GraphQL framework for Python

Malicious traffic detection system

Python Data. Leaflet.js Maps.

Automated Adversary Emulation Platform

CTFs as you need them

Web application fuzzer

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Open Source Vulnerability Management Platform

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Scalable fuzzing infrastructure.

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Hunt for security weaknesses in Kubernetes clusters

🖥️📱🔔 A utility for sending notifications, on demand and when commands finish.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Geocoding library for Python.

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.

Python Socket.IO server and client

A pretty sweet vulnerability scanner

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, co…

GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!

This program show you IMSI numbers of cellphones around you.

A familiar HTTP Service Framework for Python.

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

Tool to look for several security related Android application vulnerabilities

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

Platform Security Assessment Framework

bpython - A fancy curses interface to the Python interactive interpreter