A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

Model Context Protocol server for autonomous vulnerability discovery

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.

reclaim your Hardware! A better GNARBOX2.0 Firmware alternative.

Federal Administration API Guidelines

Notes about Active Directory for CRTP certification.

Helper scripts for various reconnaissance tasks

π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.

Original Proof-of-Concepts for React2Shell CVE-2025-55182

MacOS inside a Docker container.

The Network Execution Tool

Projects motion of pixels to a voxel

Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for buildi…

ZITADEL - Identity infrastructure, simplified for you.

privat1 :(privatize) contains implementations of various adversarial attack methods on neural networks to object recognition.

Implementation of targeted (FGSM targeted) and untargeted (FGSM untargeted) FGSM attack and of PGD attack for MNIST trained neural network model

A library for detecting known secrets across many web frameworks

Credentials recovery project

Windows Exploit Suggester - Next Generation

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Python tool for converting files and office documents to Markdown.

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

Fawkes, privacy preserving tool against facial recognition systems. More info at https://sandlab.cs.uchicago.edu/fawkes

Automated decoding of encrypted text without knowing the key or ciphers used

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Obtain GraphQL API schema even if the introspection is disabled

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.