SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Steam Client Service Local Privilege Escalation Vulnerability

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

ASC is a super FAST Android decompiler front-end designed for Agents/Mobile Researchers.

Crowdstrike Falcon 0day Privilege Escalation Vulnerability

Username tools for penetration testing

A marriage between Octoberfest7/OSEP-Tools and chvancooten/OSEP-Code-Snippets with some improvements/additions

Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

like netcat, but over Tailscale's data plane, without Tailscale's control plane

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

Bash wrapper for NetExec to quickly validate compromised credentials across SMB, WinRM, RDP, MSSQL, and FTP

🫀 A living EKG card for your GitHub README — beats when you ship, flatlines when you vanish, revives when you return. Free, no login, fully color-customizable.

Faster passive subdomain enumeration tool.

Open-source AI-powered offensive security harness for automated penetration testing.

A vulnerable reverse proxy that reflects real world findings and novel research.

A next-generation crawling and spidering framework.

A privacy-first app that strips AI watermarks from content you own.

Windows Defender 0day vulnerability

Extract hashes from VBK files -- cause it's fun...

Pass-the-Passkey Family of Attacks

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects.

Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.

Burp Suite extension for JWT multi-role broken access control testing — auto-discovery, access matrix, privilege hierarchy, JWT attacks, HMAC cracker, IDOR analysis

An Apache Guacamole Extension to Support Custom Login Area with Logo and Auth Buttons

Powerview on steroids

🐂 Modern dashboard for Bull and BullMQ. Built for developers.