https://github.com/faizann24/wifi-bruteforcer-fsecurify) Android application to brute force WiFi passwords without requiring a rooted device.
- [**585**Star][1y] [Py] [brannondorsey/passgan](https://github.com/brannondorsey/passgan) A Deep Learning Approach for Password Guessing (
- [**578**Star][6m] [C] [hashcat/hashcat-utils](https://github.com/hashcat/hashcat-utils) Small utilities that are useful in advanced password cracking
- [**574**Star][3m] [Py] [thewhiteh4t/pwnedornot](https://github.com/thewhiteh4t/pwnedornot) OSINT Tool for Finding Passwords of Compromised Email Addresses
- [**482**Star][1y] [PowerShell] [dafthack/domainpasswordspray](https://github.com/dafthack/domainpasswordspray) DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
- [**404**Star][1y] [C++] [vah13/extracttvpasswords](https://github.com/vah13/extracttvpasswords) tool to extract passwords from TeamViewer memory using Frida
- [**344**Star][7m] [Py] [iphelix/pack](https://github.com/iphelix/pack) PACK (Password Analysis and Cracking Kit)
- [**318**Star][2m] [JS] [auth0/repo-supervisor](https://github.com/auth0/repo-supervisor) Scan your code for security misconfiguration, search for passwords and secrets.
- [**318**Star][1m] [CSS] [guyoung/captfencoder](https://github.com/guyoung/captfencoder) CaptfEncoder是一款跨平台网络安全工具套件，提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具，并聚合各类在线工具。




***


## <a id="d5e869a870d6e2c14911de2bc527a6ef"></a>Ancient


- [**1593**Star][3m] [Py] [knownsec/pocsuite](https://github.com/knownsec/pocsuite) This project has stopped to maintenance, please to
- [**1510**Star][1y] [dripcap/dripcap](https://github.com/dripcap/dripcap) 
- [**845**Star][1y] [Py] [kgretzky/evilginx](https://github.com/kgretzky/evilginx) PLEASE USE NEW VERSION:


***


## <a id="983f763457e9599b885b13ea49682130"></a>Windows


- [**8590**Star][3m] [C] [gentilkiwi/mimikatz](https://github.com/gentilkiwi/mimikatz) A little tool to play with Windows security
- [**2084**Star][1m] [Py] [trustedsec/unicorn](https://github.com/trustedsec/unicorn) Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.


***


## <a id="bad06ceb38098c26b1b8b46104f98d25"></a>webshell


### <a id="e08366dcf7aa021c6973d9e2a8944dff"></a>Collection


- [**21409**Star][14d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
    - Also In Section: [Tools/wordlist/Collection](#3202d8212db5699ea5e6021833bf3fa2) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Payload&&RAT/PayloadCollection](#b5d99a78ddb383c208aae474fc2cb002) |
- [**5033**Star][1m] [PHP] [tennc/webshell](https://github.com/tennc/webshell) This is a webshell open source project


### <a id="faa91844951d2c29b7b571c6e8a3eb54"></a>NoCategory


- [**1739**Star][2m] [Py] [epinna/weevely3](https://github.com/epinna/weevely3) Weaponized web shell
- [**956**Star][1m] [Py] [yzddmr6/webshell-venom](https://github.com/yzddmr6/webshell-venom) 免杀webshell无限生成工具(利用随机异或无限免杀D盾)
- [**474**Star][7m] [ASP] [landgrey/webshell-detect-bypass](https://github.com/landgrey/webshell-detect-bypass) 绕过专业工具检测的Webshell研究文章和免杀的Webshell
- [**421**Star][1y] [Py] [shmilylty/cheetah](https://github.com/shmilylty/cheetah) a very fast brute force webshell password tool
- [**411**Star][1y] [PHP] [ysrc/webshell-sample](https://github.com/ysrc/webshell-sample) 收集自网络各处的 webshell 样本，用于测试 webshell 扫描器检测率。
- [**366**Star][5m] [PHP] [blackarch/webshells](https://github.com/blackarch/webshells) Various webshells. We accept pull requests for additions to this collection.
- [**351**Star][7m] [PHP] [s0md3v/nano](https://github.com/s0md3v/nano) Nano is a family of PHP web shells which are code golfed for stealth.
- [**305**Star][8m] [Py] [wangyihang/webshell-sniper](https://github.com/wangyihang/webshell-sniper) webshell管理器，命令行工具
- [**282**Star][1y] [JS] [chrisallenlane/novahot](https://github.com/chrisallenlane/novahot) A webshell framework for penetration testers.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/PostExp/NoCategory](#12abc279c69d1fcf10692b9cb89bcdf7) |
- [**243**Star][8m] [Py] [antoniococo/sharpyshell](https://github.com/antoniococo/sharpyshell) SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
- [**207**Star][6m] [PHP] [samdark/yii2-webshell](https://github.com/samdark/yii2-webshell) Web shell allows to run yii console commands using a browser




***


## <a id="43b0310ac54c147a62c545a2b0f4bce2"></a>Other


### <a id="569887799ee0148230cc5d7bf98e96d0"></a>NoCategory


- [**25893**Star][12d] [Py] [certbot/certbot](https://github.com/certbot/certbot) Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
- [**7594**Star][17d] [JS] [gchq/cyberchef](https://github.com/gchq/cyberchef) The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
- [**4838**Star][2m] [Rust] [sharkdp/hexyl](https://github.com/sharkdp/hexyl) A command-line hex viewer
- [**4230**Star][14d] [JS] [cure53/dompurify](https://github.com/cure53/dompurify) DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
- [**3166**Star][6m] [HTML] [leizongmin/js-xss](https://github.com/leizongmin/js-xss) Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
- [**3078**Star][2m] [Shell] [trimstray/htrace.sh](https://github.com/trimstray/htrace.sh) My simple Swiss Army knife for http/https troubleshooting and profiling.
- [**949**Star][8m] [Go] [maliceio/malice](https://github.com/maliceio/malice) VirusTotal Wanna Be - Now with 100% more Hipster
- [**500**Star][17d] [Py] [certtools/intelmq](https://github.com/certtools/intelmq) IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- [**464**Star][4m] [JS] [ehrishirajsharma/swiftnessx](https://github.com/ehrishirajsharma/swiftnessx) A cross-platform note-taking & target-tracking app for penetration testers.


### <a id="86d5daccb4ed597e85a0ec9c87f3c66f"></a>TLS&&SSL&&HTTPS


- [**4292**Star][5m] [Py] [diafygi/acme-tiny](https://github.com/diafygi/acme-tiny) A tiny script to issue and renew TLS certs from Let's Encrypt
- [**1663**Star][2m] [HTML] [chromium/badssl.com](https://github.com/chromium/badssl.com) 
- [**1177**Star][2m] [Go] [jsha/minica](https://github.com/jsha/minica) minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
- [**1126**Star][19d] [Go] [smallstep/certificates](https://github.com/smallstep/certificates) 私有的证书颁发机构（X.509和SSH）和ACME服务器，用于安全的自动证书管理，因此您可以在SSH和SSO处使用TLS
- [**507**Star][14d] [Java] [rub-nds/tls-attacker](https://github.com/rub-nds/tls-attacker) TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is developed by the Ruhr University Bochum (




***


## <a id="e1fc1d87056438f82268742dc2ba08f5"></a>IncidentResponse&&Forensics


### <a id="65f1e9dc3e08dff9fcda9d2ee245764e"></a>NoCategory




### <a id="d0f59814394c5823210aa04a8fcd1220"></a>IncidentResponse


- [**3054**Star][14d] [meirwah/awesome-incident-response](https://github.com/meirwah/awesome-incident-response) A curated list of tools for incident response
- [**1801**Star][4m] [bypass007/emergency-response-notes](https://github.com/bypass007/emergency-response-notes) 应急响应实战笔记，一个安全工程师的自我修养。
- [**1310**Star][3m] [HTML] [thehive-project/thehive](https://github.com/thehive-project/thehive) TheHive: a Scalable, Open Source and Free Security Incident Response Platform
- [**1132**Star][10m] [Py] [certsocietegenerale/fir](https://github.com/certsocietegenerale/fir) Fast Incident Response
- [**988**Star][9m] [Go] [gencebay/httplive](https://github.com/gencebay/httplive) HTTP Request & Response Service, Mock HTTP
- [**965**Star][1m] [JS] [monzo/response](https://github.com/monzo/response) Monzo's real-time incident response and reporting tool
- [**764**Star][16d] [microsoft/msrc-security-research](https://github.com/microsoft/msrc-security-research) Security Research from the Microsoft Security Response Center (MSRC)
- [**744**Star][10m] [PowerShell] [davehull/kansa](https://github.com/davehull/kansa) A Powershell incident response framework
- [**710**Star][2m] [HTML] [pagerduty/incident-response-docs](https://github.com/pagerduty/incident-response-docs) PagerDuty's Incident Response Documentation.
- [**634**Star][9m] [Roff] [palantir/windows-event-forwarding](https://github.com/palantir/windows-event-forwarding) A repository for using windows event forwarding for incident detection and response
- [**627**Star][21d] [Kotlin] [chuckerteam/chucker](https://github.com/chuckerteam/chucker) simplifies the inspection of HTTP(S) requests/responses, and Throwables fired by your Android App
- [**579**Star][9m] [Go] [nytimes/gziphandler](https://github.com/nytimes/gziphandler) Go middleware to gzip HTTP responses
- [**535**Star][5m] [Py] [owasp/qrljacking](https://github.com/owasp/qrljacking) QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.
- [**459**Star][6m] [palantir/osquery-configuration](https://github.com/palantir/osquery-configuration) A repository for using osquery for incident detection and response
- [**452**Star][28d] [Py] [controlscanmdr/cyphon](https://github.com/controlscanmdr/cyphon) Open source incident management and response platform.
- [**286**Star][1m] [Py] [alexandreborges/malwoverview](https://github.com/alexandreborges/malwoverview) Malwoverview.py is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.
- [**251**Star][1m] [C#] [orlikoski/cylr](https://github.com/orlikoski/CyLR) CyLR - Live Response Collection Tool
- [**204**Star][2m] [PowerShell] [wiredpulse/posh-r2](https://github.com/wiredpulse/posh-r2) PowerShell - Rapid Response... For the incident responder in you!


### <a id="1fc5d3621bb13d878f337c8031396484"></a>Forensics


- [**3315**Star][2m] [Py] [google/grr](https://github.com/google/grr) GRR Rapid Response: remote live forensics for incident response
- [**1486**Star][9m] [Py] [google/rekall](https://github.com/google/rekall) Rekall Memory Forensic Framework
- [**1465**Star][18d] [C] [sleuthkit/sleuthkit](https://github.com/sleuthkit/sleuthkit) The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- [**1200**Star][27d] [Py] [google/timesketch](https://github.com/google/timesketch) Collaborative forensic timeline analysis
- [**1152**Star][2m] [Go] [mozilla/mig](https://github.com/mozilla/mig) Distributed & real time digital forensics at the speed of the cloud
- [**953**Star][1m] [Rich Text Format] [decalage2/oletools](https://github.com/decalage2/oletools) oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
- [**940**Star][17d] [C++] [hasherezade/pe-sieve](https://github.com/hasherezade/pe-sieve) Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
- [**909**Star][2m] [Py] [ondyari/faceforensics](https://github.com/ondyari/faceforensics) Github of the FaceForensics dataset
- [**826**Star][12d] [Java] [sleuthkit/autopsy](https://github.com/sleuthkit/autopsy) Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
- [**817**Star][21d] [cugu/awesome-forensics](https://github.com/cugu/awesome-forensics) A curated list of awesome forensic analysis tools and resources
- [**802**Star][14d] [Py] [yampelo/beagle](https://github.com/yampelo/beagle) Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
- [**744**Star][19d] [Py] [snovvcrash/usbrip](https://github.com/snovvcrash/usbrip) Simple CLI forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux
    - Also In Section: [Tools/Hardware&&USB&&RaspberryPi/USB](#48c53d1304b1335d9addf45b959b7d8a) |
- [**419**Star][2m] [Py] [obsidianforensics/hindsight](https://github.com/obsidianforensics/hindsight) Internet history forensics for Google Chrome/Chromium
- [**400**Star][14d] [Py] [forensicartifacts/artifacts](https://github.com/forensicartifacts/artifacts) Digital Forensics Artifact Repository
- [**391**Star][10m] [Go] [mozilla/masche](https://github.com/mozilla/masche) MIG Memory Forensic library
- [**321**Star][10m] [Py] [alessandroz/lazagneforensic](https://github.com/alessandroz/lazagneforensic) Windows passwords decryption from dump files
- [**317**Star][3m] [HTML] [intezer/linux-explorer](https://github.com/intezer/linux-explorer) Easy-to-use live forensics toolbox for Linux endpoints
- [**311**Star][8m] [Py] [n0fate/chainbreaker](https://github.com/n0fate/chainbreaker) Mac OS X Keychain Forensic Tool
- [**301**Star][2m] [Py] [google/turbinia](https://github.com/google/turbinia) Automation and Scaling of Digital Forensics Tools
- [**296**Star][24d] [Shell] [vitaly-kamluk/bitscout](https://github.com/vitaly-kamluk/bitscout) Remote forensics meta tool
- [**268**Star][12d] [Perl] [owasp/o-saft](https://github.com/owasp/o-saft) O-Saft - OWASP SSL advanced forensic tool
- [**255**Star][6m] [Batchfile] [diogo-fernan/ir-rescue](https://github.com/diogo-fernan/ir-rescue) A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
- [**250**Star][21d] [Py] [google/docker-explorer](https://github.com/google/docker-explorer) A tool to help forensicate offline docker acquisitions
- [**248**Star][12m] [C++] [comaeio/swishdbgext](https://github.com/comaeio/SwishDbgExt) Incident Response & Digital Forensics Debugging Extension
- [**243**Star][11m] [Py] [crowdstrike/forensics](https://github.com/crowdstrike/forensics) Scripts and code referenced in CrowdStrike blog posts
- [**241**Star][1m] [Py] [orlikoski/cdqr](https://github.com/orlikoski/CDQR) The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
- [**227**Star][30d] [C] [elfmaster/libelfmaster](https://github.com/elfmaster/libelfmaster) Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
- [**217**Star][2m] [Py] [crowdstrike/automactc](https://github.com/crowdstrike/automactc) AutoMacTC: Automated Mac Forensic Triage Collector


### <a id="4d2a33083a894d6e6ef01b360929f30a"></a>Volatility


- [**3199**Star][2m] [Py] [volatilityfoundation/volatility](https://github.com/volatilityfoundation/volatility) An advanced memory forensics framework
- [**308**Star][7m] [Py] [jasonstrimpel/volatility-trading](https://github.com/jasonstrimpel/volatility-trading) A complete set of volatility estimators based on Euan Sinclair's Volatility Trading
- [**224**Star][2m] [Py] [volatilityfoundation/profiles](https://github.com/volatilityfoundation/profiles) Volatility profiles for Linux and Mac OS X
- [**219**Star][1m] [Py] [volatilityfoundation/community](https://github.com/volatilityfoundation/community) Volatility plugins developed and maintained by the community




***


## <a id="a2df15c7819a024c2f5c4a7489285597"></a>Honeypot


### <a id="2af349669891f54649a577b357aa81a6"></a>NoCategory


- [**1784**Star][1m] [Py] [threatstream/mhn](https://github.com/pwnlandia/mhn) Modern Honey Network
- [**1259**Star][21d] [C] [dtag-dev-sec/tpotce](https://github.com/dtag-dev-sec/tpotce) tpotce：创建多蜜罐平台T-Pot ISO 镜像
- [**1201**Star][24d] [Go] [hacklcx/hfish](https://github.com/hacklcx/hfish) Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统，记录黑客攻击手段
- [**400**Star][3m] [Py] [nsmfoo/antivmdetection](https://github.com/nsmfoo/antivmdetection) Script to create templates to use with VirtualBox to make vm detection harder
- [**356**Star][2m] [Py] [p1r06u3/opencanary_web](https://github.com/p1r06u3/opencanary_web) The web management platform of honeypot
- [**325**Star][1y] [JS] [shmakov/honeypot](https://github.com/shmakov/honeypot) Low interaction honeypot that displays real time attacks
- [**303**Star][1m] [Py] [hatching/vmcloak](https://github.com/hatching/vmcloak) Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
- [**271**Star][1y] [Py] [gbafana25/esp8266_honeypot](https://github.com/gbafana25/esp8266_honeypot) THE ESP8266 HONEYPOT: A PROJECT TO TRAP SCRIPT KIDDIES EVERYWHRE!!
- [**229**Star][1y] [Shell] [aplura/tango](https://github.com/aplura/tango) Honeypot Intelligence with Splunk
- [**227**Star][9m] [Py] [honeynet/beeswarm](https://github.com/honeynet/beeswarm) Honeypot deployment made easy
- [**219**Star][1m] [Py] [jamesturk/django-honeypot](https://github.com/jamesturk/django-honeypot) 


### <a id="d20acdc34ca7c084eb52ca1c14f71957"></a>Honeypot


- [**735**Star][1m] [Py] [buffer/thug](https://github.com/buffer/thug) Python low-interaction honeyclient
- [**687**Star][4m] [Py] [mushorg/conpot](https://github.com/mushorg/conpot) ICS/SCADA honeypot
- [**668**Star][6m] [Go] [honeytrap/honeytrap](https://github.com/honeytrap/honeytrap) Advanced Honeypot framework.
- [**574**Star][2m] [Py] [thinkst/opencanary](https://github.com/thinkst/opencanary) Modular and decentralised honeypot
- [**396**Star][2m] [Py] [mushorg/glastopf](https://github.com/mushorg/glastopf) Web Application Honeypot
- [**379**Star][3m] [Py] [foospidy/honeypy](https://github.com/foospidy/honeypy) A low to medium interaction honeypot.
- [**371**Star][1m] [Py] [dinotools/dionaea](https://github.com/dinotools/dionaea) Home of the dionaea honeypot
- [**224**Star][1m] [Py] [johnnykv/heralding](https://github.com/johnnykv/heralding) Credentials catching honeypot
- [**215**Star][1m] [Py] [mushorg/snare](https://github.com/mushorg/snare) Super Next generation Advanced Reactive honEypot


### <a id="efde8c850d8d09e7c94aa65a1ab92acf"></a>Collection


- [**3708**Star][1m] [Py] [paralax/awesome-honeypots](https://github.com/paralax/awesome-honeypots) an awesome list of honeypot resources


### <a id="c8f749888134d57b5fb32382c78ef2d1"></a>SSH&&Telnet


- [**2906**Star][18d] [Py] [cowrie/cowrie](https://github.com/cowrie/cowrie) Cowrie SSH/Telnet Honeypot
- [**272**Star][27d] [C] [droberson/ssh-honeypot](https://github.com/droberson/ssh-honeypot) Fake sshd that logs ip addresses, usernames, and passwords.


### <a id="356be393f6fb9215c14799e5cd723fca"></a>TCP&&UDP




### <a id="577fc2158ab223b65442fb0fd4eb8c3e"></a>HTTP&&Web


- [**433**Star][1y] [Py] [0x4d31/honeylambda](https://github.com/0x4d31/honeylambda) honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway


### <a id="35c6098cbdc5202bf7f60979a76a5691"></a>ActiveDirectory




### <a id="7ac08f6ae5c88efe2cd5b47a4d391e7e"></a>SMTP




### <a id="8c58c819e0ba0442ae90d8555876d465"></a>打印机




### <a id="1a6b81fd9550736d681d6d0e99ae69e3"></a>Elasticsearch




### <a id="57356b67511a9dc7497b64b007047ee7"></a>ADB




### <a id="c5b6762b3dc783a11d72dea648755435"></a>Bluetooth 


- [**1261**Star][1m] [Py] [virtualabs/btlejack](https://github.com/virtualabs/btlejack) Bluetooth Low Energy Swiss-army knife
- [**1120**Star][9m] [evilsocket/bleah](https://github.com/evilsocket/bleah) This repository is DEPRECATED, please use bettercap as this tool has been ported to its BLE modules.
- [**865**Star][3m] [Java] [googlearchive/android-bluetoothlegatt](https://github.com/googlearchive/android-BluetoothLeGatt) Migrated:
- [**292**Star][11m] [JS] [jeija/bluefluff](https://github.com/jeija/bluefluff) Reverse Engineering Furby Connect's Bluetooth Protocol and Update Format


### <a id="2a77601ce72f944679b8c5650d50148d"></a>Other


#### <a id="1d0819697e6bc533f564383d0b98b386"></a>Wordpress








***


## <a id="f56806b5b229bdf6c118f5fb1092e141"></a>ThreatIntelligence


### <a id="8fd1f0cfde78168c88fc448af9c6f20f"></a>NoCategory


- [**2390**Star][13d] [PHP] [misp/misp](https://github.com/misp/misp) MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)
- [**1836**Star][3m] [YARA] [yara-rules/rules](https://github.com/yara-rules/rules) Repository of yara rules
- [**1246**Star][15d] [Shell] [firehol/blocklist-ipsets](https://github.com/firehol/blocklist-ipsets) ipsets dynamically updated with firehol's update-ipsets.sh script
- [**826**Star][19d] [YARA] [neo23x0/signature-base](https://github.com/neo23x0/signature-base) Signature base for my scanner tools
- [**824**Star][27d] [JS] [opencti-platform/opencti](https://github.com/opencti-platform/opencti) Open Cyber Threat Intelligence Platform
- [**786**Star][17d] [Py] [yeti-platform/yeti](https://github.com/yeti-platform/yeti) Your Everyday Threat Intelligence
- [**715**Star][24d] [C++] [facebook/threatexchange](https://github.com/facebook/threatexchange) Share threat information with vetted partners
- [**704**Star][2m] [Go] [activecm/rita](https://github.com/activecm/rita) Real Intelligence Threat Analytics
- [**505**Star][6m] [Py] [te-k/harpoon](https://github.com/te-k/harpoon) CLI tool for open source and threat intelligence
- [**444**Star][4m] [PHP] [kasperskylab/klara](https://github.com/kasperskylab/klara) Kaspersky's GReAT KLara
- [**411**Star][1m] [mitre/cti](https://github.com/mitre/cti) Cyber Threat Intelligence Repository expressed in STIX 2.0
- [**407**Star][3m] [Scala] [thehive-project/cortex](https://github.com/TheHive-Project/Cortex) Cortex: a Powerful Observable Analysis and Active Response Engine
- [**374**Star][7m] [Py] [hurricanelabs/machinae](https://github.com/hurricanelabs/machinae) Machinae Security Intelligence Collector
- [**290**Star][6m] [YARA] [supportintelligence/icewater](https://github.com/supportintelligence/icewater) 16,432 Free Yara rules created by
- [**253**Star][2m] [Py] [diogo-fernan/malsub](https://github.com/diogo-fernan/malsub) A Python RESTful API framework for online malware analysis and threat intelligence services.
- [**234**Star][2m] [Py] [cylance/cybot](https://github.com/cylance/CyBot) Open Source Threat Intelligence Chat Bot
- [**231**Star][1m] [Py] [anouarbensaad/vulnx](https://github.com/anouarbensaad/vulnx) vulnx
- [**217**Star][2m] [Py] [inquest/threatingestor](https://github.com/inquest/threatingestor) Extract and aggregate threat intelligence.
- [**208**Star][18d] [Py] [inquest/omnibus](https://github.com/inquest/omnibus) The OSINT Omnibus (beta release)
- [**201**Star][3m] [Py] [yelp/threat_intel](https://github.com/yelp/threat_intel) Threat Intelligence APIs


### <a id="91dc39dc492ee8ef573e1199117bc191"></a>Collection


- [**3117**Star][5m] [hslatman/awesome-threat-intelligence](https://github.com/hslatman/awesome-threat-intelligence) A curated list of Awesome Threat Intelligence resources
- [**1459**Star][14d] [YARA] [cybermonitor/apt_cybercriminal_campagin_collections](https://github.com/cybermonitor/apt_cybercriminal_campagin_collections) APT & CyberCriminal Campaign Collection


### <a id="3e10f389acfbd56b79f52ab4765e11bf"></a>IOC


#### <a id="c94be209c558a65c5e281a36667fc27a"></a>NoCategory


- [**1408**Star][1m] [Py] [neo23x0/loki](https://github.com/neo23x0/loki) Loki - Simple IOC and Incident Response Scanner
- [**208**Star][4m] [Shell] [neo23x0/fenrir](https://github.com/neo23x0/fenrir) Simple Bash IOC Scanner


#### <a id="20a019435f1c5cc75e574294c01f3fee"></a>Collection


- [**405**Star][8m] [Shell] [sroberts/awesome-iocs](https://github.com/sroberts/awesome-iocs) A collection of sources of indicators of compromise.


#### <a id="1b1aa1dfcff3054bc20674230ee52cfe"></a>IOCExtract


- [**212**Star][23d] [Py] [inquest/python-iocextract](https://github.com/inquest/python-iocextract) Defanged Indicator of Compromise (IOC) Extractor.


#### <a id="9bcb156b2e3b7800c42d5461c0062c02"></a>IOCCrawl


- [**652**Star][13d] [Py] [blackorbird/apt_report](https://github.com/blackorbird/apt_report) Interesting apt report collection and some special ioc express
- [**626**Star][28d] [YARA] [eset/malware-ioc](https://github.com/eset/malware-ioc) Indicators of Compromises (IOC) of our various investigations
- [**418**Star][1y] [JS] [ciscocsirt/gosint](https://github.com/ciscocsirt/gosint) The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
- [**303**Star][1y] [Py] [fsecurelabs/win_driver_plugin](https://github.com/FSecureLABS/win_driver_plugin) A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
- [**257**Star][2m] [PHP] [pan-unit42/iocs](https://github.com/pan-unit42/iocs) Indicators from Unit 42 Public Reports






***


## <a id="946d766c6a0fb23b480ff59d4029ec71"></a>Defense


### <a id="7a277f8b0e75533e0b50d93c902fb351"></a>NoCategory


- [**630**Star][5m] [Py] [binarydefense/artillery](https://github.com/binarydefense/artillery) The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.


### <a id="784ea32a3f4edde1cd424b58b17e7269"></a>WAF


- [**3248**Star][2m] [C] [nbs-system/naxsi](https://github.com/nbs-system/naxsi) NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
- [**3125**Star][17d] [C++] [spiderlabs/modsecurity](https://github.com/spiderlabs/modsecurity) ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
- [**617**Star][2m] [Py] [3xp10it/xwaf](https://github.com/3xp10it/xwaf) Automatic bypass (brute force) waf
- [**600**Star][3m] [Lua] [jx-sec/jxwaf](https://github.com/jx-sec/jxwaf) JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的web应用防火墙
- [**599**Star][1y] [Lua] [unixhot/waf](https://github.com/unixhot/waf) 使用Nginx+Lua实现的WAF（版本v1.0）
- [**543**Star][7m] [Py] [s0md3v/blazy](https://github.com/s0md3v/Blazy) Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .
- [**500**Star][1m] [Go] [janusec/janusec](https://github.com/janusec/janusec) Janusec Application Gateway, a Golang based application security solution which provides WAF (Web Application Firewall), CC attack defense, unified web administration portal, private key protection, web routing and scalable load balancing.
- [**462**Star][7m] [Java] [chengdedeng/waf](https://github.com/chengdedeng/waf) 
- [**436**Star][2m] [PHP] [akaunting/firewall](https://github.com/akaunting/firewall) Web Application Firewall (WAF) package for Laravel
- [**424**Star][8m] [Py] [aws-samples/aws-waf-sample](https://github.com/aws-samples/aws-waf-sample) This repository contains example scripts and sets of rules for the AWS WAF service. Please be aware that the applicability of these examples to specific workloads may vary.
- [**406**Star][1m] [C#] [jbe2277/waf](https://github.com/jbe2277/waf) Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
- [**401**Star][7m] [Py] [awslabs/aws-waf-security-automations](https://github.com/awslabs/aws-waf-security-automations) This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
- [**401**Star][10m] [C] [titansec/openwaf](https://github.com/titansec/openwaf) Web security protection system based on openresty
- [**243**Star][1y] [Py] [warflop/cloudbunny](https://github.com/warflop/cloudbunny) CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
- [**207**Star][6m] [C] [coolervoid/raptor_waf](https://github.com/coolervoid/raptor_waf) Raptor - WAF - Web application firewall using DFA [ Current version ] - Beta


### <a id="ce6532938f729d4c9d66a5c75d1676d3"></a>FireWall


- [**4162**Star][2m] [Py] [evilsocket/opensnitch](https://github.com/evilsocket/opensnitch) OpenSnitch is a GNU/Linux port of the Little Snitch application firewall
- [**3186**Star][1m] [Objective-C] [objective-see/lulu](https://github.com/objective-see/lulu) LuLu is the free macOS firewall
- [**1515**Star][12d] [Java] [ukanth/afwall](https://github.com/ukanth/afwall) AFWall+ (Android Firewall +) - iptables based firewall for Android
- [**1031**Star][9m] [Shell] [firehol/firehol](https://github.com/firehol/firehol) A firewall for humans...
- [**817**Star][4m] [trimstray/iptables-essentials](https://github.com/trimstray/iptables-essentials) Iptables Essentials: Common Firewall Rules and Commands.
- [**545**Star][6m] [Go] [sysdream/chashell](https://github.com/sysdream/chashell) Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.
- [**449**Star][5m] [Shell] [vincentcox/bypass-firewalls-by-dns-history](https://github.com/vincentcox/bypass-firewalls-by-dns-history) Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
- [**232**Star][4m] [Shell] [essandess/macos-fortress](https://github.com/essandess/macos-fortress) Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)
- [**220**Star][1y] [Go] [maksadbek/tcpovericmp](https://github.com/maksadbek/tcpovericmp) TCP implementation over ICMP protocol to bypass firewalls


### <a id="ff3e0b52a1477704b5f6a94ccf784b9a"></a>IDS&&IPS


- [**2874**Star][27d] [Zeek] [zeek/zeek](https://github.com/zeek/zeek) Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
- [**2798**Star][1m] [C] [ossec/ossec-hids](https://github.com/ossec/ossec-hids) OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- [**1589**Star][1m] [Go] [ysrc/yulong-hids](https://github.com/ysrc/yulong-hids) 一款由 YSRC 开源的主机入侵检测系统
- [**1252**Star][1m] [C] [oisf/suricata](https://github.com/OISF/suricata) Suricata git repository maintained by the OISF
- [**524**Star][19d] [Py] [0kee-team/watchad](https://github.com/0kee-team/watchad) AD Security Intrusion Detection System
- [**507**Star][4m] [C] [decaf-project/decaf](https://github.com/decaf-project/DECAF) DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- [**489**Star][7m] [Shell] [stamusnetworks/selks](https://github.com/stamusnetworks/selks) A Suricata based IDS/IPS distro
- [**369**Star][6m] [jnusimba/androidsecnotes](https://github.com/jnusimba/androidsecnotes) some learning notes about Android Security
- [**278**Star][13d] [C] [ebwi11/agentsmith-hids](https://github.com/EBWi11/AgentSmith-HIDS) Low performance loss and by LKM technology HIDS tool, from E_Bwill.
- [**243**Star][1y] [Perl] [mrash/psad](https://github.com/mrash/psad) psad: Intrusion Detection and Log Analysis with iptables
- [**220**Star][1m] [Py] [secureworks/dalton](https://github.com/secureworks/dalton) Suricata and Snort IDS rule and pcap testing system




***


## <a id="785ad72c95e857273dce41842f5e8873"></a>Spdier


- [**741**Star][19d] [Py] [nekmo/dirhunt](https://github.com/nekmo/dirhunt) Find web directories without bruteforce
    - Also In Section: [Tools/Scanner&&SecurityScan&&AppScan/NoCategory](#de63a029bda6a7e429af272f291bb769) |


***


## <a id="609214b7c4d2f9bb574e2099313533a2"></a>wordlist


### <a id="af1d71122d601229dc4aa9d08f4e3e15"></a>NoCategory


- [**1668**Star][7m] [Py] [guelfoweb/knock](https://github.com/guelfoweb/knock) Knock Subdomain Scan
    - Also In Section: [Tools/Recon&&InfoGather&&SubDomainDiscovery&&OSINT/SubDomainDiscovery](#e945721056c78a53003e01c3d2f3b8fe) |
- [**382**Star][3m] [Ruby] [digininja/cewl](https://github.com/digininja/cewl) CeWL is a Custom Word List Generator
- [**328**Star][4m] [Py] [initstring/passphrase-wordlist](https://github.com/initstring/passphrase-wordlist) Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords
- [**251**Star][1y] [Py] [berzerk0/bewgor](https://github.com/berzerk0/bewgor) Bull's Eye Wordlist Generator - Does your password rely on predictable patterns of accessible info?


### <a id="3202d8212db5699ea5e6021833bf3fa2"></a>Collection


- [**21409**Star][14d] [PHP] [danielmiessler/seclists](https://github.com/danielmiessler/seclists) SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
    - Also In Section: [Tools/webshell/Collection](#e08366dcf7aa021c6973d9e2a8944dff) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Payload&&RAT/PayloadCollection](#b5d99a78ddb383c208aae474fc2cb002) |
- [**5955**Star][6m] [berzerk0/probable-wordlists](https://github.com/berzerk0/probable-wordlists) Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!


### <a id="f2c76d99a0b1fda124d210bd1bbc8f3f"></a>WordlistGenerate






***


## <a id="96171a80e158b8752595329dd42e8bcf"></a>Breach&&Leak


- [**1358**Star][5m] [gitguardian/apisecuritybestpractices](https://github.com/gitguardian/apisecuritybestpractices) Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
- [**885**Star][21d] [Py] [woj-ciech/leaklooker](https://github.com/woj-ciech/leaklooker) Find open databases - Powered by Binaryedge.io


***


## <a id="de81f9dd79c219c876c1313cd97852ce"></a>Crack&&BruteForce


- [**3217**Star][18d] [C] [vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) hydra
- [**1885**Star][1m] [Py] [lanjelot/patator](https://github.com/lanjelot/patator) Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- [**1042**Star][3m] [Py] [landgrey/pydictor](https://github.com/landgrey/pydictor) A powerful and useful hacker dictionary builder for a brute-force attack
- [**875**Star][2m] [Py] [trustedsec/hate_crack](https://github.com/trustedsec/hate_crack) A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
- [**789**Star][6m] [C] [brendan-rius/c-jwt-cracker](https://github.com/brendan-rius/c-jwt-cracker) JWT brute force cracker written in C
- [**780**Star][10m] [Py] [mak-/parameth](https://github.com/mak-/parameth) This tool can be used to brute discover GET and POST parameters
- [**748**Star][4m] [Py] [s0md3v/hash-buster](https://github.com/s0md3v/Hash-Buster) Crack hashes in seconds.
- [**679**Star][7m] [Shell] [1n3/brutex](https://github.com/1n3/brutex) Automatically brute force all services running on a target.
- [**625**Star][2m] [JS] [animir/node-rate-limiter-flexible](https://github.com/animir/node-rate-limiter-flexible) Node.js rate limit requests by key and protection from DDoS and Brute-Force attacks in process Memory, Redis, MongoDb, Memcached, MySQL, PostgreSQL, Cluster or PM
- [**619**Star][4m] [C#] [shack2/snetcracker](https://github.com/shack2/snetcracker) 超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。
- [**606**Star][1y] [C] [nfc-tools/mfoc](https://github.com/nfc-tools/mfoc) Mifare Classic Offline Cracker
- [**551**Star][5m] [PHP] [s3inlc/hashtopolis](https://github.com/s3inlc/hashtopolis) A Hashcat wrapper for distributed hashcracking
- [**546**Star][1y] [CSS] [hashview/hashview](https://github.com/hashview/hashview) A web front-end for password cracking and analytics
- [**516**Star][3m] [C] [nmap/ncrack](https://github.com/nmap/ncrack) Ncrack network authentication tool
- [**507**Star][1m] [Py] [pure-l0g1c/instagram](https://github.com/pure-l0g1c/instagram) Bruteforce attack for Instagram
- [**499**Star][3m] [duyetdev/bruteforce-database](https://github.com/duyetdev/bruteforce-database) Bruteforce database
- [**487**Star][1y] [C] [mikeryan/crackle](https://github.com/mikeryan/crackle) Crack and decrypt BLE encryption
- [**437**Star][1y] [C] [ryancdotorg/brainflayer](https://github.com/ryancdotorg/brainflayer) A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key alogrithms.
- [**435**Star][5m] [JS] [coalfire-research/npk](https://github.com/coalfire-research/npk) A mostly-serverless distributed hash cracking platform
- [**380**Star][25d] [Py] [ticarpi/jwt_tool](https://github.com/ticarpi/jwt_tool) jwt_tool：测试，调整和破解JSON Web Token 的工具包
- [**351**Star][2m] [Py] [denyhosts/denyhosts](https://github.com/denyhosts/denyhosts) Automated host blocking from SSH brute force attacks
- [**307**Star][10m] [C] [e-ago/bitcracker](https://github.com/e-ago/bitcracker) BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
- [**287**Star][11m] [Shell] [cyb0r9/socialbox](https://github.com/Cyb0r9/SocialBox) SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi
- [**265**Star][11m] [C] [jmk-foofus/medusa](https://github.com/jmk-foofus/medusa) Medusa is a speedy, parallel, and modular, login brute-forcer.
- [**256**Star][17d] [Shell] [wuseman/emagnet](https://github.com/wuseman/emagnet) Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts
- [**250**Star][1y] [Py] [avramit/instahack](https://github.com/avramit/instahack) Instagram bruteforce tool
- [**246**Star][6m] [Go] [ropnop/kerbrute](https://github.com/ropnop/kerbrute) A tool to perform Kerberos pre-auth bruteforcing
- [**245**Star][11m] [Shell] [thelinuxchoice/instainsane](https://github.com/thelinuxchoice/instainsane) Multi-threaded Instagram Brute Forcer (100 attemps at once)
- [**225**Star][2m] [Py] [evilmog/ntlmv1-multi](https://github.com/evilmog/ntlmv1-multi) NTLMv1 Multitool
- [**220**Star][6m] [Py] [blark/aiodnsbrute](https://github.com/blark/aiodnsbrute) Python 3.5+ DNS asynchronous brute force utility
- [**220**Star][11m] [Py] [chris408/known_hosts-hashcat](https://github.com/chris408/known_hosts-hashcat) A guide and tool for cracking ssh known_hosts files with hashcat
- [**215**Star][7m] [Py] [paradoxis/stegcracker](https://github.com/paradoxis/stegcracker) Steganography brute-force utility to uncover hidden data inside files
- [**209**Star][1m] [C] [hyc/fcrackzip](https://github.com/hyc/fcrackzip) A braindead program for cracking encrypted ZIP archives. Forked from
- [**203**Star][3m] [Py] [isaacdelly/plutus](https://github.com/isaacdelly/plutus) An automated bitcoin wallet collider that brute forces random wallet addresses


***


## <a id="13d067316e9894cc40fe55178ee40f24"></a>OSCP


- [**1710**Star][20d] [olivierlaflamme/cheatsheet-god](https://github.com/olivierlaflamme/cheatsheet-god) Penetration Testing Biggest Reference Bank - OSCP / PTP & PTX Cheatsheet
    - Also In Section: [Tools/Collection/Mixed](#664ff1dbdafefd7d856c88112948a65b) |
- [**756**Star][1m] [HTML] [rewardone/oscprepo](https://github.com/rewardone/oscprepo) A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.
- [**667**Star][8m] [XSLT] [adon90/pentest_compilation](https://github.com/adon90/pentest_compilation) Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
    - Also In Section: [Tools/Collection/NoCategory](#e97d183e67fa3f530e7d0e7e8c33ee62) |
- [**375**Star][10m] [Py] [rustyshackleford221/oscp-prep](https://github.com/rustyshackleford221/oscp-prep) A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam
- [**360**Star][8m] [PowerShell] [ferreirasc/oscp](https://github.com/ferreirasc/oscp) oscp study
- [**289**Star][14d] [PowerShell] [mantvydasb/redteam-tactics-and-techniques](https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques) Red Teaming Tactics and Techniques
- [**222**Star][7m] [0x4d31/awesome-oscp](https://github.com/0x4d31/awesome-oscp) A curated list of awesome OSCP resources
- [**210**Star][1y] [foobarto/redteam-notebook](https://github.com/foobarto/redteam-notebook) Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.


***


## <a id="249c9d207ed6743e412c8c8bcd8a2927"></a>MitreATT&CK


- [**2595**Star][12d] [PowerShell] [redcanaryco/atomic-red-team](https://github.com/redcanaryco/atomic-red-team) Small and highly portable detection tests based on MITRE's ATT&CK.
- [**1308**Star][14d] [Py] [mitre/caldera](https://github.com/mitre/caldera) An automated adversary emulation system
- [**557**Star][5m] [HTML] [nshalabi/attack-tools](https://github.com/nshalabi/attack-tools) Utilities for MITRE™ ATT&CK
- [**454**Star][2m] [Py] [olafhartong/threathunting](https://github.com/olafhartong/threathunting) A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
- [**450**Star][12m] [bfuzzy/auditd-attack](https://github.com/bfuzzy/auditd-attack) A Linux Auditd rule set mapped to MITRE's Attack Framework
- [**325**Star][5m] [teoseller/osquery-attck](https://github.com/teoseller/osquery-attck) Mapping the MITRE ATT&CK Matrix with Osquery
- [**312**Star][10m] [PowerShell] [cyb3rward0g/invoke-attackapi](https://github.com/cyb3rward0g/invoke-attackapi) A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
- [**307**Star][29d] [Py] [atc-project/atomic-threat-coverage](https://github.com/atc-project/atomic-threat-coverage) Actionable analytics designed to combat threats based on MITRE's ATT&CK.


***


## <a id="76df273beb09f6732b37a6420649179c"></a>Browser


- [**4591**Star][2m] [JS] [beefproject/beef](https://github.com/beefproject/beef) The Browser Exploitation Framework Project
- [**960**Star][8m] [Py] [selwin/python-user-agents](https://github.com/selwin/python-user-agents) A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
- [**852**Star][3m] [escapingbug/awesome-browser-exploit](https://github.com/escapingbug/awesome-browser-exploit) awesome list of browser exploitation tutorials
- [**450**Star][30d] [Py] [globaleaks/tor2web](https://github.com/globaleaks/tor2web) Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
- [**446**Star][2m] [m1ghtym0/browser-pwn](https://github.com/m1ghtym0/browser-pwn) An updated collection of resources targeting browser-exploitation.
- [**408**Star][2m] [Pascal] [felipedaragon/sandcat](https://github.com/felipedaragon/sandcat) An open-source, pentest and developer-oriented web browser, using the power of Lua
- [**290**Star][2m] [xsleaks/xsleaks](https://github.com/xsleaks/xsleaks) A collection of browser-based side channel attack vectors.
- [**215**Star][2m] [Py] [icsec/airpwn-ng](https://github.com/icsec/airpwn-ng) airpwn-ng
- [**212**Star][1y] [C#] [djhohnstein/sharpweb](https://github.com/djhohnstein/sharpweb) .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.


***


## <a id="ceb90405292daed9bb32ac20836c219a"></a>Bluetooth


- [**218**Star][18d] [Py] [ghostop14/sparrow-wifi](https://github.com/ghostop14/sparrow-wifi) Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
    - Also In Section: [Tools/Network&&Sniff&&Mitm/NoCategory](#99398a5a8aaf99228829dadff48fb6a7) |[Tools/Pentest&&Offensive&&PentestFramework&&PostExp/Wireless&&WiFi&&AP&&802.11/NoCategory](#d4efda1853b2cb0909727188116a2a8c) |


***


## <a id="7d5d2d22121ed8456f0c79098f5012bb"></a>REST_API&&RESTFUL 


- [**1220**Star][8m] [Py] [flipkart-incubator/astra](https://github.com/flipkart-incubator/astra) Automated Security Testing For REST API's


***


## <a id="8cb1c42a29fa3e8825a0f8fca780c481"></a>Malware&&APT


- [**2013**Star][1m] [C++] [lordnoteworthy/al-khaser](https://github.com/lordnoteworthy/al-khaser) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
    - Also In Section: [Tools/Pentest&&Offensive&&PentestFramework&&PostExp/NoCategory](#2e40f2f1df5d7f93a7de47bf49c24a0e) |
- [**859**Star][2m] [aptnotes/data](https://github.com/aptnotes/data) APTnotes data


# Contribute
Contents auto exported by Our System, please raise Issue if you have any question.