In support of NSA's Cybersecurity mission, Ghidra was built to solve scaling and teaming problems on complex SRE efforts, and to provide a customizable and extensible SRE research platform.
Global
#289 · +106 · 1d ·GitHub
A collection of various awesome lists for hackers, pentesters and security researchers
Hunt down social media accounts by username across social networks
#609 · +48 · 1d ·GitHub
Poke the DRAM controller and an address can be made to land wherever you want in memory. skitter-creek-bath-salts modifies the bottom layers of the memory hierarchy to rewire the physical DRAM address translations.
#666 · +43 · 1d ·GitHub
818 production-grade cybersecurity skills · 34 security domains · 6 framework mappings · 26+ AI platforms
#824 · +33 · 1d ·GitHub
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
#884 · +31 · 1d ·GitHub
A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence (OSINT) is intelligence collected from publicly available sources.
#914 · +30 · 1d ·GitHub
List of awesome reverse engineering resources
IPcook provides reliable residential proxies for online research, username discovery, and public data collection workflows. 2/GB.
#1044 · +26 · 1d ·GitHub
claude-red is a curated library of offensive security skills designed for the Claude skills system. md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
#1127 · +23 · 1d ·GitHub
SpiderFoot is an open source intelligence (OSINT) automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate.
#1564 · +15 · 1d ·GitHub
The Metasploit Framework is an open-source tool released under a BSD-style license. For detailed licensing information, refer to the COPYING file.
#2012 · +11 · 1d ·GitHub
ProxyBridge is a lightweight, open-source universal proxy client (Proxifier alternative) that provides transparent proxy routing for applications on Windows, macOS, and Linux.
Sigma is a generic and open signature format that allows you to describe relevant log events in a straightforward manner. The rule format is very flexible, easy to write and applicable to any type of log file.
#2832 · +6 · 1d ·GitHub
theHarvester gathers open-source intelligence about a domain or organization from search engines, certificate transparency logs, DNS datasets, code repositories, threat-intelligence platforms, and other public sources.
Dirty Frag is a case that extends the bug class to which Dirty Pipe and Copy Fail belong.
#3239 · +5 · 1d ·GitHub
Comprehensive OSINT platform for professional investigators and analysts. Reverse email, phone number, and username search across 250+ modules. Automate your intelligence gathering with our powerful tools.
A GitHub CLI extension to enable security features on repositories following best practices from GitHub Security Lab.
dirsearch is being actively developed by @maurosoria and @shelld3v.
#3533 · +4 · 1d ·GitHub
-5-BugBounty — “Let me reset your password and login into your account “-How I was able to Compromise any User Account via Reset Password Functionality:
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
#3599 · +4 · 1d ·GitHub
Most of the resources listed below provide lists and/or APIs to obtain (hopefully) up-to-date information with regards to threats. Some consider these sources as threat intelligence, opinions differ however.
This is an Internet-scale port scanner. It can scan the entire Internet in under 5 minutes, transmitting 10 million packets per second, from a single machine.
These tools search for possible local privilege escalation paths that you could exploit and print them to you with nice colors so you can recognize the misconfigurations easily.
#3983 · +3 · 1d ·GitHub
Defund the Police.
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
More elaborate documentation that goes through many features with a lot of examples is available in the ffuf wiki at
This repository is an overview of what you need to learn penetration testing and a collection of hacking tools, resources and references to practice ethical hacking. Most of the tools are UNIX compatible, free and open source.
Damn Vulnerable Web Application (DVWA) is a PHP/MariaDB web application that is damn vulnerable.