Repositories list

• objection

  Public
  📱 objection - runtime mobile exploration

  androidsecurityios+ 5

  androidsecurityiosmobileframeworkinstrumentationpentestfrida

  Python

  •

  GNU General Public License v3.0

  •965965 forks•9k9k stars•5151 issues•99 pull requests•Updated Apr 12, 2026Apr 12, 2026

• susinternals

  Public
  psexecsvc - a python implementation of PSExec's native service implementation

  Python

  •

  GNU General Public License v3.0

  •3030 forks•299299 stars•00 issues•00 pull requests•Updated Mar 24, 2026Mar 24, 2026

• DotNetHookerToolkit

  Public
  C#

  •00 forks•1212 stars•00 issues•00 pull requests•Updated Mar 2, 2026Mar 2, 2026

• go-out

  Public
  ☄️ go-out - A Golang egress buster.

  securitynetworkscanner+ 2

  securitynetworkscannerbusteregress-filtering

  Go

  •

  GNU General Public License v3.0

  •1313 forks•127127 stars•33 issues•11 pull request•Updated Feb 6, 2026Feb 6, 2026

• gowitness

  Public
  🔍 gowitness - a golang, web screenshot utility using Chrome Headless

  golangsecurityscreenshot+ 8

  golangsecurityscreenshotchromewebreportingheadlessfingerprinttechnologieschrome-headless+ 1

  Go

  •

  GNU General Public License v3.0

  •428428 forks•4.2k4.2k stars•2525 issues•77 pull requests•Updated Jan 21, 2026Jan 21, 2026

• pipetap

  Public
  A Windows Named Pipe Multi-tool / Proxy

  researchproxynamedpipe

  researchproxynamedpipe

  C++

  •

  GNU General Public License v3.0

  •2222 forks•320320 stars•11 issue•00 pull requests•Updated Dec 7, 2025Dec 7, 2025

• CVE-2025-64446

  Public
  A scanner for the FortiNet vulnerability CVE-2025-64446

  cve-2025-64446

  cve-2025-64446

  Python

  •66 forks•3030 stars•00 issues•00 pull requests•Updated Nov 18, 2025Nov 18, 2025

• hash-cracker

  Public
  Script to perform some hashcracking logic automagically

  automationbruteforcetoggle+ 17

  automationbruteforcetogglecombinatormd5ntlmhybridhasheshacktoberfesthashcat+ 10

  C

  •

  GNU General Public License v3.0

  •1313 forks•8383 stars•00 issues•00 pull requests•Updated Nov 12, 2025Nov 12, 2025

• wpswag

  Public
  Create an OpenAPI/Swagger spec from a WordPress REST entry point.

  Python

  •22 forks•77 stars•00 issues•00 pull requests•Updated Sep 10, 2025Sep 10, 2025

• bloatware-pwn

  Public
  LPE / RCE Exploits for various vulnerable "Bloatware" products

  C#

  •55 forks•8787 stars•00 issues•00 pull requests•Updated Aug 5, 2025Aug 5, 2025

• depscanner

  Public
  Detect public repository dependencies in the GitHub repositories with an orphan required library.

  Python

  •

  GNU General Public License v3.0

  •11 fork•2424 stars•00 issues•00 pull requests•Updated Jun 24, 2025Jun 24, 2025

• shellnot

  Public
  Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed.

  shellsocketreverse-shell+ 4

  shellsocketreverse-shellproxysessionrcebind-shell

  C

  •

  GNU General Public License v3.0

  •33 forks•4545 stars•00 issues•00 pull requests•Updated Jun 12, 2025Jun 12, 2025

• mallet

  Public
  Mallet is an intercepting proxy for arbitrary protocols

  netty

  netty

  Java

  •4242 forks•290290 stars•1313 issues•11 pull request•Updated Apr 14, 2025Apr 14, 2025

• capchan

  Public
  Solving CAPTCHA with Image Classification

  Python

  •

  GNU General Public License v3.0

  •00 forks•1010 stars•00 issues•00 pull requests•Updated Mar 13, 2025Mar 13, 2025

• dresscode

  Public
  Scan websites CSP policies and visualise their vunlnerabilities from a dashboard

  csp

  csp

  Python

  •

  GNU General Public License v3.0

  •22 forks•1313 stars•00 issues•00 pull requests•Updated Mar 11, 2025Mar 11, 2025

• InvokeADCheck

  Public
  InvokeADCheck is a PowerShell module designed to evaluate the security of Active Directory environments.

  PowerShell

  •

  BSD 3-Clause "New" or "Revised" License

  •1515 forks•118118 stars•44 issues•00 pull requests•Updated Mar 10, 2025Mar 10, 2025

• goLAPS

  Public
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.

  Go

  •

  GNU General Public License v3.0

  •88 forks•8787 stars•00 issues•00 pull requests•Updated Mar 6, 2025Mar 6, 2025

• reGeorg

  Public
  The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

  Python

  •

  Other

  •827827 forks•3.2k3.2k stars•1616 issues•44 pull requests•Updated Mar 6, 2025Mar 6, 2025

• thumbscr-ews

  Public
  Exchangelib wrapper for pentesting

  Python

  •1010 forks•6767 stars•00 issues•00 pull requests•Updated Feb 17, 2025Feb 17, 2025

• berate_ap

  Public
  Script for orchestrating mana rogue WiFi Access Points.

  Shell

  •

  BSD 2-Clause "Simplified" License

  •1k1k forks•246246 stars•11 issue•00 pull requests•Updated Feb 3, 2025Feb 3, 2025

• mail-in-the-middle

  Public
  Python

  •

  GNU General Public License v3.0

  •1010 forks•108108 stars•00 issues•00 pull requests•Updated Nov 7, 2024Nov 7, 2024

• Frack

  Public archive
  Frack - Keep and Maintain your breach data

  osintbreaches

  osintbreaches

  Python

  •

  GNU General Public License v3.0

  •2929 forks•386386 stars•00 issues•00 pull requests•Updated Sep 1, 2024Sep 1, 2024

• hostapd-mana

  Public
  SensePost's modified hostapd for wifi attacks.

  C

  •

  Other

  •131131 forks•608608 stars•2020 issues•11 pull request•Updated Aug 5, 2024Aug 5, 2024

• steampipe-plugin-projectdiscovery

  Public archive
  A steampipe plugin to query projectdiscovery.io tools.

  projectdiscoverysteampipesteampipe-plugin

  projectdiscoverysteampipesteampipe-plugin

  Go

  •

  Apache License 2.0

  •11 fork•2727 stars•00 issues•11 pull request•Updated Jul 23, 2024Jul 23, 2024

• cipherchecks

  Public
  visually see issues with supported cipher suites

  Python

  •

  GNU General Public License v3.0

  •88 forks•1818 stars•11 issue•00 pull requests•Updated Jun 18, 2024Jun 18, 2024

• ruler

  Public
  A tool to abuse Exchange services

  exchangemapipentesting+ 1

  exchangemapipentestingshells

  Go

  •

  Other

  •363363 forks•2.3k2.3k stars•1313 issues•11 pull request•Updated Jun 10, 2024Jun 10, 2024

• apostille

  Public
  Java

  •

  Other

  •1919 forks•7676 stars•11 issue•00 pull requests•Updated May 23, 2024May 23, 2024

• assless-chaps

  Public
  Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

  Python

  •1818 forks•141141 stars•11 issue•00 pull requests•Updated Mar 19, 2024Mar 19, 2024

• mydumbedr

  Public
  C

  •

  GNU General Public License v3.0

  •1717 forks•119119 stars•00 issues•00 pull requests•Updated Jan 30, 2024Jan 30, 2024

• wiresocks

  Public
  A sock, with a wire, so you can tunnel all you desire.

  Shell

  •

  GNU General Public License v3.0

  •3232 forks•296296 stars•22 issues•00 pull requests•Updated Jan 19, 2024Jan 19, 2024