Javascript

Awesome Embedded Security is a curated repository offering a comprehensive collection of tools, resources, and training focused on enhancing security in embedded systems. It covers a wide range of topics, including firmware analysis, reverse engineering, hardware hacking, and IoT security, featuring notable tools for binary analysis, debugging, fuzzing, and secure boot processes. This repository serves as a valuable resource for cybersecurity professionals seeking to conduct thorough assessments and improve the security posture of embedded devices.

MW Geofind is a tool designed for searching YouTube videos based on geographic tags, allowing users to find content by location, topic, or channel. Its notable features include the capability to view results on a map, filter for recent uploads or live events, and export data to CSV. The tool also supports OSINT investigations by enabling detailed searches for geotagged videos and integration with an API for sharing search results.

MW Metadata is a tool designed to extract comprehensive metadata for YouTube videos, playlists, or channels via the YouTube API, making it particularly useful for investigative purposes and OSINT tasks. Notable features include the ability to find unlisted videos, perform reverse image searches on thumbnails, and export or import data in various formats for future use. The tool also automates language translations and provides geolocation capabilities, streamlining the analysis of YouTube content.

The grok-bot-0.18-original repository provides an archival version of the Grok Bot 0.18.0 runtime code, mechanically split into a modular file structure for ease of access and analysis. It contains the original runtime bundles and tools for lossless reassembly, alongside precise documentation of module paths and offsets, which are crucial for understanding the binary's internal architecture. This setup facilitates the study and reconstruction of the software without any source mapping, preserving its structural fidelity for educational purposes.

TI Mindmap HUB is a research platform leveraging Generative AI to enhance Cyber Threat Intelligence (CTI) workflows by automating the transformation of unstructured threat data into structured, actionable insights. Its notable features include automated ingestion of OSINT sources, AI-generated summaries and reports, integration with the MITRE ATT&CK framework, and STIX 2.1 export capabilities for seamless integration with security tools. Additionally, it offers a Model Context Protocol (MCP) server for AI assistant integration, facilitating interactive querying of threat intelligence.

The `web-reconstruction` tool is an evidence-driven solution for accurately reconstructing static websites, responsive pages, and complex UI elements utilizing WebGL/WebGPU/Canvas effects. It distinguishes between faithful replicas, visual approximations, and design transfers by using a structured approach to gather evidence, lock down routes, and verify outputs, ultimately facilitating multi-state verification and editable project creation. Key features include modular reconstruction paths for various target types, a progressive workflow that ensures accuracy, and no dependencies on third-party packages.

Vulnogram is a comprehensive tool designed for reserving, managing, and publishing Common Vulnerabilities and Exposures (CVE) information, facilitating collaboration between vendors and security researchers. It offers both solo and team modes, allowing users to edit JSON documents that conform to specified schemas, with enhanced features such as real-time collaboration, version control, and a customizable plugin architecture for various tracking needs. Notable features include a web-based frontend, integration with MongoDB for persistent storage, and security-focused configurations to ensure the integrity of vulnerability data.

The anti-trojan-source tool is designed to detect trojan source attacks that exploit Unicode bidirectional (bidi) characters to inject malicious code into applications. It employs a comprehensive detection mechanism utilizing an explicit list of dangerous Unicode characters as well as category-based detection for invisible characters, ensuring robust protection against various types of attacks. This tool also integrates with ESLint through a dedicated plugin, facilitating real-time detection of potential security vulnerabilities in codebases.

ObuscatedBOT is a multi-functional Telegram bot designed for performing instant network scans and providing security insights, aimed at ethical hackers and security enthusiasts. Key features include real-time alerts for suspicious activity, comprehensive vulnerability reports, and a user-friendly interface within the Telegram platform, facilitating easy navigation and interaction.

Mimic is a lightweight JavaScript library designed for conducting realistic phishing simulations by creating a fake browser interface on top of an existing webpage without the need for iframes. Utilizing Shadow DOM and MutationObserver technologies, it successfully renders the actual website’s content within a customizable fake browser viewport while preserving original styling and information, enabling more effective testing and demonstration of phishing attacks in a seamless manner. Notable features include a dependency-free design, automatic content injection, and the ability to mimic various browser elements like the address bar and site information.

AEGIS is an OS-level monitoring tool designed to observe the activities of AI coding agents, tracking their processes, file accesses, and network interactions without requiring any hooks. Its key features include the ability to attribute actions to specific agent instances, maintain an evidence graph for auditing, and support multiple operating systems while ensuring no telemetry is transmitted off the local machine. Built with a robust monitoring engine, AEGIS provides extensive detection rules and anomaly scoring for enhanced visibility into agent behavior.

The ExploitDB MCP Server is a Model Context Protocol server designed to provide AI assistants with access to security exploit and vulnerability data from ExploitDB. Its primary use case is to enhance cybersecurity research and threat intelligence through functionalities like searching for exploits by various criteria, retrieving detailed exploit information, and tracking newly added exploits, all while supporting automatic database updates to ensure up-to-date information. Notable features include comprehensive search and analysis tools, statistics on exploit distribution, and batch retrieval capabilities for efficient data access.

reCAPTCHA VM is a tool that emulates Google's reCAPTCHA validation mechanism by running its BotGuard engine in a jsdom sandbox environment, enabling the generation of legitimate reCAPTCHA tokens without a browser. It fully supports reCAPTCHA v3 token minting and provides a scoring mechanism to evaluate token legitimacy, while also offering a proof-of-concept for reCAPTCHA v2 that demonstrates the anchor flow and audio challenge URL capture. Key features include real network calls to Google's API and an in-depth implementation of the VM's bytecode interpretation.

Open Web Bridge is a tool designed to facilitate the interaction of AI agents with a user's personal web browser, leveraging authenticated sessions and user-specific data. The tool features a command-line interface that integrates seamlessly with AI agents, offering capabilities such as semantic snapshots for web elements, waiting primitives for improved asynchronous interactions, and options for both local and remote operation modes. Notably, it allows AI agents to perform tasks in real-time using the currently active browser session, enhancing their ability to access and manipulate content beyond publicly available information.

ExecEndpoints is a dual-component toolkit designed for authorized web security testing and bug bounty efforts, featuring a Chrome extension for real-time API request monitoring and a Python server for extracting hidden endpoints from JavaScript. The tool captures detailed HTTP requests, including methods, parameters, and per-host authentication details, while enabling deep static analysis to uncover dynamic API endpoints missed by traditional scanning methods. Notable features include a rich dashboard for endpoint management, a typed secret scanner, and a safe design that operates locally without external dependencies.

Frida-libcurlUnpinning is a tool designed to bypass SSL-Pinning protections in Android applications that utilize the libcurl library. Utilizing Frida, it allows users to spawn or attach to an application, enabling the dynamic hooking of `curl_easy_setopt` to disable SSL-Pinning mechanisms. Notable features include support for both spawn and attach modes for adaptability in various use cases.

The Apple Continuity Reverse Engineering Toolkit is designed for analyzing Apple’s wireless ecosystem services, including AirDrop and Handoff, primarily for security research and vulnerability assessment. It includes various tools for monitoring processes and accessing keychain items, requiring potential modifications to macOS' System Integrity Protection for full functionality. Notable features include `process_recon` for system log scanning and `keychain_access` for monitoring keychain interactions.

Codex++ is a desktop application that allows users to manage multiple ChatGPT subscriptions seamlessly within a single interface on macOS and Windows. Notable features include a user-friendly profile menu for easy account switching, shared project and skill history, and separate user data management, ensuring the original ChatGPT application remains unaltered. The tool is built on Electron and enables a streamlined integration of additional subscriptions while preserving functionality across accounts.

P4wnP1 Infinition Payloads is a collection of JavaScript and Bash scripts designed for the P4wnP1 A.L.O.A. platform, facilitating credential harvesting, file exfiltration, and remote access primarily on Windows 10 systems. Notable features include the ability to stealthily operate through minimized PowerShell sessions, support for French and US keyboard layouts, as well as methods for disabling Windows Defender and retrieving sensitive information directly to a Samba share. This tool is intended for authorized penetration testing and security research.

Rawsec's Cybersecurity Inventory is a comprehensive resource designed to catalog various cybersecurity tools and their functionalities. It serves as a centralized platform for researchers and professionals to discover, contribute to, and engage with open-source cybersecurity solutions. Notable features include an extensive documentation hub, contribution guidelines, and active community engagement through Discord channels.

Fingerprint Pro Internals is a deobfuscated and documented version of the Fingerprint Pro v4 library, providing detailed insights into its 143 defined signal collectors, signal map, and wire format operations. The tool allows developers to analyze and run collectors independently without a network, enabling the examination of the library's inner workings in a browser environment. Notable features include a comprehensive signal map, individual collector source files, and the ability to explore the wire format from JSON to bytes in an organized manner.

Frida Script Runner is a web-based toolkit designed for comprehensive Android and iOS penetration testing and mobile application security analysis. It streamlines interactions with Frida through a user-friendly Flask interface and supports advanced functionalities such as AI-powered script generation, real-time output, and automated analysis with integration for Ghidra and JADX. Notable features include APK/IPA dumping, SSL detection, multi-device monitoring, and an extensive set of tools for script management and execution.

The kasada-vm is a browserless tool designed for solving Kasada's fingerprinting mechanism by running a Node.js sandbox that executes the `p.js` fingerprint VM. Its primary use case is to generate valid session tokens (`x-kpsdk-ct`, `x-kpsdk-h`) from a captured fingerprint blob, while offering features such as bytecode dumping, string table cracking, and a framework to analyze and disassemble various versions of `p.js`. The tool is intended for research and educational purposes, emphasizing the need for compliance with Kasada's terms of use.

The CTFd Geo Challenges Plugin enhances Capture The Flag competitions by enabling the creation of location-based puzzles that require players to identify specific geographic coordinates. Notable features include two answer types (point with a tolerance radius and polygon zones), an interactive map interface powered by Leaflet and OpenStreetMap, geocoding support, and a multilingual interface, making it a versatile tool for challenge creators in the CTF community.

Hacker Bob is a local MCP (Managed Control Panel) workflow tool designed for authorized offensive security testing within CI environments or staging areas. It facilitates surface mapping, authentication setup, parallel testing, and reporting, while integrating with various MCP-capable hosts like Claude Code and Codex. Notable features include real network request capabilities, local artifact imports, and the ability to manage sensitive run data securely, all ensuring users adhere to permissions and authorization guidelines.

DeepSpider is an AI-driven reverse engineering platform designed for JavaScript, enabling users to analyze encrypted links and reconstruct algorithms based on actual request evidence. It integrates OpenCode Agent, Patchright browser, and Chrome DevTools Protocol to provide a comprehensive environment for real-time analysis, effortless debugging, and the generation of runnable scraping code, while ensuring validation through multi-sample comparisons. Its notable features include progressive analysis of obfuscated code, direct browser interactions, a structured eight-stage workflow for reverse engineering, and support for seamless transitions between browser and standalone environments.

ZeroKey is a self-hosted, OpenAI-compatible local AI proxy designed for interfacing with models like DeepSeek, Claude, and ChatGPT using personal credentials. It supports IDE integration, session persistence, and a range of built-in tools for enhanced functionality, allowing users to utilize AI capabilities directly from their development environments. Notable features include streaming responses, multi-IDE selection, and in-memory session tracking with support for custom tool calls.

loopback4-helmet is a LoopBack 4 extension that integrates Helmet.js, providing enhanced security for LoopBack applications through a series of middleware configurations. Its primary use case is to help developers implement best practices for HTTP headers, which can mitigate common web vulnerabilities. Notable features include customizable middleware settings via configuration bindings and the ability to easily incorporate the Helmet security action into the application’s request handling sequence.

njsscan is a static application security testing (SAST) tool designed to detect insecure code patterns in Node.js applications utilizing both simple pattern matching from libsast and semantic analysis via semgrep. Its primary use case is to enhance the security posture of Node.js applications by identifying vulnerabilities, with notable features including multiple output formats (such as JSON, SARIF, and HTML) and customizable configurations.

myslt-alerts is a lightweight Node.js tool designed to monitor Sri Lanka Telecom broadband usage and send threshold-based notifications without relying on external dependencies. It automatically logs into the MySLT backend to track data consumption, alerting users via a designated channel when their remaining data reaches specified limits. Key features include configurable alert thresholds, execution via GitHub Actions for seamless setup without the need for a personal server, and the ability to receive immediate usage snapshots on demand.

GameTracking-SteamVR is a tool designed for tracking and monitoring games played in SteamVR. Its primary use case is to automate the tracking process, providing users with an organized overview of their gaming activities without manual input. Notable features include integration with the main GameTracking repository and a supportive community through Discord.

usbsnoop is a real-time USB traffic sniffer that provides a colorized, compact feed of USB transactions system-wide, utilizing fentry hooks for universal compatibility across various host-controller drivers. Its primary use cases include reverse-engineering USB peripherals, debugging drivers, inspecting mass-storage commands, and capturing errors, with features such as decoded SETUP packets, latency measurements, and JSON output for offline analysis. The tool operates without the need for hardware sniffers or traditional monitoring setups, allowing instantaneous observation and analysis of USB device communications.

AuditSentry is an AI-powered smart contract auditor designed for analyzing Solidity and Vyper contracts across EVM chains. It leverages 23 specialized AI agents to conduct in-depth security assessments, providing detection of critical vulnerabilities, working exploit proof-of-concepts, and gas profiling, all formatted into professional audit reports within minutes. Notable features include mainnet-fork simulations and on-chain certificates, enhancing both accuracy and trust in the audit process.

Pie-my-vulns is a command-line tool designed to visualize JavaScript and Node.js project security vulnerabilities using pie charts directly in the terminal. It leverages the Snyk vulnerability database for analysis and offers functionalities for scanning project directories or piping in existing Snyk test outputs. Notable features include the ability to run scans via npx, Docker support, and a straightforward installation process through npm.

SafeIP is a lightweight web application designed for network security validation, which checks the user's current IP location against a manually selected country to identify potential security risks before accessing sensitive services online. Notable features include real-time IP detection, safety status indicators, a quick link manager with client-side validation, and persistent settings using LocalStorage, ensuring a user-friendly experience while maintaining a focus on security.

Guardon is a browser extension designed to identify Kubernetes security misconfigurations during code reviews on GitHub and GitLab, enabling developers to catch issues before they reach production. It offers instant feedback with actionable, copy-paste ready fixes, requires zero setup, and supports customizable rules and Kyverno policy imports. Notable features include multi-document YAML parsing, smart fix suggestions, and a user-friendly interface that integrates seamlessly into existing workflows.

Gravit Designer - Self-Hosted Edition is a locally hosted vector design tool that allows users to utilize all Pro features without needing a cloud account. Notable features include full offline capability, a reverse-engineered module system, native desktop applications for Windows and Linux, and built-in documentation provided through a local server. This tool is ideal for users seeking a fully functional graphic design application that operates independently of internet connectivity.

The pin-it tool enables users to pin any tweet to their X (formerly Twitter) profile through a UserScript or executable bookmark. Although it was designed for ease of use via Tampermonkey or Greasemonkey, it currently faces functionality issues due to changes in the X API, with no planned fixes. Notable features include the ability to run as a UserScript or bookmarklet, though usability may be hindered by Content Security Policies.

Malware Research Hub is a comprehensive local platform designed for malware intelligence, featuring a curated forensic catalog with 2,699 live specimens and a proprietary search engine. Its primary use case is to provide researchers and cybersecurity professionals with an extensive, accessible repository of real malware samples indexed by family and type, while ensuring safety through encrypted storage and a containment-focused design. Notable features include a detailed forensic catalog, an automatic specimen downloader, and a bilingual interface for enhanced usability.

The HCL AppScan SAST GitHub Action facilitates static analysis security testing (SAST) and software composition analysis (SCA) for code repositories, identifying vulnerabilities within both the source code and its dependencies. Notable features include customizable scan parameters, the ability to conduct incremental scans, and options to focus solely on specific types of analysis, along with integration with HCL AppScan on Cloud or AppScan 360 for result storage.

The web-global-metadata-parser is a tool that parses and extracts metadata from web files, facilitating enhanced data accessibility and management. Its primary use case is to enable seamless integration and retrieval of metadata across various web-based applications, while notable features include its capability to handle multiple file formats and its reliance on shared utility scripts for enhanced functionality.

The Cybersecurity Handbook is an interactive, open-source knowledge base tailored for cybersecurity professionals, students, and enthusiasts. It offers over 400 comprehensive notes on diverse topics, enhanced by an interactive knowledge graph, full-text search capabilities, and a user-friendly interface that supports dark/light modes and is mobile-friendly. This community-driven resource keeps pace with the rapidly evolving cybersecurity landscape, providing practical insights into real-world threats and defense strategies without any paywalls.

VICE is a security auditing CLI tool designed for assessing vulnerabilities in web applications through both black-box and white-box testing modes. It offers a remote scanning feature that crawls and inspects a given URL, as well as a local audit mode that analyzes source code and configurations for security flaws, including SQL injections and XSS vulnerabilities. Notably, VICE integrates seamlessly with GitHub Actions to automate security checks on pull requests, provide real-time updates on security scores, and maintain a security badge within the repository.

Elementor Extractor is a Chrome extension that facilitates the extraction and reconstruction of Elementor page structures from live WordPress sites by analyzing the DOM. It generates two types of JSON outputs: one suitable for direct import as an Elementor template and another providing a detailed technical report of all extracted elements, assets, and configurations. Notable features include comprehensive asset detection, extraction of over 30 widget types, and the ability to map Elementor-specific settings and structures for developers and content migrators.

The OSCP repository serves as a centralized resource for individuals preparing for the Offensive Security Certified Professional (OSCP) exam, compiling useful materials from various sources including websites, blogs, and books. Key features include organized sections for methodologies, automation scripts, cheat sheets, and troubleshooting documentation, all formatted for compatibility with Obsidian for enhanced note-taking and visual data representation. While the maintainers are no longer actively updating the repository, it aims to remain a valuable reference for future OSCP candidates.

ZeroPulse is a modern Command & Control (C2) platform designed for secure remote management and monitoring of systems, utilizing Cloudflare Tunnel technology for encrypted connections. Key features include built-in authentication, support for WinRM and SSH interactions, a responsive React interface with real-time terminal integration, and comprehensive DNS management. The tool is currently in active development and is intended primarily for testing and evaluation purposes.

npm-scan is an advanced supply chain threat detection tool designed to identify sophisticated attacks that typical tools like npm audit, Snyk, and Socket often overlook. It excels at detecting obfuscated payloads, credential theft, eBPF kernel rootkits, and various AI-targeted attacks, boasting over 95% confidence in real-world threat scenarios. Key features include comprehensive behavioral pattern recognition and a dual detection approach that enhances compliance and reduces financial liability associated with data breaches.

The Security Risk Assessment Tool (ISRA) is an Electron-based application designed for evaluating security risks in engineering projects, specifically within Thales Digital Identity and Security Business Unit. It facilitates the identification of business and supporting assets, threat agents, vulnerabilities, and the assessment of associated risks, all while adhering to the ISO 27005 risk management standard. Notable features include detailed risk analysis workflows, integration of predetermined Targeted Level of Trust (TLoT), and a risk treatment strategy that allows for mitigation, acceptance, or avoidance of identified risks.

Mozilla's HTTP Observatory is a security assessment tool that evaluates websites for security-relevant HTTP headers, providing structured results in JSON format. Its primary use case includes both one-off scans via command line and API integration for continuous monitoring within CI pipelines. Notable features include support for customizable request headers, a local API server with persistence via PostgreSQL, and detailed scan results that reflect the security grade and compliance of tested websites.

Osprey is a free, open-source browser extension that enhances online security by protecting users from phishing, malware, and other threats through real-time site verification against over 20 threat-intelligence providers. It features a privacy-respecting architecture that anonymizes user data and allows customization of protection settings, making it suitable for both individual and business use. Notably, Osprey never collects or sells browsing data, ensuring user privacy.

Soterios is an open-source security and system maintenance suite designed for Windows, enabling users to scan files, inspect processes, audit system settings, manage firewall configurations, and assess password strength while ensuring privacy through local-first operation. Notable features include a comprehensive security dashboard, malware scanning powered by ClamAV, real-time protection controls, and detailed reports on system health and security assessments. The tool emphasizes user privacy by operating without telemetry or analytics, performing all analysis locally on the user's machine.

SPR (Secure Programmable Router) provides a secure networking solution that facilitates adaptive, micro-segmented network management for WiFi devices, remote VPN access, and wired systems. Key features include multi-PSK support with WPA3, policy-based routing for enhanced security, advanced DNS capabilities with per-device rules, and a user-friendly interface accessible via a React-based web app and iOS application. This tool is optimized for a wide range of Linux systems, leveraging Docker for interoperability and offering comprehensive observability features such as traffic insights and health monitoring.

Ship Safe is an AI-driven security scanner designed for modern software teams, operating locally within projects to identify vulnerabilities in application code, AI agents, configuration files, and supply chains. Its notable features include offline scanning capabilities, an interactive REPL for real-time scanning and fixing, and comprehensive audits that cover secrets, dependencies, and CI/CD configurations. Moreover, it allows for configuration of AI-backed red-team modes for deeper analysis, all without requiring user signups or API keys.

The Malicious IP Address List repository provides a continuously updated list of IP addresses associated with malicious activities, such as DDoS attacks and misuse through VPNs or proxies. Its primary use case is for threat identification, allowing users to recognize potentially harmful sources without directly blocking them at the firewall level. Notable features include regular updates every two hours, availability in both TXT and CSV formats, and a focus on long-term reputation blacklisting.

Mobile Security Framework (MobSF) is a comprehensive security research platform for analyzing mobile applications across Android, iOS, and Windows Mobile ecosystems. It facilitates static and dynamic analysis, enabling use cases such as penetration testing, malware analysis, and privacy assessments, all of which can be integrated into DevSecOps workflows via REST APIs and CLI tools. Notable features include support for multiple mobile binary formats, runtime data analysis, and interactive instrumentation for comprehensive security evaluations.

PacketSnitch is a network analysis tool that processes packet capture (.pcap) files, providing searchable, protocol-aware insights for security professionals and researchers. Its key features include an Electron-based frontend for interactive browsing and filtering of network traffic, GeoIP integration for location visualization, payload analysis, and support for various protocols. Additionally, it offers AI-generated summaries and a plugin engine for extended functionalities.

Android Frida Hooks is a collection of Frida scripts designed for device spoofing, integrity bypass, and exploring application tampering detection on Android devices for educational and security research purposes. It includes two versions: "full stealth," which encompasses extensive Java and native hooks for deep coverage against aggressive app checks, and "clean and minimal," focusing on essential spoofing while maintaining a lower detection footprint. Notable features include device ID generation, process list filtering, Play Integrity token faking, and safety mechanisms against common detection methods, making it suitable for a range of security testing scenarios.

areclaw is an automated command-line environment designed for Android application security analysis, enabling tasks such as decompilation, traffic interception, dynamic instrumentation, secret scanning, and API discovery. It leverages an AI-driven orchestrator, Claude Code, to streamline the analysis process, and includes an automated installer for essential tools, a structured workspace for outputs, and various utility scripts for enhanced interaction and reporting.

m365-copilot-proxy serves as a bridge that allows Microsoft 365 Copilot to function as a backend for OpenAI-compatible coding agents by translating the M365 Copilot's WebSocket/SignalR API into an OpenAI-compatible format. This tool features a standalone proxy with customizable endpoints, agent creation for enhanced tool calling, and session continuity to save resources during interaction. Notably, it utilizes a shell-routing mechanism to bypass M365 Copilot's limitations in executing agentic tasks, enabling more effective multi-turn execution of code commands.

Ghostify is a privacy-focused browser extension designed for Meta web applications like Instagram, Facebook, and Messenger. It empowers users by blocking read receipts, typing indicators, and story-view signals locally, enhancing privacy without the need for an account or sharing social media credentials. The tool is built on Manifest V3 and is available across multiple browsers, with an established user base exceeding 4,000 on the Chrome Web Store.

The repository contains a collection of scripts designed for use with the Agent tool. Its primary use case is to enhance automation and functionality within the Agent framework, facilitating various operational tasks. Notable features include easy integration and support for scripting common workflows in cybersecurity operations.

Detect It Easy (DiE) is a versatile file type identification tool designed for malware analysts and cybersecurity experts, employing both signature-based and heuristic analysis to deliver accurate file inspections across Windows, Linux, and MacOS platforms. Its key features include flexible signature management for customizable detection rules, a JavaScript-like scripting capability for tailored analysis, and a comprehensive support for various executable and archive formats. The tool aims to minimize false positives, making it an essential resource for digital forensics and malware detection.

The "HCAPTCHA HSJ HSW Reversed" tool offers byte-accurate extraction of master keys from hCaptcha's JavaScript bundles `hsj.js` and `hsw.js`, revealing six build-static AES-256 master keys in under twenty-five seconds. Its primary use case is for capturing and verifying keys used in encrypted communications by leveraging a reverse-engineered AES-256-CTR cipher, ensuring all keys are verified through structured analysis. Notable features include deterministic fingerprinting for builds and end-to-end verification for five of the keys, enhancing reliability in cryptographic applications.

CTF-Website-Template-2020 is a static HTML template designed for hosting Capture the Flag (CTF) events, featuring essential pages such as Home, Login, Register, Challenges, Feedback, Leaderboard, and Instructions. Its primary use case is to provide a visually appealing and functional frontend solution for organizers while the backend functionality is still under development using the Django framework. Notable features include a user-friendly layout based on the Neon Glow theme and a structured design for easy customization and integration with backend services.

The Cybersecurity CTF repository serves as a comprehensive catalog of frameworks, libraries, resources, and tutorials aimed at assisting both the creation and resolution of Capture The Flag (CTF) challenges in cybersecurity. It categorizes tools for various aspects of CTFs, including forensics, web challenges, and steganography, while also providing platforms to host competitions and resources for training and educational purposes. Notable features include a diverse array of project links, detailed sections for both creating and solving CTF challenges, and community-driven contributions to enhance resource accessibility.

SCUCTF-CMS is a content management system designed specifically for the Sichuan University Capture The Flag (CTF) Association. Its primary use case is to facilitate the organization and management of CTF events and content. Notable features include customizable content handling tailored for CTF activities.

Caronte is a network flow analysis tool designed for Capture The Flag (CTF) events, specifically for attack/defence scenarios. It reassembles TCP packets from pcap files, allowing users to define custom patterns for analysis through regex or protocol-specific rules, with results visualizable via a web application and accessible through a REST API. Key features include quick deployment via Docker, an intuitive GUI for configuration and rule management, and advanced analytics capabilities such as timeline visualizations and detailed connection filtering.

The Sieberrsec CTF Platform is a Jeopardy-style Capture The Flag (CTF) tool designed for training and educational purposes, built using ReactJS and NodeJS. It features an organized challenge categorization system, dynamic scoring, live leaderboards, and user role management, allowing for seamless participation and challenge creation, with added functionalities such as markdown support for descriptions and integrated email verification. Ideal for both individual and team-based cybersecurity training exercises, the platform enables easy deployment and management through Docker.

The TryHackMe - Hackers Learning Path repository provides a structured framework for beginners in cybersecurity to learn and practice through a series of rooms and hands-on exercises. Key features include an automated environment setup script, instructional content covering foundational topics like Linux, networking, and various security tools (e.g., Nmap, Burp Suite, Metasploit), and practical penetration testing exercises to simulate real-world attacks. This resource is designed to guide users incrementally from introductory levels to more advanced cybersecurity skills.

First Strike Alert is a CTFd integration tool designed to announce "first blood" achievements during capture-the-flag competitions with real-time audio-visual notifications. Its notable features include automatic sound playback, fullscreen announcements, a cyberpunk-themed interface, and live tracking of team statistics and first bloods. The tool polls the CTFd API for updates every five seconds, ensuring instantaneous notifications, while its responsive design allows for usability across various display sizes.

vHeap is an extendable visualization and exploitation tool designed for glibc heap memory analysis during debugging sessions, primarily targeting security researchers and CTF players. It allows users to visualize heap memory in real-time within a web browser leveraging GDB's pwndbg integration, with features like automatic heap state updates and customizable extensions for other debuggers. Notably, vHeap facilitates easier exploitation of heap memory by transforming complex memory structures into interactive visual representations.

Klodd is a deployment service designed for facilitating Capture The Flag (CTF) competitions by allowing teams to create and manage on-demand instances of CTF challenges. Its primary use case is to streamline the setup and access of challenge environments for teams during competitions. Notable features include easy challenge definition creation and per-team instance management, enhancing the competitive experience.

AspGoat is an intentionally vulnerable ASP.NET Core web application designed for educational purposes, allowing Security Engineers and Developers to explore and practice web application security vulnerabilities. It encompasses a range of common security issues outlined by the OWASP Top 10, providing hands-on labs for vulnerabilities such as XSS, SQL Injection, and Cross-Site Request Forgery, along with features like Docker support for easy deployment and secure coding best practices.

COLI (Command Orchestration & Logic Interface) is a command line tool designed to streamline workflow management by enabling users to visually create and connect tasks through a drag-and-drop interface. It offers features such as real-time scan monitoring, an interactive web terminal, and a built-in file explorer, making it ideal for those seeking a more efficient way to manage command line operations and enhance visualization. Additionally, COLI supports mobile access, allowing users to operate workflows from anywhere.

FBack is a command-line tool designed for generating target-specific wordlists to aid in fuzzing backup files. Its primary use case is for security professionals and penetration testers, featuring customizable pattern generation using URL components, date ranges, and various extensions for efficient wordlist creation. Notable features include fast processing, flexible JSON configuration, and the ability to support multiple sources for wordlists and extensions, optimizing it for diverse testing scenarios.

JS-endpoint-extractor is a JavaScript tool designed to extract endpoints from minified scripts by utilizing a bookmarklet. Users can easily add a bookmark, paste the minified URL, and activate the bookmark on a webpage to retrieve the JavaScript endpoints, streamlining the process of analyzing web scripts for security or development purposes. Notable features include user-friendly bookmark integration and minimal setup requirements.

NarrowX is a specialized browser extension designed for bug bounty hunters and security engineers that facilitates the extraction of endpoints, parameters, and sensitive indicators from JavaScript and network activity. Notable features include advanced inline and external JavaScript parsing, network request capturing, and automatic extraction capabilities using safe synthetic interactions, all while maintaining user privacy through local processing. Additionally, it supports scope filtering across multiple domains/subdomains to refine focus on specific targets.

Anti-Debugger Bypass is a Chrome extension designed to circumvent various client-side JavaScript anti-debugging mechanisms that can disrupt developer tools. It features capabilities such as intercepting `eval("debugger")` calls, preventing aggressive script redirects, and protecting console outputs while providing a smooth debugging experience for security researchers and penetration testers. The extension injects scripts to neutralize traps at the document start, ensuring that users can explore and inspect web elements without interference from anti-debugging practices.

BlackInspect is a versatile Tampermonkey userscript that integrates an extensive suite of web inspection, spoofing, and hacking tools directly into any webpage. Its primary use case includes tasks such as real-time server data analysis, JavaScript variable manipulation, advanced password management, and the ability to inject arbitrary JavaScript code while also providing features like canvas fingerprint spoofing and XSS injection. Key functionalities include a customizable floating panel, automated setting storage, and domain-specific restriction breaking, catering to cybersecurity professionals and enthusiasts alike.

Frida Setup is an installer script designed to facilitate the bypass of SSL pinning in Android applications by automating the installation of Frida and configuring Burp's certificate. The tool is primarily used with Genymotion Emulator or an appropriately configured ADB environment, enabling seamless interaction for SSL interception. Notable features include automatic installation of Frida and its tools, fetching the latest Frida server, downloading Burp's proxy certificate, and cleaning up post-installation requirements for a clean workflow.

Noxen is an Android runtime interception tool designed for security researchers, leveraging Frida to dynamically hook Java methods within live Android processes. It enables the analysis of app component interactions by capturing events such as `Intent` objects, allowing users to inspect, modify, and control the flow of these events through a terminal user interface. Notable features include the ability to manipulate intent parameters, store session histories in project files, and utilize filters for intercepts and logs, enhancing the thoroughness of security assessments.

PenScope is a comprehensive Chrome extension designed for bug bounty hunters, enabling automated map and probe functionalities within web applications. It autonomously scans an attack surface, identifies potential vulnerabilities, and generates HackerOne-format reports for critical findings, streamlining the workflow significantly. Notable features include enhanced probing capabilities with 45 attack vectors, extensive secret pattern recognition, and the ability to decode JWTs and log sensitive information without sending data until prompted by the user.

ReconPro is a web reconnaissance tool catering to cybersecurity professionals and bug bounty hunters, facilitating the rapid identification of vulnerabilities through a curated library of Google dorks. It features a smart preset system for common scenarios, supports dual themes, and operates cross-platform without external dependencies, allowing users to easily execute targeted searches for specific vulnerabilities.

The Solana Security Standard (SOL-0XX) is a tool that integrates security rules into development environments to detect Solana-specific vulnerabilities in real time, based on insights from $514M worth of exploits. It features a comprehensive set of 52 rules covering various bug classes, with support for multiple IDEs and CI tools, and allows for easy installation through plugins for different platforms. This tool emphasizes immediate feedback on potential security issues as developers write code for Solana programs.

ffuf-GUI is a web-based fuzzing tool designed for penetration testing and security assessments, providing a user-friendly interface to automate fuzzing tasks directly from a browser. Key features include support for multiple attack modes (GET, POST, custom headers), real-time result display, response filtering, and the ability to export results in various formats. This tool is built for cross-platform compatibility, working seamlessly on Linux, Windows, Mac, and Android devices.

open·kritt is an open-source security research platform designed to orchestrate AI agents for the identification and validation of vulnerabilities in code repositories. It enables users to create custom workflows for security research, run scans on local or remote codebases, and prioritize findings with configurable severity rankings and automatic de-duplication. Notably, it supports integration with various AI model providers, allowing for flexible model access and requiring minimal setup for operation.

OWASP ASST (Automated Software Security Toolkit) is an open-source, command-line web vulnerability scanner primarily focused on detecting security flaws in PHP and MySQL applications, while also capable of being extended to support additional programming languages. It provides detailed reports that not only identify vulnerabilities but also offer explanations and remediation strategies, thus educating developers on securing their code. ASST uniquely aligns its scanning approach with the OWASP Top 10 Web Application Security Risks, enhancing its effectiveness in comprehensive vulnerability assessment.

Docker Registry UI provides a modern web interface for managing Docker registries with enhanced features such as vulnerability scanning through Trivy, bulk operations, and multi-registry support. It facilitates repository and tag management while offering storage analytics and a responsive design. The tool is designed for both local and production setups, allowing users to quickly deploy and manage registries efficiently.

Pentesting Cyber MCP is a framework that provides standardized server implementations for 50 popular security tools via the Model Context Protocol (MCP), facilitating automation in pentesting and bug bounty tasks. Each MCP server encapsulates a security tool with a uniform interface, making it interoperable with any MCP-compatible client and allowing seamless integration into security assessments. Notable features include a wide range of tools covering reconnaissance, vulnerability scanning, and exploitation, all accessible through standard MCP interfaces.

Vigil is an open-source, AI-powered security operations platform designed for comprehensive vulnerability management, incident response, and compliance tracking within a unified Express.js framework. Key features include six built-in scanners (Nmap, Nuclei, Trivy, Nikto, OpenSSL, DNS), 20 autonomous agents for parallel operations, and support for custom AI integrations, all while maintaining a lightweight architecture without external dependencies. The platform also offers advanced functionalities like role-based access control, two-factor authentication, and an encrypted credential vault for enhanced security.

The agent-security-scanner-mcp is a comprehensive security scanning tool designed for AI coding agents, providing functionalities to audit code, servers, prompts, and AI-generated packages for vulnerabilities. Key features include the ability to grade agent security, identify risks like SQL injection and package hallucinations, generate Software Bill of Materials (SBOMs), and facilitate semantic reviews using project context. The tool supports various AI platforms, ensuring robust integration and security checks before code execution.

NSAuditor AI is a modular, AI-assisted network security audit platform designed to assess and prioritize vulnerabilities without data exposure, operating entirely within your infrastructure. It utilizes 27 specialized scanning plugins to generate AI-powered vulnerability reports while ensuring zero data exfiltration, as all processes including analysis and monitoring are conducted offline and any external API calls are opt-in. This tool emphasizes privacy and security by ensuring that sensitive scan data never leaves the user's environment.

trawld is a package vulnerability monitoring tool designed for developer fleets, enabling continuous oversight of project dependencies across enrolled machines. It features a real-time dashboard for vulnerability tracking using a Cloud Brain and a global npm agent that automates project discovery, scheduled rescans, and maintains live status updates. With seamless onboarding and no code modifications required, trawld enhances security management for development environments.

Ghost Map Pro is a free, open-source Chrome extension that allows users to scrape Google Maps search results and export them as structured CSV files containing business leads, including details such as business name, contact information, and ratings. Notable features include email discovery through automatic website scraping, exhaustive output fields tailored for CRM integration, and a completely self-contained operation within the user's browser, eliminating the need for API keys or external servers.

IntelHub is an advanced browser-based OSINT toolkit designed for researchers, analysts, and investigators, enabling comprehensive analysis with tools for Telegram analysis, digital forensics, and local AI integration. Notable features include a privacy-first local AI agent for offline operations, real-time web searches via DuckDuckGo, local file analysis with metadata extraction, and an enhanced user interface for streamlined investigations.

Nyx is a reverse phone lookup tool designed to retrieve subscriber information associated with a phone number, such as usernames, photos, bios, and last activity data, primarily from instant messaging platforms like WhatsApp and Telegram. The tool emphasizes the vulnerabilities in these messaging applications, raising awareness of how their features can be exploited to harvest personal data. Users must operate within legal boundaries and obtain necessary permissions to use Nyx responsibly.

Social Media ID Cheatsheet is a tool designed to help users identify unique profile IDs for various social media platforms using source code analysis and OSINT techniques. This tool is particularly valuable for digital forensics and monitoring, as it allows users to maintain access to accounts even after changes to usernames or display names, supporting both API integration and data analysis needs. Notable features include support for multiple platforms like Instagram, Threads, TikTok, and 𝕏, ensuring comprehensive coverage for user ID tracking.

GHOST is a self-hosted OSINT investigation management system designed for individual investigators and researchers, offering a structured alternative to traditional spreadsheet-based tracking. Notable features include comprehensive people management with role-based categorization, interactive relationship visualization for entity networks, and a global intelligence map for geocoded location tracking. The tool emphasizes ease of use with a modern interface while enabling customizable case management capabilities.

God's Eye View is an open-source spatial intelligence tool that visualizes live data on a photorealistic 3D globe, incorporating public information regarding flights, vessels, and other elements. Its primary use case is to provide an interactive experience that allows users to explore real-time spatial data in an engaging, cockpit-like interface. Notable features include the ability to inspect code, integrate public data sources, and a visualization that enhances user understanding of global activity.

OSINT Agent Skills is a structured knowledge base that equips autonomous AI agents with the methodologies and operating procedures of a senior open-source intelligence analyst. It provides curated resources including pivotal playbooks, tool registries, and reporting templates, ensuring AI agents conduct informed investigations while adhering to ethical standards and avoiding misinformation. This agent-agnostic framework enhances the rigor of OSINT tasks, automating data collection and enabling detailed, source-cited reports.

Web Extension for saving a faithful copy of a complete web page in a single HTML file

SingleFile version compatible with Manifest V3

X-Posed is a browser extension for Chrome and Firefox that displays relevant account information from X's "About this account" panel next to usernames while browsing. Its primary use case includes inline account details like country flags, source icons, and location warnings, along with features such as timeline filters, evidence sharing, and user control over displayed indicators. Notable features include full account cards and customizable data management, enhancing users' ability to analyze account context without identifying physical locations.

Vanguard-Map is a real-time 3D tactical intelligence mapping tool that visualizes global moving entities such as ships, aircraft, satellites, and more, rendered as a dynamic terrain cloud. Its primary use case is to provide situational awareness for maritime and aerial traffic analysis, featuring high-resolution terrain options, scenario simulation capabilities, and live data integration through external APIs. The application supports customizable time control for simulating various scenarios and performs physics validation checks to ensure data integrity during movements.

OSINT NET Auditor is a desktop IP and port scanner application developed using Tauri, primarily for scientific and educational purposes. Key features include a user-friendly installation process, customizability through building from source using Node.js and Rust, and the capability to detect potential security vulnerabilities in network configurations. The app aims to provide an accessible tool for users interested in network auditing and security assessment.

Rosint.dev is a Reddit user intelligence tool that allows users to search the complete post and comment history of any Reddit account, including those with private profiles and deleted content. Its notable features include dual-source search functionality from Arctic Shift and PullPush, a user-friendly interface for viewing posts and comments, date range filtering, and pagination—all without requiring user login.

THUMPERSECURE is a comprehensive collection of tools aimed at facilitating open-source intelligence (OSINT) and enhancing privacy by enabling effective digital footprint management and reconnaissance. It targets investigators, privacy-conscious users, developers, and operators, offering a streamlined, user-friendly experience with an emphasis on clarity and automation. Notable features include a live Code Cookbook providing access to utilities for recon and workflow processes.

Hacker Proxy Pro is an open-source proxy controller designed for Firefox and Chrome that enables users to seamlessly switch between Direct, Burp Suite, and Tor connection modes. It is tailored for Bug Bounty Hunters and Web Application Penetration Testers, featuring one-click mode switching, a smart badge and icon system, and a lightweight architecture optimized for efficiency and minimal resource consumption. The tool aims to enhance the speed and reliability of live traffic interception and debugging processes.

FexCam is a proof of concept tool designed for security research and education, demonstrating the exploitation of modern web APIs, including camera and geolocation functionalities, upon user consent. Its primary use case is to foster awareness of social engineering tactics and the importance of browser permission management, featuring capabilities such as media stream processing, system metadata extraction, and geolocation precision. Notable functionalities include integration with tunneling services like Ngrok and Cloudflare, enabling secure external access to local servers for demonstration purposes.

NGL - Nefariously Generated Links is a phishing tool masquerading as a legitimate application for receiving anonymous messages on Instagram. Its primary use case is to exploit users' trust by tricking their followers into submitting Instagram login credentials through a deceptive interface that mimics the popular NGL.LINK service. Notable features include the ability to create cloaked phishing links that can be shared on Instagram, allowing users to clandestinely harvest sensitive information.

Pwnagotchi 64-Bit AI Edition is an advanced, high-performance adaptation of the Pwnagotchi project, optimized for 64-bit systems, leveraging PyTorch for enhanced AI inference and learning. Its primary use case involves automating Wi-Fi handshake capture through bettercap while intelligently adapting its behavior to varying environments based on reinforcement learning. Notable features include modernized AI engine support, a Kali Linux backbone for stable operation, and a Bluetooth Tethering Wizard for simplified connectivity setup.

find-cve-agent is an open-source tool designed for discovering real CVEs in open-source packages using a structured multi-agent approach. It features a comprehensive workflow encompassing target discovery, vulnerability validation, and responsible disclosure, equipped with a six-gate verification process to minimize false positives. This tool is particularly aimed at enhancing the effectiveness of security researchers by leveraging a coordinated team of agents specializing in different aspects of the vulnerability hunting process.

fsociety is a collection of offensive security plugins for Claude Code designed to facilitate penetration testing across various domains, including web applications, reverse engineering, and operational security. Each plugin offers a self-contained toolkit that includes specialized AI agents for automating multi-step operations, enhancing the effectiveness of security assessments. Noteworthy features include a comprehensive offensive lifecycle in plugins like elliot, and the ability to interactively set up engagements with tools for target selection and goal definition.

The iOS Penetration Testing Cheat Sheet serves as a comprehensive resource for security professionals engaging in penetration testing of iOS applications. It provides a structured list of tools, techniques, and resources specifically tailored for testing iOS environments, particularly focusing on jailbreak scenarios and tool usage on Kali Linux. Notable features include sections for inspecting IPAs, searching for sensitive files, and executing security best practices, alongside recommendations for further reading on relevant security standards and methodologies.

LeakScope is a tool designed for the discovery and analysis of exposed services and data leaks using Shodan and ZoomEye, enabling users to search, triage, preview, and dump relevant information accessible without authentication. Notable features include dual-provider discovery, customizable queries, and a comprehensive database that supports multiple data types and export options, all housed within a user-friendly interface that visually represents data usage and search statistics. The tool facilitates the identification of potential threats and vulnerabilities in various services without the need for exploitation, making it suitable for security researchers and IT professionals.

The Android Penetration Testing Cheat Sheet is a comprehensive reference guide aimed at security professionals conducting penetration tests on Android applications. It provides a structured checklist of tools, techniques, and methodologies optimized for use in a Kali Linux environment, highlighting critical tasks such as APK inspection, vulnerability exploitation, and various Android security configurations. Notable features include integration of resources from OWASP, practical tips for creating proof-of-concept apps, and a focus on common vulnerabilities and mitigation strategies for Android apps.

SUASS is a comprehensive repository designed to provide cybersecurity professionals and learners with a wide array of study materials, covering essential topics such as penetration testing, cloud security, mobile application security, network security, and more. This resource serves as a centralized hub for enhancing knowledge and skills in cybersecurity, offering practical learning pathways through Capture the Flag (CTF) challenges and recommendations for certifications. Notable features include categorized content for various security domains and links to external learning platforms and communities.

CyberChef MCP Server provides an interface for the Model Context Protocol (MCP) to utilize CyberChef's extensive library of 463 data manipulation operations, facilitating seamless integration with AI assistants for tasks such as encryption, encoding, and forensic analysis. Notable features include the ability to execute complex multi-step transformations with the `cyberchef_bake` tool, recipe management for saving and reusing workflows, and advanced enterprise capabilities like batch processing and telemetry analytics. This tool effectively bridges natural language AI intent with deterministic data processing capabilities.

Brash is a tool designed to exploit a critical vulnerability in the Blink rendering engine of Chromium-based browsers, allowing for a denial of service (DoS) attack through rapid updates of the `document.title` property. By circumventing rate limiting, it can generate millions of DOM mutations per second, causing browsers like Chrome and Edge to crash within seconds and significantly degrade system performance. The tool showcases an impactful attack vector that affects over 3 billion users, highlighting the need for vigilance against architectural flaws in web rendering engines.

WaSonar is a command-line interface tool designed for educational research and security assessments focused on the WhatsApp protocol. It facilitates real-time device tracking, device discovery, and profile extraction from linked devices, while also offering a resource exhaustion feature that can stress test the target by sending oversized payloads. Notably, WaSonar employs silent probes to determine online status without alerting the user and allows users to initiate rapid, high-frequency message deliveries to gauge system resilience.

The "Proof-of-Concept (PoC) Research Papers" repository aggregates recent academic papers focused on exploit generation, empirical analysis, and applications of Proof-of-Concept methodologies in cybersecurity. Its primary use case is to serve as a comprehensive resource for researchers and practitioners to access and contribute to the latest findings and developments in PoC research. Notable features include a well-organized categorization of papers by year and topic, making it easier to navigate the content and identify relevant studies.

Express Honeypot is a honeypot tool designed to detect and log remote file inclusion (RFI) and local file inclusion (LFI) attacks against web applications. It functions by serving fake URLs generated from a list of known vulnerable paths, dynamically logging any malicious requests, and downloading the attempted remote files for analysis. Key features include a lightweight log viewer and the ability to customize monitored URLs, making it an effective solution for catching and studying automated scanning bots.

EXT-REMOVER is a curated collection of exploits designed specifically for ChromeOS, facilitating various forms of system modifications and enhancements, such as unenrollment from management systems and disabling or freezing browser extensions. It includes notable capabilities like bypassing security measures, tampering with policies, and modifying system configurations, though users are cautioned against misuse that can cause significant damage. The repository serves as a resource for those seeking to explore the security aspects of ChromeOS within legal boundaries.

Padoracle is a Node.js tool designed to perform Padding Oracle Attacks, allowing users to crack plaintext from encrypted data using a known initialization vector (IV) and ciphertext. Its notable features include a user-friendly command-line interface (CLI), robust API support, the ability to generate IV and ciphertext with modified plaintext, and an ultra-fast cracking capability with unlimited concurrency. This tool is particularly useful for security researchers and professionals looking to exploit vulnerabilities in web applications utilizing padding oracle patterns.

Duolingo Max is a browser extension designed to modify the Duolingo website to provide unlimited hearts for users, thereby enhancing the learning experience without the limitations imposed by the platform. It supports both Chrome and Firefox, offering a straightforward installation process alongside a userscript option for mobile Safari, allowing for broad accessibility. Key features include access to specific domains for patching the Duolingo site, storage for user settings, and version synchronization capabilities for updates.

Termius Exporter is a tool designed to extract user data from the Termius SSH client, which has restricted export capabilities. Its primary use case is to liberate hosts, credentials, and keys, particularly for post-exploitation scenarios, by retrieving information such as saved SSH hosts, private keys, and command snippets. Notable features include its reliance on XSalsa20-Poly1305 encryption for data handling and the ability to output extracted data in structured CSV files.

tinf0il is a high-performance proxy portal that facilitates private browsing, streaming, and gaming through a combination of Scramjet proxy technology and libcurl transport. Its notable features include tab cloaking, stealth routing, a game and app catalog, and a comprehensive streaming interface for movies and TV shows with real-time sports event tracking. The platform also emphasizes privacy, with zero logs and customizable user preferences.

atomicgen.io is a web-based tool that simplifies the creation of Atomic Red Team tests by providing a user-friendly interface and automated YAML formatting. Its primary use case is to streamline security testing processes without the need for installation, allowing users to generate and manage tests directly through their browser. Notable features include customizable options and seamless integration with Docker for easy deployment.

Payload Obfuscator is an advanced browser-based tool designed for Red Team operations, enabling users to obfuscate payloads in multiple programming languages, including PowerShell, Python, Bash, C#, and Go. Key features include a fully client-side operation with no data transmission, the ability to combine up to eight modular obfuscation layers for enhanced evasion tactics, and context-aware parsing for maintaining code syntax integrity. The tool prioritizes security, providing real-time analysis for detection probability and ensuring it remains completely free and open-source.

The Offensive Security & DevSecOps Cheat Sheet is an interactive command reference designed for penetration testing and DevSecOps practices, featuring over 5040 commands organized into 53 categories and available in both English and Turkish. Notable features include a fully local operation with no telemetry, a fuzzy command palette for efficient searching, and the ability to add and manage personalized commands and profiles. It also integrates with MITRE ATT&CK tags for over 1,160 offensive commands, providing contextual security mapping and enhancing the tool's functionality for security professionals.

Cyberlivre is an open-source platform aimed at democratizing cybersecurity education by providing a structured journey through 20 practical modules, covering topics from basic infrastructure to advanced defense and exploitation techniques. Notable features include no registration or paywalls, a community-driven approach to content updates, and opportunities for collaboration through curriculum enhancements, challenge creation, and code improvements.

Frieren is a micro-framework designed for managing security tools on OpenWrt routers and Single Board Computers (SBCs). It features a web panel that facilitates WiFi management, network diagnostics, and an extensible module system, allowing users to install third-party modules while providing an integrated terminal and package management capabilities. The stack leverages a PHP backend and React frontend, ensuring both lightweight performance and flexibility for embedded devices.

HoneyAI is an all-in-one, AI-powered honeypot designed to proactively intercept and deceive attackers across various protocols using a local LLM. It generates dynamic, realistic responses to malicious attempts such as SQL injections and SSH logins, with customizable commands and automated reporting to multiple threat intelligence platforms. Notable features include a wide range of protocol emulation, real-time attack notifications, and the ability to integrate with any LLM, ensuring comprehensive coverage and adaptive defenses against cybersecurity threats.

OverQuack is a customizable HID automation tool designed for scripted payload execution, featuring an open-source platform that runs on Raspberry Pi Pico boards. Its notable capabilities include full DuckyScript support, wireless payload management via built-in Wi-Fi, and a browser-based IDE that enhances the development experience with real-time error checking and auto-completion. The tool is geared towards transparency and extensibility, making it suitable for educational purposes and research while providing a modern setup workflow.

Shells-X is a modular web shell framework designed for authorized penetration testing and security research, allowing users to deploy a single-file shell that incorporates various tools for executing commands, interacting with databases, and scanning ports. Its notable features include customizable builds with unique SHA256 fingerprints, an interactive environment for PHP and SQL commands, robust system diagnostics, and encrypted traffic handling. The framework also supports automatic detection of CMS/frameworks and provides a one-click export option for recon data to Faraday.

Browser Data Logger is a client-side JavaScript toolkit designed for authorized research and testing of browser telemetry and API capabilities. It modularly collects and aggregates data from various browser APIs, ensuring that failures in one area do not impact overall functionality, while providing real-time streaming of results via WebSocket and Telegram integration. The tool focuses on studying browser fingerprints, device metadata, and permissions, making it ideal for security research and educational purposes.

Code Abyss is a sophisticated tool designed to enhance AI coding agents with personality, consistent execution, and security expertise across various engineering domains. It offers customizable personas and styles, allowing for a tailored interaction experience, while possessing a robust skill library for effective judgment in technical scenarios. Notable features include support for four native security domains and a disciplined kernel that minimizes context overhead, ensuring agents respond with depth and specificity in diverse situations.

The Cybersecurity Interview Questions repository is a comprehensive collection of over 200 interview questions and answers, tailored for various roles in cybersecurity, including Red Team, Blue Team, and Incident Response. Its notable features include categorization by specific topics such as web security and internal network security, along with a user-friendly live site for browsing and searching content. The repository serves as a valuable resource for job seekers, students, and professionals looking to enhance their knowledge and prepare for cybersecurity interviews.

SilentSniffer is an educational tool designed as a web security diagnostic sandbox to demonstrate the extent of information exposure in modern web applications. Functioning entirely as a local client-side environment, it visually portrays how a user's device state and behavioral data can be accessed without consent, utilizing a zero-coupling dynamic plugin architecture for modular functionality. Notable features include a threat escalation hierarchy that categorizes information exposure severity and ensures no data leaves the user's device during operation.

WRAITH is a modern browser-hooking framework designed for red teams, security researchers, and educators, effectively merging the functionalities of traditional browser exploitation tools and blind-XSS frameworks into a single solution. It enables users to conduct authorized security testing by delivering both interactive post-exploitation capabilities and fire-and-forget blind-XSS callbacks in a manner suited for contemporary web applications, including those involving AI. Notable features include an operator console for session management, Docker support for deployment, and a generation of custom payloads for seamless integration into testing scenarios.

The Tinyactive Cosmos Marketplace is a software application designed for managing and accessing a variety of applications within the Cosmos ecosystem. Its primary use case is to facilitate the integration and deployment of apps such as 2FAuth and Activepieces, enhancing automation and security processes. Notable features include a streamlined interface for adding software sources and an extensive catalog of supported applications, promoting efficiency in application management.

DarkSide is a versatile cybersecurity tool designed for information gathering, social engineering, and exploit research, featuring an intuitive user interface. It offers capabilities such as bypassing Cloudflare, performing port scans, and accessing hacking tutorials, alongside integration for system information retrieval via malicious links. This tool supports multiple platforms including Linux and Windows, making it accessible for a broad user base.

rfparty-monitor is a wireless situational awareness and debugging tool that allows users to visualize and analyze Bluetooth Low Energy (BLE) data, along with GPS and Wi-Fi logs. It supports diverse platforms such as Android and Linux, and features capabilities like log retrieval and GPX conversion, making it suitable for both casual users and security professionals focusing on wireless monitoring and intrusion detection. Notable features include support for various GPS sources, a flexible installation process, and a roadmap for future enhancements like protocol improvements and real-time sharing alerts.

rfparty-xyz is a visualization tool designed to enhance the understanding of Bluetooth Low Energy (BLE) interactions. Its primary use case revolves around providing insights into BLE data through user-friendly displays, with complementary data collection capabilities available via rfparty-monitor. Notable features include cross-platform compatibility and support for mobile usage with an Android version.

Vulnshop is a deliberately insecure e-commerce web application designed for security training and penetration testing practice, featuring over 40 embedded vulnerabilities across various categories of web application security. Built on Node.js, it simulates a modern online shopping platform with functionalities like user authentication, product management, and an administrative dashboard, allowing users to practice real-world exploitation scenarios in a controlled environment. The tool facilitates educational engagement with critical security concepts, but should only be used in isolated setups to prevent exploitation in production contexts.

FastDork is a Chrome extension designed to enhance the efficiency of dork research and result scraping by allowing users to run multiple dork queries in batches, scrape results, and manage data through reusable lists. Notable features include custom site configurations using CSS selectors, automatic result importation, and support for generating searches across multiple tabs, significantly streamlining the workflow for security researchers and pentesters.

JSpider is an advanced JavaScript-based crawler and endpoint discovery tool designed for security researchers, facilitating the extraction of hidden API routes, sensitive parameters, and hardcoded secrets directly from websites. Notable features include automated checks for over 500 critical paths, parameter discovery, recursive crawling, high-fidelity secret detection for 40 patterns, and seamless authentication header handling to access secured endpoints. The tool operates entirely client-side, offering real-time tracking and analysis of extracted data in a straightforward dashboard.

JWT Security Checker is a comprehensive web-based platform designed for testing and analyzing JSON Web Token (JWT) security, aimed at penetration testers, security researchers, and developers. Key features include real-time JWT decoding and encoding, signature verification, a built-in dictionary for brute-forcing weak secrets, automated vulnerability scanning, and integration with various pentesting tools. The tool provides a modern user interface with support for multiple themes and real-time updates, enhancing the overall user experience during security assessments.

AIDA is an AI-driven autonomous pentesting agent designed for comprehensive security assessments of web applications, APIs, and infrastructure. It utilizes large language models to reason and understand application logic, execute commands in an isolated environment, and systematically document findings. Notable features include a fully equipped Docker execution environment with essential pentesting tools, on-the-fly Python script generation for custom exploitations, sophisticated HTTP request manipulation, and persistent logging for detailed results.

Ghostbadger is a PDF rendering engine that automates the generation of secure, password-protected PDF reports by leveraging Ghostwriter's GraphQL API for content and integrating with Vaultwarden for secure client delivery. Notable features include the ability to customize templates, utilize a streamlined Docker setup for deployment, and manage sessions through client-side cookies, ensuring flexibility for internal workflows. This tool is designed to be adapted for specific needs, requiring customization for production use.

KeyFinder is a browser extension designed for Chrome and Firefox that passively scans web pages for leaked API keys, tokens, and secrets. With over 80 detection patterns across multiple categories such as cloud services, payments, and databases, it operates silently in the background, leveraging techniques like entropy analysis and monitoring various attack surfaces to identify sensitive information. Notable features include zero dependencies, compatibility with modern web standards (Manifest V3), and the ability to alert users via tab badges when potential exposures are detected.

Bug-Bounty-Tampermonkey-Scripts is a collection of user scripts designed for use with the Tampermonkey browser extension, aimed specifically at enhancing the bug bounty hunting process. The primary use case includes automating the extraction of URLs, titles, domains, and specific URL counts from Google search results, facilitating more efficient data gathering for security researchers. Notable features include customizable script functions that streamline the workflow for gathering and analyzing relevant information during bounty hunting activities.

The Pentesting-and-Hacking-Scripts repository is a comprehensive collection of scripts designed to facilitate learning and practical application in penetration testing and exploitation of system vulnerabilities. It caters to both beginner "script kiddies" and advanced pentesters by offering organized scripts in various programming languages, including Python and Bash, while emphasizing responsible usage for educational purposes. Notable features include categorized scripts targeting different vulnerabilities and thorough documentation to guide users in their cybersecurity education.

4ndr0tools is a collection of userscripts designed to enhance digital sovereignty by countering anti-user web practices and empowering users with control over their browsing experience. Notable features include modular design for customizable implementation, transparent and auditable code, and a focus on anti-platform functionalities that resist modern web manipulations. This suite caters to advanced users and red team engagements, promoting a minimalist and performance-oriented approach to web interactions.

PHANTOM is an AI-powered penetration testing command center designed to autonomously execute a range of security tasks without requiring constant human input. It features real-time tool execution, a multi-agent architecture for parallel processing, and self-improvement capabilities to enhance its toolset over time, all while providing a user-friendly dark UI and persistent context retention across sessions.

ADB WebKit is a browser-based tool designed for managing Android devices via ADB (Android Debug Bridge) with an intuitive user interface. Its primary use case includes functionalities like application management (installing, uninstalling, granting permissions), shell access, screen capture, and device control commands, making it a comprehensive solution for developers and testers. Notable features include support for live application management, real-time screen interactions, and various device control options, all accessible through a USB connection or IP address.

The AI Website Cloner Template is a sophisticated tool designed to reverse-engineer any website into a modern Next.js codebase using AI coding agents. By pointing the tool at a target URL, it performs a comprehensive analysis to extract design tokens and assets, generate component specifications, and facilitate parallelized reconstruction of the site’s sections. Key features include support for multiple AI agents, a detailed multi-phase cloning pipeline, and compatibility with modern web technologies like Next.js and Tailwind CSS.

Debundle is a tool designed to unpack JavaScript bundles generated by Webpack and Browserify, facilitating reverse engineering and analysis by converting minified code back into a more readable file structure. Notably, it allows users to specify configuration options for various bundling types and outputs organized directories containing the original modules, though it does not guarantee a lossless recovery of the original source code. The project is no longer maintained, and users are advised to exercise caution as it may not perform reliably on all real-world bundles.

Ethereum-lists is a collaborative repository that maintains and updates lists of malicious URLs, fake token addresses, Ethereum addresses, and contract details, facilitating community contributions through pull requests. Its primary use case is to serve as a resource for users to identify and avoid phishing attempts and fraudulent tokens within the Ethereum ecosystem. Notable features include an easily accessible structure for submitting changes and clear guidelines for contributions, promoting community involvement in enhancing security awareness.

Search and browse documents and data; find the people and companies you look for.

Documentation:

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

Socket-based TS/JavaScript API for WhatsApp Web

Captfencoder is opensource a rapid cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, miscellaneous tools, and aggregating all kinds of online tools.

python爬虫项目合集，从基础到js逆向，包含基础篇、自动化篇、进阶篇以及验证码篇。案例涵盖各大网站(xhs douyin weibo ins boss job，jd...)，你将会学到有关爬虫以及反爬虫、自动化和验证码的各方面知识

Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.

[Official] Android reverse engineering tool focused on dynamic instrumentation automation leveraging Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.

A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

Loads environment variables from .env for nodejs projects.

a secure dotenv–from the creator of `dotenv`

pull decrypted ipa from jailbreak device

A tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform

A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.

A container repository for my public web hacks!

A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.

Matkap - hunt down malicious Telegram bots

The best IP Toolbox. Easy to check what's your IPs, IP geolocation, check for DNS leaks, examine WebRTC connections, speed test, ping test, MTR test, check website availability, whois search and more! || 可能是最好用的IP工具箱。轻松检查你的 IP，IP 地理位置，检查DNS泄漏，检查 WebRTC 连接，速度测试，ping 测试，MTR测试，检查网站可用性，查询 Whois 信息等等。

safely install npm packages by auditing them pre-install stage

OSINT Framework

Pikachu Volleyball reimplemented in JavaScript by reverse engineering the original game

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

A reverse engineering of Linear's sync engine. Endorsed by Linear CTO.

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

🕵 Tracking things, so you don't have to

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

A cross-platform note-taking & target-tracking app for penetration testers.

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

Computer vision assisted tool to extract numerical data from plot images.

XSS'OR - Hack with JavaScript.