User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Set up a personal VPN in the cloud

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Backup and keep your application settings in sync.

Serverless Python

Access large language models from the command-line

📱 objection - runtime mobile exploration

Wrong project! You should head over to http://github.com/sshuttle/sshuttle

common data analysis and machine learning tasks using python

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments…

Generate modern Python clients from OpenAPI

SoCo (Sonos Controller) is a Python project that allows you to programmatically control Sonos speakers.

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

A toolkit for developing and deploying serverless Python code in AWS Lambda.

Obtain GraphQL API schema even if the introspection is disabled

Python library to manipulate ESC/POS printers

Expressive statecharts and FSMs for modern Python.

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

Karta - source code assisted fast binary matching plugin for IDA

Machine Learning / Natural Language Processing / Information Retrieval

A python module for writing pandoc filters, with a collection of examples

STIX data representing MITRE ATT&CK

Antidote to VibeCoding

Turn docstrings into LLM-functions

Tools for auditing WAFS