Lists (29)
Dev - Other
Dev - Python
Misc
Misc - Automation
Other - Hackthebox
Other - Privacy
Sec - AD
Sec - AI
Sec - Blue Team
Sec - BruteForce
Sec - Bug Bounty
Sec - Cheatsheets
Cheatsheets reposSec - Cloud
Sec - Crypto
Sec - CTFy
Sec - CVE
Sec - Enumeration
Sec - Evasion
Sec - Forensics
Sec - Frameworks
Sec - Hardware
Sec - Linux
Sec - Network
Sec - Osint
Sec - Post-exploitation
Sec - Pwn
Sec - WEB
Sec - Web3
Sec - Windows
Stars
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 autonomous agents. STRIDE threat modeling, OWASP 2025 coverage, polyglot monorepo support.
Collection of OSINT tools, best practices and reference material
Extract Windows credentials directly from VM memory snapshots and virtual disks
m4ll0k / shannon
Forked from KeygraphHQ/shannonFully autonomous AI hacker to find actual exploits in your web apps. Shannon has achieved a 96.15% success rate on the hint-free, source-aware XBOW Benchmark.
Ο RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection β all without a single pixel of video.
HTNotes - Make your Hack The Box notes with Obsidian
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
The Black Tiger is all in one OSINT Tool, which has the best methods to collect Information about something or someone just by few mouse clicks.
β‘·β πππππ ππΈβ β’Ύ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)
A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev
SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordonβs (@YuG0rd) BadSuccessor attack from Akamai.
Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab
π PANO: Advanced OSINT investigation platform combining graph visualization, timeline analysis, and AI assistance to uncover hidden connections in data. Built with Python and modern Qt.
Hunt down social media accounts by username across social networks
DetectDee: Hunt down social media accounts by username, email or phone across social networks.
π΅οΈββοΈ Collect a dossier on a person by username from 3000+ sites
Security reconnaissance and assessment tool for identifying potentially exposed IP cameras by analyzing open ports, service configurations, and common misconfigurations.
π Search anyone's digital footprint across 300+ websites
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
Active Directory Mindmap Recipes: A Compromise Γ la Carte
Deobfuscate obfuscator.io, unminify and unpack bundled javascript