UEFI shim loader

Caldera for OT Plugin

GRFICSv3 is a FREE and open source OT security lab with realistic networking and a 3D process simulation for training and learning ICS security

A practical cybersecurity audit framework for manufacturing environments, covering IT/OT asset management, vulnerability management, network security, wireless security, data governance, DLP, remot…

🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 10 plus frontier vectors (MCP · RAG · A2A · computer-use ·…

Decentralized C2 framework built on libp2p

Open Source Global Intelligence Platform - Real-Time OSINT Dashboard - A Palantir Alternative - 2nZNHm3Lr9umG3DVrzYwHgktwkuKuJRXqqRqs3ewpump

Collection of random scripts that make my life in the Linux console way simpler

OSUM is a tool for tracking Common Vulnerabilities and Exposures (CVEs) and Common Platform Enumeration (CPE) data. It provides an intuitive interface to search, analyze, and export vulnerability i…

preparation for LS26, Linux tools

A collection of Pentest Tools in prep for LS26

Iceman Fork - Proxmark3

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

An all-in-one tool to restore/downgrade, save SHSH blobs, jailbreak legacy iOS devices, and more

High-performance open-source security scanner combining SAST, SCA, Secret Detection, and IaC analysis, built for developers and CI/CD pipelines, using AI for recommendation!

Library for reducing tail latency in RAM reads

A comprehensive Burp Suite Professional extension providing MCP server functionality for AI-powered security testing with AI Agents

Brute force a serial attached device with Windows - useful if you have a hardware device which you need to guess the password for. Depends on ActiveExperts Serial Port Component

notes on building, preparing and installing u-boot for allwinner, rockchip, amlogic, exynos arm socs ...

Automated script to convert and push Burp Suite certificate in Android, and modify Android's IP table to redirect all traffic to Burp Suite.

evilginx3 + gophish

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Open-Source Phishing Toolkit

ODAT: Oracle Database Attacking Tool

Reproduce DeFi hacked incidents using Foundry.

hack400tool

Killer is a super simple tool designed to bypass AV/EDR security tools using various evasive techniques and used by Patchwork group.