No-root network monitor, firewall and PCAP dumper for Android

A next-generation crawling and spidering framework.

A youtube-dl fork with additional features and fixes

Arkime (formerly Moloch) is an open source, large scale, full packet capturing, indexing, and database system.

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case m…

A list of web application security

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Fl…

Get intelligence info (tags, mitre techniques, yara and more) and find similar malware in a fast and easy way

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web application…

A community-driven Emacs distribution - The best editor is neither Emacs nor Vim, it's Emacs *and* Vim!

Free and Open source Web Builder Framework. Next generation tool for building templates without coding

The Reliable USB Formatting Utility

Please no pull requests for this repository. Thanks!

Trojan Source: Invisible Vulnerabilities

Dark Web OSINT Tool

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

Nikto web server scanner

Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Artifacts to the ALPACA attack.

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.

A list of cheat sheets for application security

CTF framework and exploit development library

A Node.js CLI tool and library to heavily obfuscate bash scripts.

Web application fuzzer

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatab…