Lists (1)
Stars
A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.
Read-only MCP server for YesWeHack hunter accounts with credentials and TOTP authentication
Reverse engineered Amazon antibot system called AWSWAF. This also includes a FASTAPI to use it as an API. Used on sites like binance, huggingface etc.
A sandbox-based approach to generate a valid VM payload for ReCaptcha
A decompiler for Akamai's stack-based virtual machine
A browser-based solution to reCAPTCHA- should work on most sites fine
Cloudflare Turnstile Solver Py — это утилита для автоматизированного тестирования на Python, разработанная для обхода капчи Turnstile при веб-скрейпинге и интеграционном тестировании. Она легко инт…
A proof-of-concept Cloudflare Turnstile bypass system built with Rust and JavaScript. An effective, multi-component token-harvesting system. No API service required.
Local captcha-solving HTTP sidecar (Turnstile, reCAPTCHA, hCaptcha, Cloudflare, AWS WAF, BotGuard, etc) built on CloakBrowser
A low cost, fast, and intelligent captcha solver, completely free and local with no APIs.
Local captcha-solving HTTP sidecar (Turnstile, reCAPTCHA, hCaptcha, Cloudflare, AWS WAF, BotGuard, etc) built on CloakBrowser
Self-hosted CAPTCHA + Cloudflare solving service for AI agents — local-first ($0, faster-whisper + stealth Chromium) with commercial fallback cascade, circuit breaker and cost telemetry. One HTTP A…
Local, privacy-first CAPTCHA recognition for Chrome and Edge. 本地、隐私优先的验证码识别扩展。
Slow but reliable Playwright-based reCAPTCHA v3 solver with browser fingerprint rotation and humanized behavior. Contributors welcome, stars appreciated.
Arkose Labs / FunCaptcha solver for Go, Python and Node — produces sup=1 suppressed tokens. The site RSA key is derived from api.js on every solve: no capture, no replay, no headless browser. Inclu…
Drop-in mitmproxy addon that replaces mitmproxy's upstream leg with real browser TLS/HTTP2 fingerprints
solves the cloudflare invisible jsd/oneshot challenge and returns cf_clearance + __cf_bm cookies
Tried To Do Reverse Using Previous Data, This project is old and doesnot provides full scores take it as a ref for future work
X (Twitter) No-Auth (Incogito) full requests API bypass
Twitter X-Client-Transaction-Id generator written in python.
Extracts the OnlyFans API request-signing parameters (staticParam, checksum indexes/constant) by running the site's own obfuscated 2313.js rather than parsing it — so it keeps working through OnlyF…
Agentic offensive-security in your terminal
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, a…
Android Reverse-Engineering Workbench for VS Code