Starred repositories
Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by BeichenDream.
AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, Llama, and more. Simple declarative configs with command line …
Starkiller is a Frontend for PowerShell Empire.
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
High-performance reverse proxy and container orchestrator for self-hosters
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
One stop place for Jira security reconnaissance and exploitation in your proximity
Autoswagger by Intruder - detect API auth weaknesses
Cobalt Strike module x loader x profile x wike / A public collection of open resources for Cobalt Strike (only legal use in Red Team and penetration testing
Check if an email address exists without sending any email, written in Rust. Comes with a ⚙️ HTTP backend.
Comprehensive Kubernetes security guide covering attack vectors, best practices, mitigation strategies, and tools aligned with CKS certification domains.
Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.
gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications (Official BApp Extension Available)
A Pentesters Confluence Keyword Scanner
对已加入telegram的群组、频道或者是公开的群组、频道内容进行实时监控，然后web展示以及钉钉通知
Laravel is a web application framework with expressive, elegant syntax. We’ve already laid the foundation for your next big idea — freeing you to create without sweating the small things.
This tool is a modern evolution of older PoCs like those for CVE-2017-7921 and ICSA-17-124-01, updated for 2025 with live console output, threading for speed, and honeypot filtering (skips devices …
Abuse trust-boundaries to bypass firewalls and network controls
Try to find the origin IP of a webapp protected by Cloudflare.
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.
这是一款提高ChatGPT的数据安全能力和效率的插件。并且免费共享大量创新功能，如：自动刷新、保持活跃、数据安全、取消审计、克隆对话、言无不尽、净化页面、展示大屏、拦截跟踪、日新月异、明察秋毫等。让我们的AI体验无比安全、顺畅、丝滑、高效、简洁。
A lightning-fast search engine API bringing AI-powered hybrid search to your sites and applications.