The Network Execution Tool
active-directory
hacking
infosec
infosectools
networks
pentest
pentest-tool
pentest-tools
pentesting
python
python3
red-team
security
security-tools
windows
Updated 2026-11-07 07:30:22 -10:00
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
ai-security
anthropic
application-security
bug-bounty
bugbounty
bugcrowd
claude
claude-code
claude-skills
ethical-hacking
hackerone
offensive-security
pentesting
red-team
security-tools
web-security
Updated 2026-11-07 01:07:53 -10:00
Adversary Emulation Framework
adversarial-attacks
adversary-simulation
c2
command-and-control
dns
dns-server
golang
gplv3
http
implant
red-team
red-team-engagement
red-teaming
security-tools
sliver
Updated 2026-11-06 17:57:17 -10:00
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
ai-penetration-testing
ai-security
api-security
appsec
ci-cd
cybersecurity
devsecops
ethical-hacking
offensive-security
owasp
penetration-testing
pentesting
pentesting-tools
red-teaming
sarif
security
security-audit
security-automation
security-testing
security-tools
Updated 2026-11-06 06:43:37 -10:00
🤖 The Modern Port Scanner 🤖
Updated 2026-11-03 23:29:26 -10:00
Gather and update all available and newest CVEs with their PoC.
cve
cve-poc
exploit
hacking
infosec
latest-cve
penetration-testing
pentesting
poc
red-team
security
security-tools
software-security
software-vulnerabilities
software-vulnerability
vulnerabilities
vulnerability
Updated 2026-10-16 03:59:57 -09:00
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
automated-pentesting
bruteforce
cybersecurity
e-paper
hacking
hardware-hacking
network-scanning
network-security
nmap
offensive-security
pentesting
python
raspberry-pi
security-tools
tamagotchi
vulnerability-assessment
Updated 2026-05-05 02:11:19 -09:00
Convolutional neural network for analyzing pentest screenshots
Updated 2026-03-08 11:43:43 -09:00
Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
fuzzy-matching
gist-search
gists
github-api
osint
python
recon
reconnaissance
security
security-scanner
security-tools
sensitive-data-exposure
Updated 2024-03-07 03:48:47 -10:00
Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
Updated 2021-02-19 08:47:05 -10:00
A ZigBee hacking toolkit by Bishop Fox
Updated 2021-01-05 06:42:49 -10:00
RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
Updated 2020-12-08 02:51:04 -10:00
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
Updated 2020-09-15 10:25:46 -09:00
Find cloud assets that no one wants exposed 🔎 ☁️
amazonaws
api-documentation
attack-surface
aws
blueteam
cloud
cloud-security
infosec
penetration-testing
security-engineer
security-tools
Updated 2020-07-20 11:26:15 -09:00
Scripts to clone CA certificates for use in HTTPS client attacks.
Updated 2020-03-26 10:55:51 -09:00
Search exposed EBS volumes for secrets
Updated 2020-02-05 12:31:52 -10:00
Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
Updated 2020-01-15 07:01:49 -10:00
PoC code from DEF CON 25 presentation
Updated 2017-08-02 08:00:06 -09:00
Seed recovery tool for PRNGs
Updated 2015-08-25 09:17:42 -09:00